Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ws7sZiX0bSO9JH690rW0-Mu9auE.roa
File: Ws7sZiX0bSO9JH690rW0-Mu9auE.roa (raw, json)
Hash identifier: 3Q0xfD9y3WDZ7uL3sDYRdvDHKDdz8TUlxkeiseW5Fjk=
Subject key identifier: 5A:CE:EC:66:25:F4:6D:23:BD:24:7E:BD:D2:B5:B4:F8:CB:BD:6A:E1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2A01450B7D987B146621A2564229403A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ws7sZiX0bSO9JH690rW0-Mu9auE.roa
Signing time: Sun 10 Mar 2024 20:15:10 +0000
ROA not before: Sun 10 Mar 2024 20:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2a:01:45:0b:7d:98:7b:14:66:21:a2:56:42:29:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 20:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aceec6625f46d23bd247ebdd2b5b4f8cbbd6ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:98:62:27:4f:ba:ce:2c:b9:4c:20:a8:a0:
9b:d7:0e:b9:92:a1:e4:17:83:c2:3a:3b:6d:51:d4:
a1:bb:90:b2:55:c9:b2:e5:87:7a:47:05:a6:cc:fd:
c2:0e:47:33:cc:a5:6e:ea:e2:75:ec:f9:25:a7:97:
36:c7:dc:99:fe:89:bb:38:8e:bf:c9:6b:0f:a2:98:
4b:a7:67:72:13:16:b9:f4:45:c9:cb:4e:db:ec:ca:
fe:56:51:0f:08:7d:1c:de:69:45:8a:fc:7e:28:2f:
66:37:76:8b:dc:5a:4b:a3:b4:05:1a:ab:2c:86:6f:
e6:ad:07:43:78:ea:7b:3e:26:7b:b3:6e:99:9b:62:
e7:87:f6:00:f4:66:5b:bf:e0:e0:a9:58:31:3d:6e:
ed:fb:fb:25:63:ae:30:04:de:96:0b:74:8c:c5:7b:
11:f4:f9:a9:ed:ce:a5:3b:f5:60:2c:33:6c:37:48:
eb:e1:11:a3:26:b8:32:68:37:30:03:54:b4:4f:fe:
12:17:09:98:da:3b:62:bd:71:3e:2d:f7:6d:2f:02:
8e:b3:0c:da:cb:84:97:87:55:7d:3d:79:7f:0c:59:
f2:00:98:0d:00:99:e7:c0:fc:bf:e6:13:ed:70:d9:
ce:08:27:17:a0:da:66:75:fe:56:79:15:22:83:15:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:EC:66:25:F4:6D:23:BD:24:7E:BD:D2:B5:B4:F8:CB:BD:6A:E1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ws7sZiX0bSO9JH690rW0-Mu9auE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:4d:db:de:0a:c0:8f:90:85:e6:0a:82:f1:f7:98:22:03:78:
c7:96:da:58:8c:ae:f6:e3:77:68:5c:c9:07:d7:96:07:2c:bc:
ee:30:d5:27:63:91:56:57:d1:c1:96:be:ce:b8:09:4a:56:39:
7d:d1:de:a7:6a:bc:26:fc:4e:ea:1f:7d:f3:de:bf:fb:3f:dd:
ef:c8:56:2f:ce:15:20:5c:95:a6:6c:4a:89:6c:ac:54:30:70:
40:5d:b2:d4:c1:bb:d7:6f:31:1f:c6:77:97:81:4b:8c:cf:ca:
bc:b4:cb:33:62:af:ad:11:dd:2a:97:ad:73:c0:de:a2:4f:e5:
61:cb:77:36:d2:b0:4d:ed:54:83:b8:aa:6e:65:1a:b2:a1:af:
64:28:dc:5c:92:c7:8a:09:bf:a6:bb:ea:2c:a6:92:67:a9:7d:
0e:0d:72:75:c1:d4:3d:7b:23:20:a8:8b:77:67:0a:ee:e7:51:
7d:b5:62:e5:82:f5:7f:f2:ed:42:1c:e6:77:74:a4:84:6d:54:
3b:6d:60:da:f5:cd:4a:75:fd:ca:15:ad:c6:db:33:de:1d:0a:
bb:06:2e:1c:8e:a6:f4:71:07:43:9b:b6:2d:6b:a4:ec:01:58:
6f:b2:a9:e0:29:d0:74:3f:60:19:f5:29:8c:dc:1a:60:d6:ef:
cd:2f:a9:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4qAUULfZh7FGYholZCKUA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzEwMjAxNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWNlZWM2NjI1ZjQ2ZDIzYmQyNDdlYmRkMmI1YjRmOGNiYmQ2YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOGYYidPus4suUwgqKCb1w65kqHk
F4PCOjttUdShu5CyVcmy5Yd6RwWmzP3CDkczzKVu6uJ17Pklp5c2x9yZ/om7OI6/
yWsPophLp2dyExa59EXJy07b7Mr+VlEPCH0c3mlFivx+KC9mN3aL3FpLo7QFGqss
hm/mrQdDeOp7PiZ7s26Zm2Lnh/YA9GZbv+DgqVgxPW7t+/slY64wBN6WC3SMxXsR
9Pmp7c6lO/VgLDNsN0jr4RGjJrgyaDcwA1S0T/4SFwmY2jtivXE+LfdtLwKOswza
y4SXh1V9PXl/DFnyAJgNAJnnwPy/5hPtcNnOCCcXoNpmdf5WeRUigxW+SwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFrO7GYl9G0jvSR+vdK1tPjLvWrhMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV3M3c1ppWDBiU085Skg2OTByVzAtTXU5YXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAxN294KwI+QheYKgvH3
mCIDeMeW2liMrvbjd2hcyQfXlgcsvO4w1SdjkVZX0cGWvs64CUpWOX3R3qdqvCb8
TuofffPev/s/3e/IVi/OFSBclaZsSolsrFQwcEBdstTBu9dvMR/Gd5eBS4zPyry0
yzNir60R3SqXrXPA3qJP5WHLdzbSsE3tVIO4qm5lGrKhr2Qo3FySx4oJv6a76iym
kmepfQ4NcnXB1D17IyCoi3dnCu7nUX21YuWC9X/y7UIc5nd0pIRtVDttYNr1zUp1
/coVrcbbM94dCrsGLhyOpvRxB0Obti1rpOwBWG+yqeAp0HQ/YBn1KYzcGmDW780v
qVQ=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:07 2025 by rpki-client