Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N0TiwdKw31PpxK6oKJ9sTdYEMUc.roa
File: N0TiwdKw31PpxK6oKJ9sTdYEMUc.roa (raw, json)
Hash identifier: 8UPhXz8/6pC0A1iQteO6eDEeqevfOO6iCeRKsw0XYqU=
Subject key identifier: 37:44:E2:C1:D2:B0:DF:53:E9:C4:AE:A8:28:9F:6C:4D:D6:04:31:47
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4D65DCC28F40F0FE2FC67D9CFA34DBF9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N0TiwdKw31PpxK6oKJ9sTdYEMUc.roa
Signing time: Sun 17 Mar 2024 17:11:45 +0000
ROA not before: Sun 17 Mar 2024 17:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:65:dc:c2:8f:40:f0:fe:2f:c6:7d:9c:fa:34:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 17:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3744e2c1d2b0df53e9c4aea8289f6c4dd6043147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:aa:62:00:d8:5c:7a:37:5a:a4:f1:13:a4:
06:1e:f5:6b:70:65:c5:b5:a8:f1:12:60:d7:bc:5b:
e7:e1:b3:37:58:1f:00:9b:c3:07:b4:e5:08:45:bb:
a1:55:ce:83:c0:31:db:72:68:f3:40:53:2e:17:7c:
ec:f4:9e:a2:71:76:98:c1:b0:c1:b3:03:a8:0e:70:
bc:ed:0d:9d:29:93:d6:1e:34:d1:c0:3e:24:57:43:
da:7e:00:5b:66:fc:8e:2a:5f:b1:fc:3d:16:e8:eb:
8f:dd:c5:b5:7e:42:41:35:05:90:56:5d:1c:82:a5:
9b:6e:45:0d:0c:e7:4d:74:7f:41:41:9a:75:9b:20:
11:45:7c:24:c4:aa:0a:50:96:56:80:b2:e1:61:ac:
85:2e:d8:7a:2f:d3:3c:87:ee:a0:6e:82:c2:15:9b:
e7:8f:8e:4f:10:a0:85:9a:f7:68:31:6a:35:79:ba:
fb:b5:50:dd:e8:43:ff:cd:da:5f:39:f4:a1:9c:cb:
e4:36:89:47:d5:a3:e3:a2:ce:13:b0:6d:bf:ee:4b:
c1:5f:50:31:7e:ff:80:2d:30:db:65:79:b2:9f:26:
b4:21:77:28:a8:c7:c9:56:e2:3c:b9:4f:0d:2e:7f:
c1:fa:f0:c4:6d:82:db:74:bb:33:4c:a1:67:6e:db:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:E2:C1:D2:B0:DF:53:E9:C4:AE:A8:28:9F:6C:4D:D6:04:31:47
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N0TiwdKw31PpxK6oKJ9sTdYEMUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:2f:ae:6a:9e:ab:9d:e3:6e:e6:ec:5d:7b:ae:73:57:c4:b0:
f8:10:46:2d:51:b3:38:69:b9:66:4b:54:5c:6b:ca:aa:49:6e:
74:a3:43:e4:ed:99:81:01:f3:53:fd:5f:63:3d:10:a5:4d:38:
2b:05:4f:de:4f:9e:6b:f2:69:ca:b2:fa:c7:df:78:b8:06:ec:
ff:94:ae:97:1c:36:05:2d:3c:4f:f1:04:f7:bd:cd:d9:d5:ca:
36:4c:18:2b:a5:0f:03:fb:f3:40:54:0a:4b:a3:1b:bd:a3:a4:
f0:52:78:41:15:f9:0f:6c:37:3f:07:87:84:80:5d:3c:b3:fc:
dd:df:96:99:e3:45:d8:f8:e6:fc:9b:b0:c9:93:4a:32:cd:2e:
a8:cd:d4:c0:45:65:0d:23:5b:b1:95:d3:7f:8c:78:b5:23:5d:
ae:24:2a:02:9a:b3:43:5c:18:4d:9f:ca:55:f8:8f:ad:83:24:
98:93:2a:f4:41:60:32:4a:71:cb:dc:70:a5:45:94:f8:86:41:
2a:0b:7d:cb:a8:fd:5a:78:ac:be:0b:ce:38:5a:9b:52:45:47:
a8:cd:b8:46:d0:d7:38:a2:87:3c:ce:6b:fd:46:11:f4:3e:38:
7a:f7:d3:12:ea:4e:6a:b8:12:39:c2:97:97:4e:4e:35:fc:1a:
e9:c2:d6:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5NZdzCj0Dw/i/GfZz6NNv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE3MTcxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQ0ZTJjMWQyYjBkZjUzZTljNGFlYTgyODlmNmM0ZGQ2MDQzMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyyqYgDYXHo3WqTxE6QGHvVrcGXF
tajxEmDXvFvn4bM3WB8Am8MHtOUIRbuhVc6DwDHbcmjzQFMuF3zs9J6icXaYwbDB
swOoDnC87Q2dKZPWHjTRwD4kV0PafgBbZvyOKl+x/D0W6OuP3cW1fkJBNQWQVl0c
gqWbbkUNDOdNdH9BQZp1myARRXwkxKoKUJZWgLLhYayFLth6L9M8h+6gboLCFZvn
j45PEKCFmvdoMWo1ebr7tVDd6EP/zdpfOfShnMvkNolH1aPjos4TsG2/7kvBX1Ax
fv+ALTDbZXmynya0IXcoqMfJVuI8uU8NLn/B+vDEbYLbdLszTKFnbtvhWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDdE4sHSsN9T6cSuqCifbE3WBDFHMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTjBUaXdkS3czMVBweEs2b0tKOXNUZFlFTVVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ0vrmqeq53jbubsXXuu
c1fEsPgQRi1RszhpuWZLVFxryqpJbnSjQ+TtmYEB81P9X2M9EKVNOCsFT95Pnmvy
acqy+sffeLgG7P+UrpccNgUtPE/xBPe9zdnVyjZMGCulDwP780BUCkujG72jpPBS
eEEV+Q9sNz8Hh4SAXTyz/N3flpnjRdj45vybsMmTSjLNLqjN1MBFZQ0jW7GV03+M
eLUjXa4kKgKas0NcGE2fylX4j62DJJiTKvRBYDJKccvccKVFlPiGQSoLfcuo/Vp4
rL4Lzjham1JFR6jNuEbQ1ziihzzOa/1GEfQ+OHr30xLqTmq4EjnCl5dOTjX8GunC
1rQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:38 2025 by rpki-client