Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bA08rmLLMlsOcMKpyO00hbs4DbQ.roa
File: bA08rmLLMlsOcMKpyO00hbs4DbQ.roa (raw, json)
Hash identifier: Hwx+JqZhPksBwB7AI9YyQEu2ftXR4ZhCS/X66ckqSrg=
Subject key identifier: 6C:0D:3C:AE:62:CB:32:5B:0E:70:C2:A9:C8:ED:34:85:BB:38:0D:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF53501EAAE496606EB3ECBE1664734F5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bA08rmLLMlsOcMKpyO00hbs4DbQ.roa
Signing time: Thu 29 Feb 2024 14:11:48 +0000
ROA not before: Thu 29 Feb 2024 14:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:35:01:ea:ae:49:66:06:eb:3e:cb:e1:66:47:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 14:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c0d3cae62cb325b0e70c2a9c8ed3485bb380db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:12:fa:60:b2:c6:17:a0:ed:12:56:68:29:
d8:5a:66:1d:cd:17:86:e8:41:69:14:0f:9c:9d:cd:
d1:ee:58:39:1a:ed:c2:cc:34:b3:46:b9:8e:12:a4:
9d:8c:92:7b:89:0b:9e:2e:52:34:e3:00:32:87:58:
92:76:6a:c8:98:27:36:5d:48:aa:e7:89:55:75:db:
af:96:04:bb:09:67:30:84:b6:51:49:be:56:43:64:
3d:f3:50:bf:72:e9:e1:67:a2:40:59:4d:de:4c:77:
a6:07:74:c8:a2:74:fa:20:1f:ef:85:e1:a9:97:04:
c2:a5:60:2d:0e:91:3e:47:4c:94:e6:a6:65:7b:ae:
57:9c:71:4c:bf:2d:28:64:b9:14:8e:72:7b:ba:51:
1c:c9:a5:fb:09:b3:cc:34:87:38:ba:f3:dd:7b:1e:
cc:9e:86:26:82:34:9b:1b:06:0c:c0:da:1a:8b:1b:
66:37:f1:ce:b2:15:c4:5c:61:d9:77:d4:f8:99:3b:
56:bb:20:f6:c2:5a:2b:80:69:e7:c5:44:7a:08:23:
e3:17:b8:2e:bd:32:93:b4:d9:89:2d:66:73:71:58:
3e:17:ba:98:e1:37:9b:a1:5e:07:03:8d:01:dc:6e:
3f:50:72:13:97:10:a8:b4:38:83:b4:37:ce:0f:52:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:3C:AE:62:CB:32:5B:0E:70:C2:A9:C8:ED:34:85:BB:38:0D:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bA08rmLLMlsOcMKpyO00hbs4DbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:53:de:03:9d:f1:29:e4:ee:0d:b8:c5:7e:77:b4:3e:30:3a:
a8:53:8f:72:51:e8:0b:b0:4d:0e:56:e1:c4:62:43:6f:7d:b4:
ba:f0:ae:8f:b2:78:d7:05:79:8b:34:f6:93:e0:7f:b4:72:c3:
fa:72:83:72:64:10:41:6e:3b:b3:7e:17:ae:ea:b8:ad:e8:22:
43:41:f3:c9:b1:ff:b3:b2:40:bc:fa:65:c2:98:84:d8:8f:76:
62:5e:68:ad:03:90:92:78:ba:f7:8e:94:fc:df:cc:6e:a6:93:
25:0f:56:5e:2c:ae:9f:76:b1:80:fd:b8:2d:7d:91:6a:78:8c:
18:e4:40:27:9c:b0:5b:e3:b6:68:4b:a5:f1:91:04:d8:c1:5f:
38:9c:98:37:1b:e8:4d:20:0b:03:1f:9e:8f:6a:40:58:06:52:
0a:49:b8:8b:ef:d8:81:86:c8:23:23:a4:e1:4d:ec:7c:14:72:
a5:6f:0e:a3:e0:3f:15:e6:86:37:95:a4:d0:c5:53:b8:b1:7d:
b1:27:01:58:c1:5a:68:99:8d:98:d0:16:8a:93:2e:65:84:c4:
e7:ef:31:29:24:3b:27:4a:19:97:d4:11:b4:07:3c:f7:b0:3a:
a7:73:51:7e:84:48:bb:ec:5a:38:d6:c5:f0:fe:50:d4:51:3e:
dc:c0:7a:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY31NQHqrklmBus+y+FmRzT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI5MTQxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzBkM2NhZTYyY2IzMjViMGU3MGMyYTljOGVkMzQ4NWJiMzgwZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNMS+mCyxheg7RJWaCnYWmYdzReG
6EFpFA+cnc3R7lg5Gu3CzDSzRrmOEqSdjJJ7iQueLlI04wAyh1iSdmrImCc2XUiq
54lVdduvlgS7CWcwhLZRSb5WQ2Q981C/cunhZ6JAWU3eTHemB3TIonT6IB/vheGp
lwTCpWAtDpE+R0yU5qZle65XnHFMvy0oZLkUjnJ7ulEcyaX7CbPMNIc4uvPdex7M
noYmgjSbGwYMwNoaixtmN/HOshXEXGHZd9T4mTtWuyD2wlorgGnnxUR6CCPjF7gu
vTKTtNmJLWZzcVg+F7qY4TeboV4HA40B3G4/UHITlxCotDiDtDfOD1JMIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGwNPK5iyzJbDnDCqcjtNIW7OA20MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYkEwOHJtTExNbHNPY01LcHlPMDBoYnM0RGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVT3gOd8Snk7g24xX53
tD4wOqhTj3JR6AuwTQ5W4cRiQ299tLrwro+yeNcFeYs09pPgf7Ryw/pyg3JkEEFu
O7N+F67quK3oIkNB88mx/7OyQLz6ZcKYhNiPdmJeaK0DkJJ4uveOlPzfzG6mkyUP
Vl4srp92sYD9uC19kWp4jBjkQCecsFvjtmhLpfGRBNjBXzicmDcb6E0gCwMfno9q
QFgGUgpJuIvv2IGGyCMjpOFN7HwUcqVvDqPgPxXmhjeVpNDFU7ixfbEnAVjBWmiZ
jZjQFoqTLmWExOfvMSkkOydKGZfUEbQHPPewOqdzUX6ESLvsWjjWxfD+UNRRPtzA
ejY=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:02 2025 by rpki-client