Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Pz8UqHpaw_R_jZEHKeCLIYlKlV0.roa
File: Pz8UqHpaw_R_jZEHKeCLIYlKlV0.roa (raw, json)
Hash identifier: VPBvNLXqE/nEgFpvJVOO8mH7KQB1gaoVMMJ3tlnV0A0=
Subject key identifier: 3F:3F:14:A8:7A:5A:C3:F4:7F:8D:91:07:29:E0:8B:21:89:4A:95:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E90C491CD52F140DDD4E8CEBA73A0D893
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Pz8UqHpaw_R_jZEHKeCLIYlKlV0.roa
Signing time: Sat 30 Mar 2024 19:09:45 +0000
ROA not before: Sat 30 Mar 2024 19:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:c4:91:cd:52:f1:40:dd:d4:e8:ce:ba:73:a0:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 19:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f3f14a87a5ac3f47f8d910729e08b21894a955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:f9:dc:b8:ba:32:d1:3e:ce:dc:63:3c:62:
a3:5a:ee:de:d2:48:f6:c2:96:a8:58:01:b6:ee:99:
b6:41:86:98:2b:67:b2:9a:79:ed:dc:37:99:92:28:
ee:07:77:5e:03:d4:bf:2c:dd:69:f8:b8:e1:0e:5c:
65:22:85:69:26:7f:54:e1:73:b9:fa:f3:8e:54:d9:
f7:fc:43:c8:4f:0f:50:3a:67:06:b5:87:27:30:88:
cf:7e:2d:26:98:b5:f6:d8:ed:78:90:c0:ff:ef:16:
cb:72:2b:a7:74:2c:cc:57:fb:43:a2:07:aa:7a:22:
3f:ce:74:f3:69:c7:ef:00:c0:c5:b1:3f:88:af:30:
f9:0a:8d:ee:9a:95:23:4a:6d:eb:b3:86:b7:ac:03:
a0:11:29:02:f2:e1:b7:b5:7c:23:59:df:f2:5c:75:
bb:e0:8a:a5:71:f4:66:be:96:ee:cf:80:0d:7d:a6:
a0:18:46:bd:11:80:db:66:df:64:b9:b4:63:fd:ca:
61:6f:d0:1e:c4:56:3e:11:2f:c7:52:33:b2:60:d5:
6a:59:33:25:ab:64:22:18:d7:f4:49:00:d5:1c:15:
e9:7d:91:45:23:f5:84:17:b7:6d:22:90:2e:14:f0:
f7:2f:be:c3:9a:63:ab:b4:cf:a8:46:fe:a2:a3:75:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:14:A8:7A:5A:C3:F4:7F:8D:91:07:29:E0:8B:21:89:4A:95:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Pz8UqHpaw_R_jZEHKeCLIYlKlV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:27:00:62:d9:c5:54:01:8b:62:c7:66:ab:23:55:86:eb:be:
3d:f9:21:e7:ff:10:6c:7b:8f:e9:e1:d5:09:e6:19:f6:ea:4f:
e5:24:4a:08:e0:6d:f5:b3:f2:38:61:2b:d5:e6:93:f0:ef:1b:
de:db:0f:9e:d1:40:49:53:6a:7b:d9:04:4b:42:05:a8:b2:57:
9a:a9:f0:eb:24:6e:8d:dd:18:8d:94:1c:04:cb:5d:f3:cb:53:
57:7d:03:7c:7c:ed:a5:1c:28:9c:15:e8:18:0e:d1:14:72:c7:
39:dd:8e:ac:49:47:78:da:1f:6f:df:9f:71:39:f1:36:71:cf:
12:39:76:22:22:92:90:35:26:c8:fd:88:e7:b8:06:98:28:17:
3b:fe:b7:38:15:45:39:0b:a5:17:17:3f:17:00:de:17:37:45:
ea:ae:3a:fc:cf:be:26:43:3b:37:62:bf:36:5a:b0:4b:cf:e5:
31:f7:9e:43:30:60:6c:17:a8:fe:02:d5:a8:07:b3:d0:cf:c6:
94:10:5f:37:88:4c:79:21:64:d6:ca:d6:77:c7:c8:ec:1a:86:
30:77:81:40:dc:1e:2d:e3:97:36:6d:4a:99:bd:c5:f1:1e:b6:
21:b5:0e:6e:7c:8d:32:a6:f8:64:58:fa:2d:b1:97:13:c3:f6:
5d:78:5f:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6QxJHNUvFA3dTozrpzoNiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMwMTkwOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjNmMTRhODdhNWFjM2Y0N2Y4ZDkxMDcyOWUwOGIyMTg5NGE5NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJT53Li6MtE+ztxjPGKjWu7e0kj2
wpaoWAG27pm2QYaYK2eymnnt3DeZkijuB3deA9S/LN1p+LjhDlxlIoVpJn9U4XO5
+vOOVNn3/EPITw9QOmcGtYcnMIjPfi0mmLX22O14kMD/7xbLciundCzMV/tDogeq
eiI/znTzacfvAMDFsT+IrzD5Co3umpUjSm3rs4a3rAOgESkC8uG3tXwjWd/yXHW7
4IqlcfRmvpbuz4ANfaagGEa9EYDbZt9kubRj/cphb9AexFY+ES/HUjOyYNVqWTMl
q2QiGNf0SQDVHBXpfZFFI/WEF7dtIpAuFPD3L77DmmOrtM+oRv6io3XJ4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD8/FKh6WsP0f42RByngiyGJSpVdMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUHo4VXFIcGF3X1JfalpFSEtlQ0xJWWxLbFYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKAnAGLZxVQBi2LHZqsj
VYbrvj35Ief/EGx7j+nh1QnmGfbqT+UkSgjgbfWz8jhhK9Xmk/DvG97bD57RQElT
anvZBEtCBaiyV5qp8Oskbo3dGI2UHATLXfPLU1d9A3x87aUcKJwV6BgO0RRyxznd
jqxJR3jaH2/fn3E58TZxzxI5diIikpA1Jsj9iOe4BpgoFzv+tzgVRTkLpRcXPxcA
3hc3RequOvzPviZDOzdivzZasEvP5TH3nkMwYGwXqP4C1agHs9DPxpQQXzeITHkh
ZNbK1nfHyOwahjB3gUDcHi3jlzZtSpm9xfEetiG1Dm58jTKm+GRY+i2xlxPD9l14
X6I=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:43 2025 by rpki-client