Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XaCMrNEOzvYRjGGYjp6zf6686i8.roa
File: XaCMrNEOzvYRjGGYjp6zf6686i8.roa (raw, json)
Hash identifier: UhNN41ZXZ8pi4JxOeFyATPyj/E1cKqrSRNuJilRZgCs=
Subject key identifier: 5D:A0:8C:AC:D1:0E:CE:F6:11:8C:61:98:8E:9E:B3:7F:AE:BC:EA:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E540CBEA70F89C9C76E27560ADA95E79F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XaCMrNEOzvYRjGGYjp6zf6686i8.roa
Signing time: Tue 19 Mar 2024 00:11:45 +0000
ROA not before: Tue 19 Mar 2024 00:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:54:0c:be:a7:0f:89:c9:c7:6e:27:56:0a:da:95:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 00:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5da08cacd10ecef6118c61988e9eb37faebcea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:f4:3c:d7:da:53:2b:ed:ae:08:6b:de:33:
67:ce:a3:17:d1:5e:23:5d:d9:c1:ff:35:99:e4:69:
4a:5d:1e:aa:b2:b1:4d:b1:cf:0b:25:7f:49:c6:6e:
93:4d:cb:06:47:2f:ce:23:08:fd:b1:aa:dd:b7:b0:
9a:29:8e:9e:f0:45:4e:c2:dd:5b:ef:3d:0a:7b:9f:
a0:51:89:b8:1b:4b:6e:1c:e6:1e:cb:4d:5a:f5:e9:
7b:80:9e:c5:88:e4:1c:ec:68:98:25:09:78:7b:0e:
7e:17:fd:f4:57:58:cb:4d:7f:24:3e:59:6f:37:56:
df:35:ac:22:b4:fd:0e:f6:71:ec:e5:0b:e0:74:f0:
d9:e6:b8:c5:2a:78:73:e1:08:f5:e4:9e:10:9e:13:
9c:f0:55:e4:c9:d6:be:be:bf:53:ea:ce:0e:08:8f:
76:56:8e:88:d6:21:1c:05:dc:5f:a5:64:23:8b:fe:
2f:7d:ba:aa:53:51:09:ac:c3:78:6c:27:5f:d2:5a:
13:25:b4:79:21:fd:c6:04:33:8d:bc:29:0e:2e:62:
e2:d7:11:46:63:4e:ca:44:61:f6:40:3e:a4:98:74:
e8:b5:94:28:2c:06:d3:20:66:69:0f:03:51:e2:ce:
f0:bc:e9:a5:ae:38:89:87:e3:7a:3f:f7:15:e0:53:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:8C:AC:D1:0E:CE:F6:11:8C:61:98:8E:9E:B3:7F:AE:BC:EA:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XaCMrNEOzvYRjGGYjp6zf6686i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:48:67:6e:e9:e2:02:d0:89:b4:cc:0c:c7:64:c9:2a:17:b7:
3e:63:2f:2a:80:8b:3e:e8:39:83:a0:47:3f:c1:c8:80:46:e9:
f8:3c:88:82:91:53:d7:f4:90:59:ee:d1:40:95:77:60:6b:e1:
c1:a8:2e:1b:e5:c3:75:22:69:a3:cb:a9:21:82:a9:e6:51:85:
69:d3:ea:45:46:e8:98:8c:87:88:cc:84:89:97:17:da:64:f0:
a2:b2:38:1a:32:32:d7:77:a7:cb:be:d2:fd:88:fc:1b:cb:a7:
8d:24:06:5b:43:49:f7:21:dd:99:81:ff:20:d1:bb:57:12:e7:
33:c9:ef:10:9d:35:8e:53:b9:4a:0f:7f:31:a9:d3:f2:8a:64:
7b:25:13:73:57:b0:3f:41:ad:6e:c0:66:f5:b0:9a:53:8d:fc:
8a:2f:02:48:69:9e:0b:61:06:ee:11:be:28:bd:db:7b:8d:63:
98:f4:ce:f3:be:1d:a2:56:1d:ca:62:3f:db:12:aa:b2:6e:26:
8c:79:e5:ef:ec:0f:b6:13:0f:cf:25:49:ce:77:60:65:3e:7d:
2b:51:0c:69:5f:dd:83:a2:56:fe:c2:c3:b4:00:d7:a7:8f:3c:
96:e7:21:8c:02:ff:41:74:3e:56:f7:07:9f:70:59:96:c8:94:
4c:47:d2:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5UDL6nD4nJx24nVgraleefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE5MDAxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGEwOGNhY2QxMGVjZWY2MTE4YzYxOTg4ZTllYjM3ZmFlYmNlYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZf0PNfaUyvtrghr3jNnzqMX0V4j
XdnB/zWZ5GlKXR6qsrFNsc8LJX9Jxm6TTcsGRy/OIwj9sardt7CaKY6e8EVOwt1b
7z0Ke5+gUYm4G0tuHOYey01a9el7gJ7FiOQc7GiYJQl4ew5+F/30V1jLTX8kPllv
N1bfNawitP0O9nHs5QvgdPDZ5rjFKnhz4Qj15J4QnhOc8FXkyda+vr9T6s4OCI92
Vo6I1iEcBdxfpWQji/4vfbqqU1EJrMN4bCdf0loTJbR5If3GBDONvCkOLmLi1xFG
Y07KRGH2QD6kmHTotZQoLAbTIGZpDwNR4s7wvOmlrjiJh+N6P/cV4FNwTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF2gjKzRDs72EYxhmI6es3+uvOovMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWGFDTXJORU96dllSakdHWWpwNnpmNjY4Nmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGBIZ27p4gLQibTMDMdk
ySoXtz5jLyqAiz7oOYOgRz/ByIBG6fg8iIKRU9f0kFnu0UCVd2Br4cGoLhvlw3Ui
aaPLqSGCqeZRhWnT6kVG6JiMh4jMhImXF9pk8KKyOBoyMtd3p8u+0v2I/BvLp40k
BltDSfch3ZmB/yDRu1cS5zPJ7xCdNY5TuUoPfzGp0/KKZHslE3NXsD9BrW7AZvWw
mlON/IovAkhpngthBu4Rvii923uNY5j0zvO+HaJWHcpiP9sSqrJuJox55e/sD7YT
D88lSc53YGU+fStRDGlf3YOiVv7Cw7QA16ePPJbnIYwC/0F0Plb3B59wWZbIlExH
0iQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:12 2025 by rpki-client