Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SP0Ik_5WB4oAU_NDUIGb4qjajGo.roa
File: SP0Ik_5WB4oAU_NDUIGb4qjajGo.roa (raw, json)
Hash identifier: CdBnR3gLZ5yoTY1XKgV6B4TxLBoo8kZJHwQnBSwo7LI=
Subject key identifier: 48:FD:08:93:FE:56:07:8A:00:53:F3:43:50:81:9B:E2:A8:DA:8C:6A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0B48C10D3A81BEB635856B9249F6BED7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SP0Ik_5WB4oAU_NDUIGb4qjajGo.roa
Signing time: Mon 04 Mar 2024 21:05:01 +0000
ROA not before: Mon 04 Mar 2024 21:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:b48:1616/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:48:c1:0d:3a:81:be:b6:35:85:6b:92:49:f6:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 21:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48fd0893fe56078a0053f34350819be2a8da8c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f4:57:c3:53:f3:35:e0:ca:f1:74:2c:ee:
58:46:2a:c4:c8:f4:c5:44:86:54:42:1e:0a:b1:36:
54:ad:44:c5:d6:ed:e7:65:df:fa:53:12:38:1d:7d:
c7:ef:06:1c:f8:15:1f:c0:31:2a:04:b0:37:3e:9a:
e6:55:2a:e7:ea:bc:c4:5d:d3:70:64:49:af:fb:2d:
43:9a:c0:ee:50:33:ca:d1:b4:a0:83:53:86:41:b2:
0e:b3:5e:7f:5d:b4:c3:14:2c:a0:2a:3a:26:fc:af:
65:a3:70:fa:35:5e:71:fd:2b:58:69:7f:72:0a:87:
24:2e:da:1c:5a:35:27:d1:7d:29:5e:1b:59:48:17:
e3:aa:46:74:be:18:cd:8e:4c:4a:7c:a3:8e:ef:70:
87:ea:80:03:b7:ad:a8:84:98:1b:b0:83:64:28:9b:
7d:05:b3:43:22:04:b1:20:8f:8c:78:23:8e:50:e8:
9d:7f:17:a7:9f:9c:8d:c9:7d:40:8b:49:32:82:5d:
63:ac:e8:d7:ad:42:e6:20:51:bd:23:63:10:13:b8:
ae:d0:f0:26:a0:77:91:ca:55:fb:a5:65:f3:18:f8:
3a:87:1e:5e:d0:5f:31:88:a5:a5:43:e1:0c:a1:1d:
b9:3a:f5:e5:fe:af:f0:d5:d0:73:c1:01:00:5c:c4:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:08:93:FE:56:07:8A:00:53:F3:43:50:81:9B:E2:A8:DA:8C:6A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SP0Ik_5WB4oAU_NDUIGb4qjajGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:38:e2:2d:f2:38:52:d2:a3:65:5a:43:32:99:10:7c:d9:75:
31:bb:cc:1a:4f:1a:96:c5:ab:64:45:15:9f:90:92:61:b2:da:
1e:8a:c9:53:f7:c3:a8:c1:fd:a4:0e:69:92:17:75:a3:86:e8:
01:d9:b4:9b:52:8c:86:99:55:33:f1:d9:2f:aa:f0:d0:bc:06:
79:4e:1b:20:af:0d:12:e8:ce:40:9c:cb:bb:71:c2:75:90:f5:
66:a8:2c:e5:e0:da:a7:d1:88:a3:66:6f:91:a6:1b:3d:6b:f9:
82:1f:4d:da:c4:88:26:09:f5:44:2c:2b:c8:5a:d7:df:81:b3:
20:ea:f6:6f:16:bd:5c:eb:65:eb:bb:5a:50:0c:ea:f1:11:c9:
10:35:d8:82:0a:69:4f:0b:01:b5:92:1a:1d:71:44:6e:64:37:
f8:3b:f8:e1:b9:b6:40:7c:a5:ab:21:d7:57:03:e9:31:4a:0d:
e3:c0:44:74:97:49:ec:13:29:8f:6e:63:46:39:49:2a:b7:eb:
cb:9b:2a:ad:4e:3d:64:3a:93:ba:c6:1a:07:54:e5:6c:29:11:
48:1a:38:39:23:5a:ba:93:ca:03:8b:b2:c5:05:b3:89:2b:d8:
93:9f:47:b8:cf:ef:78:55:12:a6:40:27:71:58:1b:c2:a3:33:
ff:b0:53:49
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4LSMENOoG+tjWFa5JJ9r7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA0MjEwNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZkMDg5M2ZlNTYwNzhhMDA1M2YzNDM1MDgxOWJlMmE4ZGE4YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkf0V8NT8zXgyvF0LO5YRirEyPTF
RIZUQh4KsTZUrUTF1u3nZd/6UxI4HX3H7wYc+BUfwDEqBLA3PprmVSrn6rzEXdNw
ZEmv+y1DmsDuUDPK0bSgg1OGQbIOs15/XbTDFCygKjom/K9lo3D6NV5x/StYaX9y
CockLtocWjUn0X0pXhtZSBfjqkZ0vhjNjkxKfKOO73CH6oADt62ohJgbsINkKJt9
BbNDIgSxII+MeCOOUOidfxenn5yNyX1Ai0kygl1jrOjXrULmIFG9I2MQE7iu0PAm
oHeRylX7pWXzGPg6hx5e0F8xiKWlQ+EMoR25OvXl/q/w1dBzwQEAXMQFzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEj9CJP+VgeKAFPzQ1CBm+Ko2oxqMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvU1AwSWtfNVdCNG9BVV9ORFVJR2I0cWphakdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHs44i3yOFLSo2VaQzKZ
EHzZdTG7zBpPGpbFq2RFFZ+QkmGy2h6KyVP3w6jB/aQOaZIXdaOG6AHZtJtSjIaZ
VTPx2S+q8NC8BnlOGyCvDRLozkCcy7txwnWQ9WaoLOXg2qfRiKNmb5GmGz1r+YIf
TdrEiCYJ9UQsK8ha19+BsyDq9m8WvVzrZeu7WlAM6vERyRA12IIKaU8LAbWSGh1x
RG5kN/g7+OG5tkB8pash11cD6TFKDePARHSXSewTKY9uY0Y5SSq368ubKq1OPWQ6
k7rGGgdU5WwpEUgaODkjWrqTygOLssUFs4kr2JOfR7jP73hVEqZAJ3FYG8KjM/+w
U0k=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:35 2025 by rpki-client