Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SLcpJkteldR6UuiiMMQbA8-b8SE.roa
File: SLcpJkteldR6UuiiMMQbA8-b8SE.roa (raw, json)
Hash identifier: BRWmMt0rrlI7yqrH9imxNCfczYHii/pULyttLZ9bvq4=
Subject key identifier: 48:B7:29:26:4B:5E:95:D4:7A:52:E8:A2:30:C4:1B:03:CF:9B:F1:21
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBC569329281BE2DD70F664DEE47F6675
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SLcpJkteldR6UuiiMMQbA8-b8SE.roa
Signing time: Mon 08 Apr 2024 06:12:54 +0000
ROA not before: Mon 08 Apr 2024 06:12:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:56:93:29:28:1b:e2:dd:70:f6:64:de:e4:7f:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 06:12:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b729264b5e95d47a52e8a230c41b03cf9bf121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:77:37:0d:b0:a5:45:a3:e3:46:91:91:f2:
97:75:99:0e:0d:b4:3a:70:ac:ca:65:99:ba:1e:bb:
c9:aa:8f:f7:2a:c0:9c:fe:8c:f8:40:e6:d8:2b:0d:
51:03:aa:00:41:6e:11:ef:0c:ed:73:9f:6d:2c:c8:
1e:41:9f:02:b4:c5:b3:66:2f:fb:54:12:58:2c:3e:
a2:42:24:c3:70:16:69:18:08:43:1a:28:b1:f8:f5:
1e:0b:eb:8c:6f:ae:00:ed:c3:e8:f0:a7:91:7d:c8:
e4:18:56:e2:a0:f0:a4:f6:7d:e3:f0:36:de:ca:82:
43:b4:52:36:7d:91:60:ff:f7:b0:4a:35:eb:11:03:
e3:d2:06:5a:27:47:d2:8d:44:24:8d:bb:b1:6b:d7:
68:65:26:30:8d:35:06:3f:2e:fe:65:4d:f1:f6:fb:
4d:2a:ed:70:f1:3a:da:a2:4b:fa:76:cf:01:13:9f:
15:47:93:b9:17:3d:c8:35:b0:63:f1:54:26:cc:46:
23:c2:1a:b0:73:98:a5:a5:0a:9a:89:b9:b7:be:08:
f7:1e:98:8a:99:c7:ef:ef:78:b4:e3:2b:31:d7:bc:
fd:bd:4c:69:e1:05:2f:0c:08:6d:69:4c:88:0d:61:
73:7c:e2:b1:f0:48:90:d2:d7:40:4d:74:d7:31:b2:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:29:26:4B:5E:95:D4:7A:52:E8:A2:30:C4:1B:03:CF:9B:F1:21
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SLcpJkteldR6UuiiMMQbA8-b8SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:5f:3c:90:77:68:a6:60:0f:ff:38:5a:a3:09:e1:b3:dc:62:
80:47:7c:56:31:ea:fa:af:50:3e:df:67:ef:f7:ac:12:0d:a2:
b5:c2:e9:3f:88:0c:02:8e:c1:ec:74:2b:51:b5:50:fe:e8:f5:
34:a9:8a:9d:eb:09:45:a1:7b:ff:76:2a:8e:8b:ac:2b:7e:2e:
d3:eb:8d:9e:1f:a0:52:93:a4:41:eb:d0:3d:03:26:0c:7f:d3:
c0:ac:d0:1d:d3:52:70:44:97:77:00:e5:86:84:0f:0f:d9:34:
e4:19:50:9c:80:dc:18:f9:59:e3:84:6c:40:30:9d:46:3d:e4:
59:05:c0:5a:7d:d0:e5:f1:2e:db:84:8e:72:05:be:0d:76:66:
35:44:b1:2a:79:65:2b:5e:68:fd:64:04:39:4a:97:ea:63:98:
de:9c:43:e1:bc:63:b2:47:d2:fa:fe:3d:8e:2e:bd:e6:a7:b6:
4a:88:ea:ad:c5:28:c9:7a:63:10:e0:d7:f8:15:42:f9:30:29:
e9:39:fd:94:d9:47:0a:46:59:80:9c:ce:82:c9:61:22:02:43:
28:c9:e4:9a:29:b9:86:fe:04:7c:61:4c:b2:45:91:60:12:04:
3b:1f:a2:0f:0a:9e:12:76:52:26:8f:7c:e4:ef:0d:02:b2:56:
b4:28:f2:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY68VpMpKBvi3XD2ZN7kf2Z1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA4MDYxMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGI3MjkyNjRiNWU5NWQ0N2E1MmU4YTIzMGM0MWIwM2NmOWJmMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlh3Nw2wpUWj40aRkfKXdZkODbQ6
cKzKZZm6HrvJqo/3KsCc/oz4QObYKw1RA6oAQW4R7wztc59tLMgeQZ8CtMWzZi/7
VBJYLD6iQiTDcBZpGAhDGiix+PUeC+uMb64A7cPo8KeRfcjkGFbioPCk9n3j8Dbe
yoJDtFI2fZFg//ewSjXrEQPj0gZaJ0fSjUQkjbuxa9doZSYwjTUGPy7+ZU3x9vtN
Ku1w8Traokv6ds8BE58VR5O5Fz3INbBj8VQmzEYjwhqwc5ilpQqaibm3vgj3HpiK
mcfv73i04ysx17z9vUxp4QUvDAhtaUyIDWFzfOKx8EiQ0tdATXTXMbJF0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEi3KSZLXpXUelLoojDEGwPPm/EhMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvU0xjcEprdGVsZFI2VXVpaU1NUWJBOC1iOFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA1fPJB3aKZgD/84WqMJ
4bPcYoBHfFYx6vqvUD7fZ+/3rBINorXC6T+IDAKOwex0K1G1UP7o9TSpip3rCUWh
e/92Ko6LrCt+LtPrjZ4foFKTpEHr0D0DJgx/08Cs0B3TUnBEl3cA5YaEDw/ZNOQZ
UJyA3Bj5WeOEbEAwnUY95FkFwFp90OXxLtuEjnIFvg12ZjVEsSp5ZSteaP1kBDlK
l+pjmN6cQ+G8Y7JH0vr+PY4uveantkqI6q3FKMl6YxDg1/gVQvkwKek5/ZTZRwpG
WYCczoLJYSICQyjJ5JopuYb+BHxhTLJFkWASBDsfog8KnhJ2UiaPfOTvDQKyVrQo
8p4=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:26 2025 by rpki-client