Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TOh8yTm9uZRqBDllsYigqiCEaaA.roa
File: TOh8yTm9uZRqBDllsYigqiCEaaA.roa (raw, json)
Hash identifier: iYElsKJCnwQe6VXC1l2f33FpQ7zH6DW25/rN45PxK+I=
Subject key identifier: 4C:E8:7C:C9:39:BD:B9:94:6A:04:39:65:B1:88:A0:AA:20:84:69:A0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC1E8A554C40AA0F6F0FAED4FEBD4F602
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TOh8yTm9uZRqBDllsYigqiCEaaA.roa
Signing time: Sun 31 Dec 2023 22:04:58 +0000
ROA not before: Sun 31 Dec 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c1e7:f33e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c1:e8:a5:54:c4:0a:a0:f6:f0:fa:ed:4f:eb:d4:f6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ce87cc939bdb9946a043965b188a0aa208469a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:d2:4d:2c:c3:ce:c0:2c:6c:e1:f1:f2:02:
6c:c6:26:32:f9:18:d6:f1:50:b5:ae:01:0e:0a:0f:
b2:de:c9:4d:2d:d9:a1:8a:88:eb:a0:cf:25:b3:0c:
ec:d9:78:db:8e:db:c5:77:f5:4d:25:3d:8a:a0:3d:
e1:0c:7a:0c:7c:42:22:ea:05:91:21:32:4c:f8:36:
29:a8:9d:b6:72:e5:29:73:43:53:23:c1:1a:1e:8f:
31:1f:22:cd:e0:09:a5:24:e6:6a:58:20:83:04:09:
da:a2:6d:1f:87:dd:74:07:cb:f1:2a:ba:07:01:a4:
1f:ed:88:fd:76:08:3a:11:80:ed:6f:25:5b:12:54:
ac:f4:02:ba:1b:a8:66:e0:da:c3:95:c7:25:50:ed:
79:25:ae:db:a9:65:15:1f:58:43:77:6b:f2:e7:27:
d6:41:a3:54:02:e2:ec:df:e5:e0:29:f3:0d:ac:32:
b6:11:58:3c:d0:5f:4e:b7:6f:8b:dc:49:a0:98:58:
05:83:07:21:a5:a3:f1:f7:8b:58:31:6f:f8:9c:ac:
60:bf:6f:d6:b7:a2:8e:c6:37:ec:78:18:57:aa:ae:
27:0e:26:8f:8d:cb:58:43:98:05:ff:77:d1:be:98:
1b:e0:6d:a4:c6:cd:7f:ec:9c:a3:5e:4a:11:8e:4e:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:7C:C9:39:BD:B9:94:6A:04:39:65:B1:88:A0:AA:20:84:69:A0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TOh8yTm9uZRqBDllsYigqiCEaaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:4e:72:04:e3:cd:9a:2d:c7:29:00:5a:78:9a:c5:00:97:05:
68:22:ce:dd:1e:7a:7c:ef:e9:27:25:94:a2:e0:b3:ce:11:4b:
07:cf:8b:bd:ac:e2:b6:7a:ac:95:c4:29:81:d2:e3:93:ec:89:
3e:66:8c:96:85:3e:05:c8:22:87:a4:92:5e:8d:bc:cd:c3:03:
c1:1d:35:14:2a:44:dc:e9:49:8e:16:f5:f2:75:90:bf:53:78:
69:5c:b3:77:7d:68:09:c0:e1:c0:08:63:d0:cd:a9:6d:04:f6:
1c:ba:6d:35:1d:3f:18:f6:4a:83:14:f3:d4:a2:a8:2c:0c:ce:
e9:e0:57:27:ae:32:6f:c2:70:bf:f7:63:d4:47:21:9a:7d:d4:
dd:1e:d1:e1:95:8b:6c:e3:f7:b2:2a:38:6e:27:e6:bd:b2:41:
8a:f6:b4:e8:d8:46:7d:d4:ee:8b:ee:a5:01:53:eb:e3:9f:a4:
4d:38:e1:22:bb:ad:78:8b:7c:e8:cf:43:1e:c5:d9:50:9e:a6:
cd:66:70:81:28:a8:51:5b:4a:df:4e:0a:16:db:39:21:2f:86:
7d:de:29:27:0c:dc:05:7f:b8:4f:75:61:50:56:75:6f:ae:13:
16:93:9c:04:61:a9:15:77:69:8f:48:e0:58:e0:f4:39:91:2c:
4c:30:9f:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzB6KVUxAqg9vD67U/r1PYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjMxMjIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2U4N2NjOTM5YmRiOTk0NmEwNDM5NjViMTg4YTBhYTIwODQ2OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmULSTSzDzsAsbOHx8gJsxiYy+RjW
8VC1rgEOCg+y3slNLdmhiojroM8lswzs2XjbjtvFd/VNJT2KoD3hDHoMfEIi6gWR
ITJM+DYpqJ22cuUpc0NTI8EaHo8xHyLN4AmlJOZqWCCDBAnaom0fh910B8vxKroH
AaQf7Yj9dgg6EYDtbyVbElSs9AK6G6hm4NrDlcclUO15Ja7bqWUVH1hDd2vy5yfW
QaNUAuLs3+XgKfMNrDK2EVg80F9Ot2+L3EmgmFgFgwchpaPx94tYMW/4nKxgv2/W
t6KOxjfseBhXqq4nDiaPjctYQ5gF/3fRvpgb4G2kxs1/7JyjXkoRjk6i/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEzofMk5vbmUagQ5ZbGIoKoghGmgMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVE9oOHlUbTl1WlJxQkRsbHNZaWdxaUNFYWFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAItOcgTjzZotxykAWnia
xQCXBWgizt0eenzv6ScllKLgs84RSwfPi72s4rZ6rJXEKYHS45PsiT5mjJaFPgXI
Ioekkl6NvM3DA8EdNRQqRNzpSY4W9fJ1kL9TeGlcs3d9aAnA4cAIY9DNqW0E9hy6
bTUdPxj2SoMU89SiqCwMzungVyeuMm/CcL/3Y9RHIZp91N0e0eGVi2zj97IqOG4n
5r2yQYr2tOjYRn3U7ovupQFT6+OfpE044SK7rXiLfOjPQx7F2VCeps1mcIEoqFFb
St9OChbbOSEvhn3eKScM3AV/uE91YVBWdW+uExaTnARhqRV3aY9I4Fjg9DmRLEww
n28=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:40 2025 by rpki-client