Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBJ-TwJrwqae3cfaccFiePnk1ck.roa
File: PBJ-TwJrwqae3cfaccFiePnk1ck.roa (raw, json)
Hash identifier: qT4UqovFzE32HNtj1DqYgfrbsrRCuwvKxvVHeX4ZA64=
Subject key identifier: 3C:12:7E:4F:02:6B:C2:A6:9E:DD:C7:DA:71:C1:62:78:F9:E4:D5:C9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA972C1CDD5A7DEA46DA7726985CA8B21
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBJ-TwJrwqae3cfaccFiePnk1ck.roa
Signing time: Thu 04 Apr 2024 14:10:53 +0000
ROA not before: Thu 04 Apr 2024 14:10:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:72:c1:cd:d5:a7:de:a4:6d:a7:72:69:85:ca:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 14:10:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c127e4f026bc2a69eddc7da71c16278f9e4d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:44:1b:ce:39:94:ca:91:51:db:ea:0a:bc:
47:d5:84:86:e0:6c:f9:23:5d:07:28:0a:ae:98:e2:
5c:80:64:fd:41:ba:b2:37:a3:e0:6f:a6:7e:a5:aa:
b6:5b:b6:39:fa:dc:19:d5:54:4c:d6:4a:47:19:a0:
3f:48:27:44:72:87:21:7e:5f:b1:41:6e:80:49:df:
3e:87:37:85:83:a0:21:e7:91:35:6a:eb:0d:f9:59:
47:67:80:03:07:cb:3a:6a:06:cf:3b:f2:79:b6:17:
d1:77:f8:7b:62:51:1f:96:8c:0a:a8:30:bb:00:76:
f8:54:c4:fa:5b:a4:18:8e:f9:68:4f:3f:b0:e0:6d:
43:b5:ac:45:bd:01:d5:1f:f9:86:ac:bc:7f:5b:c1:
0b:3f:88:fc:92:56:6e:c7:03:aa:42:40:7d:ee:0a:
49:05:76:93:38:84:2e:36:26:cf:7a:87:a6:c7:45:
a7:40:eb:e1:43:b6:7e:45:74:ef:81:36:e6:c0:53:
bf:46:83:d4:00:1e:a5:b8:41:24:ee:16:52:c4:af:
2a:5b:d3:b5:33:80:c1:b6:2c:4a:2d:0b:95:a3:75:
4e:f2:3e:b6:57:0b:65:4d:40:6b:6c:ea:50:11:49:
24:8a:ed:b7:4c:e2:19:bf:ff:ce:dc:cb:61:a9:56:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:7E:4F:02:6B:C2:A6:9E:DD:C7:DA:71:C1:62:78:F9:E4:D5:C9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBJ-TwJrwqae3cfaccFiePnk1ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:35:c0:62:ae:71:1c:d7:eb:a9:e3:ad:72:27:b5:ce:44:f8:
6f:7e:d6:3c:2d:c5:ab:28:9a:3f:79:4d:f2:3c:48:54:66:4f:
11:0e:51:c5:1a:04:a8:f5:5e:4e:1c:34:16:69:bc:6f:f7:38:
45:ed:c4:71:5a:12:32:7f:5c:2f:9d:b5:ac:97:6d:63:9a:60:
ef:3d:fa:7b:80:0c:fb:42:a0:76:45:c3:1e:12:2c:ab:0a:e6:
2e:3e:1b:8e:62:6f:17:7a:93:cf:1a:cd:72:43:a4:32:02:c5:
61:2e:f2:2b:7a:0b:54:75:64:5c:2b:55:f3:39:4e:46:4e:56:
e9:b7:5b:38:0e:3a:6a:2c:9d:4b:ba:08:84:98:ad:da:6f:68:
a2:f9:b6:4e:da:4e:c3:74:3a:d7:0e:43:3e:c1:53:03:dc:61:
1c:36:c1:fd:59:ff:9c:43:9f:0f:ad:b3:95:41:42:c9:ed:a6:
67:e3:45:92:4c:17:26:2d:66:d4:59:04:56:bb:6c:08:db:f5:
0d:55:f8:22:95:38:7b:2c:41:85:39:2b:c7:5f:78:8e:cb:5f:
ff:e2:57:f8:8a:4c:09:28:2d:0b:20:27:f6:9c:f4:d0:78:f2:
f9:69:b2:cd:ce:ae:8e:8f:e2:bb:eb:aa:48:7a:c3:23:61:ab:
5c:43:36:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6pcsHN1afepG2ncmmFyoshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA0MTQxMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzEyN2U0ZjAyNmJjMmE2OWVkZGM3ZGE3MWMxNjI3OGY5ZTRkNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZlEG845lMqRUdvqCrxH1YSG4Gz5
I10HKAqumOJcgGT9QbqyN6Pgb6Z+paq2W7Y5+twZ1VRM1kpHGaA/SCdEcochfl+x
QW6ASd8+hzeFg6Ah55E1ausN+VlHZ4ADB8s6agbPO/J5thfRd/h7YlEflowKqDC7
AHb4VMT6W6QYjvloTz+w4G1DtaxFvQHVH/mGrLx/W8ELP4j8klZuxwOqQkB97gpJ
BXaTOIQuNibPeoemx0WnQOvhQ7Z+RXTvgTbmwFO/RoPUAB6luEEk7hZSxK8qW9O1
M4DBtixKLQuVo3VO8j62VwtlTUBrbOpQEUkkiu23TOIZv//O3MthqVbcMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDwSfk8Ca8Kmnt3H2nHBYnj55NXJMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUEJKLVR3SnJ3cWFlM2NmYWNjRmllUG5rMWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEc1wGKucRzX66njrXIn
tc5E+G9+1jwtxasomj95TfI8SFRmTxEOUcUaBKj1Xk4cNBZpvG/3OEXtxHFaEjJ/
XC+dtayXbWOaYO89+nuADPtCoHZFwx4SLKsK5i4+G45ibxd6k88azXJDpDICxWEu
8it6C1R1ZFwrVfM5TkZOVum3WzgOOmosnUu6CISYrdpvaKL5tk7aTsN0OtcOQz7B
UwPcYRw2wf1Z/5xDnw+ts5VBQsntpmfjRZJMFyYtZtRZBFa7bAjb9Q1V+CKVOHss
QYU5K8dfeI7LX//iV/iKTAkoLQsgJ/ac9NB48vlpss3Oro6P4rvrqkh6wyNhq1xD
Nmc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:19 2025 by rpki-client