Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d_5iuJ8Y2zTMFHhgnLsFfpCG7AY.roa
File: d_5iuJ8Y2zTMFHhgnLsFfpCG7AY.roa (raw, json)
Hash identifier: Os39bBJLd7fSsQmugwFBHuTTl9hciywxzVFgtL4CBwA=
Subject key identifier: 77:FE:62:B8:9F:18:DB:34:CC:14:78:60:9C:BB:05:7E:90:86:EC:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE9A122F75A91895071E1CB0BD9B4217D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d_5iuJ8Y2zTMFHhgnLsFfpCG7AY.roa
Signing time: Mon 08 Jan 2024 15:11:40 +0000
ROA not before: Mon 08 Jan 2024 15:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:a1:22:f7:5a:91:89:50:71:e1:cb:0b:d9:b4:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 15:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77fe62b89f18db34cc1478609cbb057e9086ec06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:b2:3c:a4:e8:69:12:80:81:48:a7:40:c4:
43:3e:0d:55:da:49:a8:37:90:7c:f6:8d:b6:a8:28:
1e:c3:93:d3:c5:b6:7c:03:4b:d6:f1:3a:15:5a:77:
3c:ce:47:2d:97:d6:26:c4:4a:3e:78:81:61:d8:7e:
0b:dc:74:13:dc:15:e5:19:a7:48:64:b0:d6:8b:7d:
cf:20:58:5c:99:1c:3e:00:5d:82:57:93:23:32:1f:
0c:17:f1:4f:5b:70:a3:f0:bd:fa:ab:5f:85:2a:3c:
62:a8:e1:06:5b:eb:aa:ea:f0:4c:4b:15:ae:fb:35:
26:80:41:51:ab:0d:c7:fd:c5:07:c6:d1:99:b6:9b:
02:15:61:cd:47:01:e2:ff:0e:74:7d:fb:d2:13:bb:
df:17:30:af:e3:2b:31:d1:6e:33:be:0e:88:8d:f5:
b7:4e:a4:4d:48:89:c1:7a:3d:82:40:66:24:97:67:
9e:b8:a2:66:e0:2a:c6:2b:3b:3e:61:78:c6:d7:74:
f8:df:68:27:32:7d:1a:e3:ce:66:97:9c:07:4a:c1:
62:13:6b:73:b5:26:c4:97:4b:1b:99:0e:c8:9f:04:
30:5b:d7:dc:12:c3:8e:39:cc:39:ff:5b:89:7a:a7:
7a:d6:36:3d:2b:c0:56:e8:38:e2:49:d3:87:7b:0b:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:62:B8:9F:18:DB:34:CC:14:78:60:9C:BB:05:7E:90:86:EC:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d_5iuJ8Y2zTMFHhgnLsFfpCG7AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:c1:97:32:cb:9b:61:2e:1d:a6:17:a9:7e:15:d0:5d:8a:0e:
ea:ad:69:de:73:72:0e:b6:3f:69:f3:28:75:4a:15:68:ff:75:
39:02:a0:5e:c3:a4:10:a2:3d:d4:d1:c4:92:9d:a2:56:3b:6c:
ad:ef:a3:ef:e6:66:b1:db:69:f9:b1:52:0c:94:20:94:5a:8b:
16:ab:f6:e3:48:31:4c:eb:eb:df:ae:23:e7:59:20:62:ad:a1:
23:9f:0c:82:48:3c:e7:18:ca:10:80:a2:e2:87:3b:6c:d9:d1:
ff:0e:9e:6c:a2:31:50:71:e7:83:fa:92:1a:0a:83:1b:51:92:
ea:1c:f4:e5:d1:25:07:b1:90:8c:2a:3f:16:8b:b5:45:e5:e1:
41:11:6e:b3:4d:e2:e2:7b:38:6f:07:47:96:41:0e:a0:d7:08:
65:2e:67:22:a5:fe:8e:33:f9:32:d2:81:23:f0:a1:0a:27:4c:
10:2d:3d:e6:ec:c7:4b:4e:70:78:3f:97:fe:b7:c6:3c:3d:8b:
e4:90:45:5e:c8:4d:c3:53:3b:5d:fd:ed:1b:15:04:da:38:e8:
cc:39:28:13:95:65:30:43:58:6f:85:58:f4:eb:fa:94:3f:60:
35:29:40:f7:4f:08:9d:56:6f:2c:9d:00:48:e7:85:76:35:1d:
e5:f4:bb:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzpoSL3WpGJUHHhywvZtCF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA4MTUxMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2ZlNjJiODlmMThkYjM0Y2MxNDc4NjA5Y2JiMDU3ZTkwODZlYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqouyPKToaRKAgUinQMRDPg1V2kmo
N5B89o22qCgew5PTxbZ8A0vW8ToVWnc8zkctl9YmxEo+eIFh2H4L3HQT3BXlGadI
ZLDWi33PIFhcmRw+AF2CV5MjMh8MF/FPW3Cj8L36q1+FKjxiqOEGW+uq6vBMSxWu
+zUmgEFRqw3H/cUHxtGZtpsCFWHNRwHi/w50ffvSE7vfFzCv4ysx0W4zvg6IjfW3
TqRNSInBej2CQGYkl2eeuKJm4CrGKzs+YXjG13T432gnMn0a485ml5wHSsFiE2tz
tSbEl0sbmQ7InwQwW9fcEsOOOcw5/1uJeqd61jY9K8BW6DjiSdOHewuZwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHf+YrifGNs0zBR4YJy7BX6QhuwGMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZF81aXVKOFkyelRNRkhoZ25Mc0ZmcENHN0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF3BlzLLm2EuHaYXqX4V
0F2KDuqtad5zcg62P2nzKHVKFWj/dTkCoF7DpBCiPdTRxJKdolY7bK3vo+/mZrHb
afmxUgyUIJRaixar9uNIMUzr69+uI+dZIGKtoSOfDIJIPOcYyhCAouKHO2zZ0f8O
nmyiMVBx54P6khoKgxtRkuoc9OXRJQexkIwqPxaLtUXl4UERbrNN4uJ7OG8HR5ZB
DqDXCGUuZyKl/o4z+TLSgSPwoQonTBAtPebsx0tOcHg/l/63xjw9i+SQRV7ITcNT
O1397RsVBNo46Mw5KBOVZTBDWG+FWPTr+pQ/YDUpQPdPCJ1WbyydAEjnhXY1HeX0
u5E=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:38:09 2025 by rpki-client