Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vd9gdnki0frrrsgsfD1jKmeMeHE.roa
File: Vd9gdnki0frrrsgsfD1jKmeMeHE.roa (raw, json)
Hash identifier: LTj/CAa5DxNI+DabreK8Erl1Jzqbr+LzQJwu8Zdbzok=
Subject key identifier: 55:DF:60:76:79:22:D1:FA:EB:AE:C8:2C:7C:3D:63:2A:67:8C:78:71
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D72B7AC8181ABC72938E7728DB3298980
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vd9gdnki0frrrsgsfD1jKmeMeHE.roa
Signing time: Sun 04 Feb 2024 06:04:16 +0000
ROA not before: Sun 04 Feb 2024 06:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:72b7:a0fb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:72:b7:ac:81:81:ab:c7:29:38:e7:72:8d:b3:29:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 06:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55df60767922d1faebaec82c7c3d632a678c7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:75:d6:a3:2f:a1:50:29:29:84:8d:0f:22:
f7:a8:19:4e:59:34:88:79:38:52:91:36:90:9e:be:
85:cd:f2:a5:da:91:4c:85:da:4c:66:6e:3d:0c:cc:
2e:d5:42:f4:30:4c:f3:34:e4:0c:46:33:26:ea:e6:
ae:08:0e:3f:b3:e1:8c:6c:df:ff:01:16:a7:1d:ea:
a7:97:e1:7b:89:b2:e2:1d:86:eb:35:ad:07:b5:b2:
89:44:c2:5e:bc:f6:b3:a1:9c:b1:6c:5f:87:51:25:
8d:60:13:30:da:9c:41:92:3f:d8:60:c6:fc:18:a4:
6d:7c:5f:3b:c9:94:89:62:10:69:a4:6e:ac:69:a3:
49:c2:53:48:0e:6b:f5:00:d4:3c:36:aa:81:4f:3a:
4b:42:de:ab:11:e7:21:29:87:3a:42:d3:1b:67:b2:
a0:8c:d3:5e:bb:4c:1d:86:bb:51:cb:86:a1:11:cf:
16:77:27:92:42:f5:24:a5:4e:d2:99:ba:dc:f4:99:
12:82:40:78:3f:13:e6:b5:97:9d:dc:12:65:e5:d1:
4b:4f:f9:88:c0:48:26:e5:20:6b:44:6b:15:11:1f:
4e:e2:2b:96:ac:fb:3e:8f:0c:b7:95:ca:55:fd:a2:
f5:26:b2:16:7a:56:12:1b:6e:4d:34:41:7a:ee:a7:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:60:76:79:22:D1:FA:EB:AE:C8:2C:7C:3D:63:2A:67:8C:78:71
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vd9gdnki0frrrsgsfD1jKmeMeHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:64:56:61:14:c4:c9:2a:9a:1a:ce:4d:01:d0:33:93:cb:5c:
76:30:f9:24:2f:5d:39:5e:b4:8f:c2:bd:fc:44:09:fd:90:72:
20:bf:ee:a0:43:a5:a5:ad:5d:8c:da:34:13:9f:6a:cd:7c:f2:
d0:4e:35:5e:eb:ac:63:75:74:32:8e:ac:a3:1c:92:1a:a0:94:
e8:a5:f8:e4:65:3a:4e:2a:5c:d5:81:8c:c7:eb:9d:41:35:15:
54:f4:b3:b1:32:09:c8:d1:22:90:1c:b7:bd:c8:4c:3c:0a:77:
fa:ed:35:f2:d5:c2:c9:ad:d5:27:74:f5:b9:e8:8c:b2:67:87:
c5:dd:bd:d8:68:49:a8:16:36:6b:a9:bc:1a:f7:e1:09:4c:2d:
86:42:f2:ed:16:ce:27:f7:ea:b7:22:a1:29:77:c1:2b:d2:53:
fe:4b:81:56:41:b8:86:14:b2:45:33:70:21:00:f5:27:2b:f2:
45:b4:6e:23:92:47:77:47:66:b1:de:89:31:0d:3d:bb:8a:2e:
3d:dc:12:d6:3f:54:c4:47:ed:c0:81:91:da:56:f4:49:42:ba:
55:9c:c4:68:1d:c0:61:b8:4c:70:cc:a0:1b:d8:20:3f:27:17:
12:ab:13:8b:3e:da:0f:aa:8b:03:b5:c9:eb:bc:20:15:de:7f:
4f:51:1b:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1yt6yBgavHKTjnco2zKYmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA0MDYwNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWRmNjA3Njc5MjJkMWZhZWJhZWM4MmM3YzNkNjMyYTY3OGM3ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEZ11qMvoVApKYSNDyL3qBlOWTSI
eThSkTaQnr6FzfKl2pFMhdpMZm49DMwu1UL0MEzzNOQMRjMm6uauCA4/s+GMbN//
ARanHeqnl+F7ibLiHYbrNa0HtbKJRMJevPazoZyxbF+HUSWNYBMw2pxBkj/YYMb8
GKRtfF87yZSJYhBppG6saaNJwlNIDmv1ANQ8NqqBTzpLQt6rEechKYc6QtMbZ7Kg
jNNeu0wdhrtRy4ahEc8WdyeSQvUkpU7Smbrc9JkSgkB4PxPmtZed3BJl5dFLT/mI
wEgm5SBrRGsVER9O4iuWrPs+jwy3lcpV/aL1JrIWelYSG25NNEF67qep1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFXfYHZ5ItH6667ILHw9YypnjHhxMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVmQ5Z2Rua2kwZnJycnNnc2ZEMWpLbWVNZUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAExkVmEUxMkqmhrOTQHQ
M5PLXHYw+SQvXTletI/CvfxECf2QciC/7qBDpaWtXYzaNBOfas188tBONV7rrGN1
dDKOrKMckhqglOil+ORlOk4qXNWBjMfrnUE1FVT0s7EyCcjRIpAct73ITDwKd/rt
NfLVwsmt1Sd09bnojLJnh8XdvdhoSagWNmupvBr34QlMLYZC8u0Wzif36rcioSl3
wSvSU/5LgVZBuIYUskUzcCEA9Scr8kW0biOSR3dHZrHeiTENPbuKLj3cEtY/VMRH
7cCBkdpW9ElCulWcxGgdwGG4THDMoBvYID8nFxKrE4s+2g+qiwO1yeu8IBXef09R
G48=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:22 2025 by rpki-client