Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aZyQGma39KQ9UKwejCmPEZ8kFQ4.roa
File: aZyQGma39KQ9UKwejCmPEZ8kFQ4.roa (raw, json)
Hash identifier: PT9uNRPwKsr/7wVpI/t86bfl3F3vAIX4nOU5BuYZZrQ=
Subject key identifier: 69:9C:90:1A:66:B7:F4:A4:3D:50:AC:1E:8C:29:8F:11:9F:24:15:0E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB8E267A2534CA141B3419F7BD0D36EFE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aZyQGma39KQ9UKwejCmPEZ8kFQ4.roa
Signing time: Sat 17 Feb 2024 21:04:21 +0000
ROA not before: Sat 17 Feb 2024 21:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:b8e2:531b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:e2:67:a2:53:4c:a1:41:b3:41:9f:7b:d0:d3:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 21:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=699c901a66b7f4a43d50ac1e8c298f119f24150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:11:9d:e1:59:2c:46:0f:8d:81:45:5d:c1:
47:f0:46:cf:35:66:cd:d7:03:81:49:47:5b:cf:89:
1d:ba:1b:ff:dc:ac:5b:b3:30:99:61:59:1d:e4:1f:
2f:86:96:56:78:e7:64:b7:f8:12:d2:dc:d0:2b:8e:
77:81:4e:3c:25:01:87:77:8e:b9:25:b4:a9:72:5a:
30:d2:49:f2:45:c3:9d:36:f9:68:35:a4:c9:13:bb:
b9:2d:c5:bb:c6:14:0f:ee:a7:7b:1e:d5:0d:7b:7d:
43:30:30:ed:8a:be:46:c8:aa:ff:ba:3f:67:47:03:
23:ca:a3:87:9c:aa:be:7b:88:9b:3b:2d:ce:f8:75:
9f:06:d3:60:ca:cd:4e:04:56:88:d7:75:ad:22:6b:
4c:07:d4:7a:f5:0c:d2:a3:2e:a3:ac:c8:c3:c5:df:
74:8e:8b:03:76:7e:12:3f:34:50:86:8b:1d:fa:aa:
0f:f4:d8:99:a8:e7:f9:00:f4:68:b4:e4:6c:5c:bf:
1a:65:7a:cf:86:d3:f1:73:93:58:08:e6:a2:97:48:
fa:24:b8:a2:c5:c3:28:3b:fc:c5:07:65:40:9e:29:
24:f1:2c:20:75:fc:bb:13:3e:b8:94:2c:85:27:fb:
75:b2:9d:b1:73:59:e2:20:80:2d:83:55:8b:d6:e7:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:90:1A:66:B7:F4:A4:3D:50:AC:1E:8C:29:8F:11:9F:24:15:0E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aZyQGma39KQ9UKwejCmPEZ8kFQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:95:46:c9:2a:10:6b:73:50:b7:23:af:28:62:fd:ae:ce:b3:
ca:78:f3:0e:bc:3d:72:5f:f9:7b:60:cc:48:64:bb:58:b0:84:
d4:49:26:e8:ec:95:b9:31:dd:98:15:08:79:1c:e1:cb:0a:e9:
9a:af:86:cb:4e:2c:fc:47:fc:1c:c2:be:e2:5f:64:05:b7:e0:
49:62:79:99:b2:c2:bb:89:3c:a3:69:c9:ec:c9:63:24:46:10:
6b:19:e8:65:77:29:ce:14:e9:c6:66:31:bd:65:e1:10:01:47:
7d:10:0e:c7:e3:89:4d:99:5f:3a:c5:d9:5e:fa:f6:f1:1e:45:
a2:71:2b:9f:f9:e9:df:ce:a3:84:43:7a:2e:32:b8:0b:3c:8d:
a4:4e:e6:84:3c:cd:a3:8b:ed:6e:fc:a6:19:62:20:a9:c0:9f:
40:e1:4b:8b:3c:e9:72:b2:ac:4b:38:90:4a:f0:c9:a8:8d:62:
99:89:a2:9c:a7:aa:e1:e8:bb:7c:60:b5:20:0e:64:82:5e:41:
5a:e0:9a:24:ba:d9:e9:af:06:95:c5:ff:d4:81:9c:c9:4b:0c:
5d:ae:26:87:be:44:02:24:57:01:51:5d:97:33:8f:b1:bb:1e:
65:96:ea:3a:cf:ac:7f:98:4a:5a:f0:56:0b:cd:ea:e2:2e:53:
64:05:6e:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY244meiU0yhQbNBn3vQ027+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE3MjEwNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTljOTAxYTY2YjdmNGE0M2Q1MGFjMWU4YzI5OGYxMTlmMjQxNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GYRneFZLEYPjYFFXcFH8EbPNWbN
1wOBSUdbz4kduhv/3KxbszCZYVkd5B8vhpZWeOdkt/gS0tzQK453gU48JQGHd465
JbSpclow0knyRcOdNvloNaTJE7u5LcW7xhQP7qd7HtUNe31DMDDtir5GyKr/uj9n
RwMjyqOHnKq+e4ibOy3O+HWfBtNgys1OBFaI13WtImtMB9R69QzSoy6jrMjDxd90
josDdn4SPzRQhosd+qoP9NiZqOf5APRotORsXL8aZXrPhtPxc5NYCOail0j6JLii
xcMoO/zFB2VAnikk8Swgdfy7Ez64lCyFJ/t1sp2xc1niIIAtg1WL1ufpWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGmckBpmt/SkPVCsHowpjxGfJBUOMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYVp5UUdtYTM5S1E5VUt3ZWpDbVBFWjhrRlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAImVRskqEGtzULcjryhi
/a7Os8p48w68PXJf+XtgzEhku1iwhNRJJujslbkx3ZgVCHkc4csK6ZqvhstOLPxH
/BzCvuJfZAW34ElieZmywruJPKNpyezJYyRGEGsZ6GV3Kc4U6cZmMb1l4RABR30Q
DsfjiU2ZXzrF2V769vEeRaJxK5/56d/Oo4RDei4yuAs8jaRO5oQ8zaOL7W78phli
IKnAn0DhS4s86XKyrEs4kErwyaiNYpmJopynquHou3xgtSAOZIJeQVrgmiS62emv
BpXF/9SBnMlLDF2uJoe+RAIkVwFRXZczj7G7HmWW6jrPrH+YSlrwVgvN6uIuU2QF
bjM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:20 2025 by rpki-client