Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c_MiC8XoSt6XmhVhgekNNuMfjcY.roa
File: c_MiC8XoSt6XmhVhgekNNuMfjcY.roa (raw, json)
Hash identifier: /7RtUFq/ONzMJbEnaozaBUF6Dco6P6kJQAoqTzJ5a6A=
Subject key identifier: 73:F3:22:0B:C5:E8:4A:DE:97:9A:15:61:81:E9:0D:36:E3:1F:8D:C6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB9FC6375C5CA9247EDBC476F1320CAF3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c_MiC8XoSt6XmhVhgekNNuMfjcY.roa
Signing time: Sun 18 Feb 2024 02:12:21 +0000
ROA not before: Sun 18 Feb 2024 02:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b9:fc:63:75:c5:ca:92:47:ed:bc:47:6f:13:20:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 02:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f3220bc5e84ade979a156181e90d36e31f8dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:b6:27:fd:45:8c:48:d1:29:9c:85:2e:77:
32:dd:56:a9:f9:e7:30:c0:41:aa:27:bd:b0:09:96:
a6:80:da:de:e2:52:1d:a4:e7:17:f0:82:65:71:dd:
46:99:b1:8a:12:46:cb:35:7a:10:95:f4:cf:5f:df:
94:21:2a:5d:2e:db:96:59:c1:ed:50:91:da:b3:4b:
5d:c4:82:f8:48:72:63:83:c3:87:30:c9:07:4c:cf:
8a:45:74:e7:58:24:d3:af:fc:f1:84:8c:b0:71:e1:
bc:6d:76:f4:7e:46:61:8b:2d:5c:41:22:88:8b:c5:
7b:c4:a0:36:68:2e:e9:b4:5e:83:de:50:76:02:d6:
1d:29:f4:ae:64:7a:43:78:df:3f:63:64:fa:6b:ab:
9b:04:f3:e8:c4:21:15:9a:8b:c9:51:57:85:a4:2c:
c3:8a:36:e4:7b:4c:84:6e:7a:18:6c:8f:77:2e:06:
eb:10:81:d3:e9:f6:3f:da:1d:6a:41:b3:93:67:20:
fd:ce:36:cb:63:ea:a2:4d:61:3e:31:35:b3:ef:0d:
c9:92:f9:cd:23:cb:d3:81:c8:e3:b5:53:6d:8c:14:
ec:b5:32:dc:4f:de:d6:d4:1f:03:2c:aa:bc:80:22:
1a:be:8b:8a:49:bf:2b:8f:17:40:73:f1:48:e6:cf:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:22:0B:C5:E8:4A:DE:97:9A:15:61:81:E9:0D:36:E3:1F:8D:C6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c_MiC8XoSt6XmhVhgekNNuMfjcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:eb:98:45:dd:04:76:f8:c3:9a:5c:a0:de:0c:4a:4a:6a:17:
2a:cb:28:e3:69:a4:e0:7c:af:3f:81:1b:79:f3:84:e2:4d:78:
b6:76:46:c3:84:71:b6:67:c8:63:da:d1:e2:c3:11:51:db:8b:
90:df:eb:ea:08:b5:f4:40:7a:43:54:e3:a5:3a:97:ab:6a:7f:
25:ea:22:ea:8b:59:30:b3:8d:91:a3:24:db:91:e1:ab:61:c5:
1b:0c:04:8b:3d:d9:ae:b1:d9:11:3f:8b:6e:58:b6:c3:7f:b1:
49:08:89:5e:b8:8b:37:85:3f:59:e5:eb:c8:12:50:f5:1c:2b:
0d:56:43:ba:fb:b4:0f:fe:79:0e:19:f6:32:1d:29:f5:1c:ba:
75:46:fa:f1:9c:76:61:76:f9:7d:97:9a:dc:8c:2e:3c:74:c8:
eb:ab:03:d4:a2:b3:a5:18:eb:49:61:ee:f7:db:41:50:98:82:
bb:6f:99:67:99:56:46:6e:f1:84:63:61:5a:08:3e:63:6f:a5:
11:b9:a6:8d:4b:e4:18:af:9c:b9:c0:47:57:f1:d5:b2:d8:17:
2c:b6:83:99:15:c3:6a:38:1a:fd:6d:c4:6e:5a:37:fb:96:eb:
33:0e:95:13:99:b3:40:7f:a4:68:b9:b4:03:27:04:0e:c8:b4:
78:05:a2:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY25/GN1xcqSR+28R28TIMrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE4MDIxMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2YzMjIwYmM1ZTg0YWRlOTc5YTE1NjE4MWU5MGQzNmUzMWY4ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYW2J/1FjEjRKZyFLncy3Vap+ecw
wEGqJ72wCZamgNre4lIdpOcX8IJlcd1GmbGKEkbLNXoQlfTPX9+UISpdLtuWWcHt
UJHas0tdxIL4SHJjg8OHMMkHTM+KRXTnWCTTr/zxhIywceG8bXb0fkZhiy1cQSKI
i8V7xKA2aC7ptF6D3lB2AtYdKfSuZHpDeN8/Y2T6a6ubBPPoxCEVmovJUVeFpCzD
ijbke0yEbnoYbI93LgbrEIHT6fY/2h1qQbOTZyD9zjbLY+qiTWE+MTWz7w3JkvnN
I8vTgcjjtVNtjBTstTLcT97W1B8DLKq8gCIavouKSb8rjxdAc/FI5s/95wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHPzIgvF6Erel5oVYYHpDTbjH43GMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvY19NaUM4WG9TdDZYbWhWaGdla05OdU1mamNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIXrmEXdBHb4w5pcoN4M
SkpqFyrLKONppOB8rz+BG3nzhOJNeLZ2RsOEcbZnyGPa0eLDEVHbi5Df6+oItfRA
ekNU46U6l6tqfyXqIuqLWTCzjZGjJNuR4athxRsMBIs92a6x2RE/i25YtsN/sUkI
iV64izeFP1nl68gSUPUcKw1WQ7r7tA/+eQ4Z9jIdKfUcunVG+vGcdmF2+X2XmtyM
Ljx0yOurA9Sis6UY60lh7vfbQVCYgrtvmWeZVkZu8YRjYVoIPmNvpRG5po1L5Biv
nLnAR1fx1bLYFyy2g5kVw2o4Gv1txG5aN/uW6zMOlROZs0B/pGi5tAMnBA7ItHgF
ouM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:02 2025 by rpki-client