Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e0RZnnStTOp786QQu-JhMdGJORc.roa
File: e0RZnnStTOp786QQu-JhMdGJORc.roa (raw, json)
Hash identifier: XVIv8ivWtfqS5uj9sE817bF6lMxLaPi23mKi/ammEg8=
Subject key identifier: 7B:44:59:9E:74:AD:4C:EA:7B:F3:A4:10:BB:E2:61:31:D1:89:39:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDEA6C70F81ABC35F41A86314B2B8D33F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e0RZnnStTOp786QQu-JhMdGJORc.roa
Signing time: Sun 25 Feb 2024 05:04:48 +0000
ROA not before: Sun 25 Feb 2024 05:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:dea6:61a4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:de:a6:c7:0f:81:ab:c3:5f:41:a8:63:14:b2:b8:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 05:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b44599e74ad4cea7bf3a410bbe26131d1893917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:a3:5c:5e:65:1c:f5:a6:be:cb:01:f3:35:
a8:75:64:6a:0a:9a:9a:67:6b:c9:ab:95:ca:56:5c:
c5:82:15:d5:a7:80:79:ba:3f:e7:43:46:25:d4:0c:
a6:ad:96:42:bb:11:6e:3b:58:a2:2c:eb:44:17:bb:
bf:b9:27:b0:58:ee:f1:51:64:51:ac:93:7b:c4:1c:
6f:12:73:39:0a:74:7f:ea:8d:01:fa:77:64:54:d5:
23:31:b1:16:43:83:b1:08:62:4f:77:19:ca:86:5a:
12:64:da:99:ce:bd:59:1b:16:c9:cd:81:3a:1d:dc:
59:0e:6f:f0:37:a1:13:84:61:e6:e6:62:54:8c:e3:
b9:ed:d0:69:85:fc:fa:7f:f8:23:35:1f:4c:1a:bd:
ef:b8:65:10:8c:90:06:f5:32:58:67:8c:e8:ef:61:
00:b9:bf:8d:78:90:f1:13:cf:12:3d:f1:85:c3:af:
ee:0c:79:32:6e:f6:2f:7d:d4:a3:83:32:c9:c3:99:
d5:9f:ad:a3:79:73:bd:cc:57:5e:73:04:53:4c:2f:
ce:ce:b5:ee:16:e2:ad:c9:df:e6:c9:9d:dc:bf:e3:
db:77:36:41:6d:5b:35:57:92:d2:ba:11:82:d1:a1:
94:60:39:b7:3f:b3:7e:34:b4:0b:29:45:c2:d7:e7:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:59:9E:74:AD:4C:EA:7B:F3:A4:10:BB:E2:61:31:D1:89:39:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e0RZnnStTOp786QQu-JhMdGJORc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:6b:35:26:24:ad:08:9f:ee:2b:51:76:6e:b6:58:9e:2b:e5:
be:f6:77:6f:4d:65:22:7f:3b:cc:de:09:92:71:b2:97:8d:69:
2f:a0:fb:f6:d5:45:fa:e0:3c:d9:b3:13:29:d6:f1:72:54:57:
2c:a1:36:af:72:60:07:7e:83:d9:48:c7:3a:73:ce:ba:db:95:
b4:2d:fc:e7:26:9b:8a:b0:23:f1:5e:7a:79:2a:43:9a:ce:c9:
7c:65:79:61:cd:cf:cd:63:e7:3f:ad:ce:dd:89:91:61:cc:0d:
b6:43:20:dc:19:32:71:44:55:d4:be:7e:af:2c:56:94:8f:b7:
50:65:16:2d:71:b3:f6:e2:f5:16:62:c8:b5:bc:70:71:ea:59:
fe:f9:c1:ca:3d:be:45:bc:50:7f:2d:2d:c0:7a:ca:0f:b3:c6:
cb:a3:a1:72:af:39:d9:4a:fc:60:a3:59:a1:83:75:cb:9b:b8:
6b:f1:c0:69:d5:5f:be:39:d4:74:de:f7:de:c3:ed:2f:a2:54:
e5:ca:33:6c:78:63:73:4a:18:56:8e:1c:db:43:7a:84:4b:e2:
11:86:64:85:98:a6:fb:4a:c1:7a:7d:53:47:07:00:c1:de:79:
38:b4:67:27:12:f1:3b:05:fc:1e:27:84:f5:a5:de:3a:ef:f4:
b8:00:4a:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3epscPgavDX0GoYxSyuNM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI1MDUwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQ0NTk5ZTc0YWQ0Y2VhN2JmM2E0MTBiYmUyNjEzMWQxODkzOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ijXF5lHPWmvssB8zWodWRqCpqa
Z2vJq5XKVlzFghXVp4B5uj/nQ0Yl1AymrZZCuxFuO1iiLOtEF7u/uSewWO7xUWRR
rJN7xBxvEnM5CnR/6o0B+ndkVNUjMbEWQ4OxCGJPdxnKhloSZNqZzr1ZGxbJzYE6
HdxZDm/wN6EThGHm5mJUjOO57dBphfz6f/gjNR9MGr3vuGUQjJAG9TJYZ4zo72EA
ub+NeJDxE88SPfGFw6/uDHkybvYvfdSjgzLJw5nVn62jeXO9zFdecwRTTC/OzrXu
FuKtyd/myZ3cv+PbdzZBbVs1V5LSuhGC0aGUYDm3P7N+NLQLKUXC1+fq4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHtEWZ50rUzqe/OkELviYTHRiTkXMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZTBSWm5uU3RUT3A3ODZRUXUtSmhNZEdKT1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAARrNSYkrQif7itRdm62
WJ4r5b72d29NZSJ/O8zeCZJxspeNaS+g+/bVRfrgPNmzEynW8XJUVyyhNq9yYAd+
g9lIxzpzzrrblbQt/Ocmm4qwI/FeenkqQ5rOyXxleWHNz81j5z+tzt2JkWHMDbZD
INwZMnFEVdS+fq8sVpSPt1BlFi1xs/bi9RZiyLW8cHHqWf75wco9vkW8UH8tLcB6
yg+zxsujoXKvOdlK/GCjWaGDdcubuGvxwGnVX7451HTe997D7S+iVOXKM2x4Y3NK
GFaOHNtDeoRL4hGGZIWYpvtKwXp9U0cHAMHeeTi0ZycS8TsF/B4nhPWl3jrv9LgA
SqU=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:48 2025 by rpki-client