Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X0851LijlcgVxttCUUqzA_uy9GQ.roa
File: X0851LijlcgVxttCUUqzA_uy9GQ.roa (raw, json)
Hash identifier: JNXWf+eKDw7RELv3nvuJtq4GUYyS3qe9cTu0IsU0QKA=
Subject key identifier: 5F:4F:39:D4:B8:A3:95:C8:15:C6:DB:42:51:4A:B3:03:FB:B2:F4:64
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE1414832637163D2BB1781421F3A81EB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X0851LijlcgVxttCUUqzA_uy9GQ.roa
Signing time: Sun 25 Feb 2024 17:12:48 +0000
ROA not before: Sun 25 Feb 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e1:41:48:32:63:71:63:d2:bb:17:81:42:1f:3a:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f4f39d4b8a395c815c6db42514ab303fbb2f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:70:a6:96:cb:04:7f:ce:75:48:9a:e2:96:
6a:93:4a:eb:a8:bb:b8:7a:9f:44:a7:c7:9b:6d:c0:
67:26:51:6a:9a:a1:9d:af:bf:f9:ce:ca:fb:23:62:
fc:da:94:5f:a8:02:b9:0a:28:a6:b9:91:fd:17:c0:
0c:2c:99:78:af:68:7f:5f:23:6d:fa:27:a1:ab:78:
82:db:1b:41:4b:5c:6c:7d:57:f4:02:bf:d3:24:0a:
15:9d:7f:b6:11:e1:86:2c:20:3f:fa:06:b7:8f:66:
68:ad:e8:d8:21:bf:0a:dd:1d:b4:70:d5:9c:ab:33:
0c:bf:e7:27:98:7b:55:98:7c:3c:4c:00:24:c2:b8:
e5:aa:b4:27:f1:a4:f2:bf:7a:ce:e0:04:58:46:2d:
63:31:5a:63:02:8e:bc:c1:0a:c4:32:b6:6c:98:ed:
d3:36:f9:97:3e:3e:15:cc:a4:71:b5:a0:16:f0:9b:
99:b4:21:20:b9:b1:50:2e:4c:28:98:7e:a2:50:2d:
79:0a:d5:0f:3a:ec:60:a1:57:f8:66:69:b0:08:cd:
86:a6:34:ae:aa:3d:a7:cd:3d:e8:a0:91:ba:32:d4:
c7:cc:51:f7:2f:e5:3b:6c:55:fe:a4:05:e6:27:a8:
cd:93:83:e2:ba:d8:69:80:3c:d8:b4:50:3d:3d:85:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:39:D4:B8:A3:95:C8:15:C6:DB:42:51:4A:B3:03:FB:B2:F4:64
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X0851LijlcgVxttCUUqzA_uy9GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:24:53:26:25:35:6f:3a:17:71:d1:4d:0e:80:cd:f3:c2:43:
52:06:5e:ea:28:01:72:90:81:cb:4c:d0:41:23:1c:89:9b:24:
38:82:4d:9c:1f:e0:2b:b7:93:e6:c2:dd:95:8d:72:f5:f1:e0:
80:d2:a2:25:1b:57:43:a7:45:ff:89:3f:8a:84:37:5b:9f:3d:
71:a3:1b:a6:18:07:4d:7f:ab:a7:e2:db:c1:f9:33:15:eb:50:
e0:8b:88:10:50:9d:76:39:76:56:85:1a:38:23:ed:ee:cf:73:
96:c3:4b:51:6e:db:73:3e:c5:8f:50:52:78:a4:68:af:c2:34:
94:2f:cd:d7:17:9c:57:e7:ea:c9:e4:13:47:47:3c:04:b7:03:
a9:b1:6d:42:ff:6d:f2:08:4e:d7:8f:1d:2e:4f:60:b9:2b:e5:
7f:a8:13:1f:34:18:97:3e:8c:c5:6a:18:7b:d6:bd:86:81:e1:
1b:c9:10:59:03:51:fb:4b:05:f6:bf:09:ba:71:d9:54:2c:9d:
5f:05:fd:be:ad:65:87:af:ac:72:4f:06:16:e1:82:a9:cf:14:
be:6e:51:e0:4a:ca:d2:86:25:57:e0:be:ce:62:a7:18:1d:ab:
f5:de:f6:9f:04:17:96:b5:18:80:c3:eb:6a:14:8e:8a:50:be:
eb:e2:71:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3hQUgyY3Fj0rsXgUIfOoHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI1MTcxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRmMzlkNGI4YTM5NWM4MTVjNmRiNDI1MTRhYjMwM2ZiYjJmNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5xwppbLBH/OdUia4pZqk0rrqLu4
ep9Ep8ebbcBnJlFqmqGdr7/5zsr7I2L82pRfqAK5CiimuZH9F8AMLJl4r2h/XyNt
+iehq3iC2xtBS1xsfVf0Ar/TJAoVnX+2EeGGLCA/+ga3j2ZorejYIb8K3R20cNWc
qzMMv+cnmHtVmHw8TAAkwrjlqrQn8aTyv3rO4ARYRi1jMVpjAo68wQrEMrZsmO3T
NvmXPj4VzKRxtaAW8JuZtCEgubFQLkwomH6iUC15CtUPOuxgoVf4ZmmwCM2GpjSu
qj2nzT3ooJG6MtTHzFH3L+U7bFX+pAXmJ6jNk4PiuthpgDzYtFA9PYU1PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF9POdS4o5XIFcbbQlFKswP7svRkMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWDA4NTFMaWpsY2dWeHR0Q1VVcXpBX3V5OUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH0kUyYlNW86F3HRTQ6A
zfPCQ1IGXuooAXKQgctM0EEjHImbJDiCTZwf4Cu3k+bC3ZWNcvXx4IDSoiUbV0On
Rf+JP4qEN1ufPXGjG6YYB01/q6fi28H5MxXrUOCLiBBQnXY5dlaFGjgj7e7Pc5bD
S1Fu23M+xY9QUnikaK/CNJQvzdcXnFfn6snkE0dHPAS3A6mxbUL/bfIITtePHS5P
YLkr5X+oEx80GJc+jMVqGHvWvYaB4RvJEFkDUftLBfa/Cbpx2VQsnV8F/b6tZYev
rHJPBhbhgqnPFL5uUeBKytKGJVfgvs5ipxgdq/Xe9p8EF5a1GIDD62oUjopQvuvi
caY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:24 2025 by rpki-client