Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/efWE7A6jqVOFA36ZX0nivDroxgA.roa
File: efWE7A6jqVOFA36ZX0nivDroxgA.roa (raw, json)
Hash identifier: fJnCU+3xLjpYT25Q74/iXNXYtxKlWtkyRy/ilvVwWD8=
Subject key identifier: 79:F5:84:EC:0E:A3:A9:53:85:03:7E:99:5F:49:E2:BC:3A:E8:C6:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4197B54A9FCAB0C5A45F814571A6CB6E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/efWE7A6jqVOFA36ZX0nivDroxgA.roa
Signing time: Fri 15 Mar 2024 10:10:45 +0000
ROA not before: Fri 15 Mar 2024 10:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:97:b5:4a:9f:ca:b0:c5:a4:5f:81:45:71:a6:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 10:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f584ec0ea3a95385037e995f49e2bc3ae8c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:67:27:a0:90:a9:94:64:48:7d:93:bd:7a:
ec:ab:bf:14:d9:b0:b1:bb:c4:ae:e0:91:d8:90:b4:
63:6a:69:c3:54:07:95:a5:07:4d:a5:fa:a4:35:59:
5f:90:5b:70:53:8f:c6:48:79:a3:07:f7:07:a6:ef:
a6:df:f6:49:b3:69:6c:c1:03:a8:1a:0b:b9:cb:2c:
97:91:a8:79:62:a8:82:0b:6a:4a:73:ef:98:1e:b7:
88:a7:95:b3:f4:0a:50:1b:bb:92:4a:4e:94:2f:3f:
4f:39:30:a8:7a:40:e5:24:d4:6b:90:f6:3f:90:bc:
7b:d7:f1:e9:51:43:7f:b2:24:dd:15:71:87:40:09:
2b:6e:2d:b3:35:26:d8:79:c8:2a:bc:d3:cf:36:a4:
05:47:dc:d3:1a:87:de:2e:f2:b4:14:ca:79:43:65:
e0:91:2b:bd:50:a8:5e:de:f1:cd:20:99:b5:06:ae:
6d:1d:ad:64:10:98:02:ba:84:40:ec:2d:ee:00:f1:
ae:45:73:c1:5c:62:c2:42:84:9c:e1:06:c3:79:2a:
70:aa:44:90:67:e2:b3:a7:16:60:d3:65:4f:be:ee:
55:94:54:20:a5:29:19:73:4c:ef:6f:68:fa:36:2a:
13:4f:65:09:ac:14:db:1a:d5:eb:44:f5:be:b5:d4:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F5:84:EC:0E:A3:A9:53:85:03:7E:99:5F:49:E2:BC:3A:E8:C6:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/efWE7A6jqVOFA36ZX0nivDroxgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ad:41:b8:1e:3a:dc:55:73:a6:14:8f:c4:4d:7a:da:23:a6:
b3:64:cc:8f:34:86:91:04:c9:2f:33:e2:52:16:63:72:9d:7a:
4e:a2:d8:34:b6:dd:e8:ec:65:5e:10:30:f8:cf:01:8e:e4:c1:
63:62:cd:a2:70:7c:4a:98:10:0f:6e:62:55:ed:9c:2e:bc:32:
63:e3:7b:f4:67:b3:65:67:93:0f:9b:d9:6e:62:2a:88:67:bf:
79:33:b0:f8:4e:fc:ad:f2:73:9c:53:a4:11:74:0a:3a:c3:ff:
aa:03:d3:99:39:a8:d4:13:e1:23:9f:5b:02:c9:04:cb:6a:33:
9f:ca:3f:55:29:14:14:ce:9f:f1:6e:9d:e0:0e:f8:27:fe:20:
9c:53:fc:71:d8:4c:8f:a8:31:75:26:c1:f5:d6:9c:cf:55:5e:
10:b5:eb:65:2e:76:97:2b:7f:dd:53:33:cd:1f:0e:56:1b:d2:
9c:6c:fe:14:e9:9c:c9:f0:c7:82:dc:3d:e7:f7:ab:51:4a:a5:
9b:75:77:d2:86:9a:f7:fc:0c:94:8e:cf:06:cb:8c:8d:05:29:
97:9e:96:bf:41:6c:c5:9b:20:8b:c6:ce:f4:5b:d2:d0:87:91:
fd:e8:d4:77:ac:7c:b9:d1:c1:50:b0:ed:3a:df:ec:1c:00:b3:
b3:6f:88:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5Bl7VKn8qwxaRfgUVxpstuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE1MTAxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWY1ODRlYzBlYTNhOTUzODUwMzdlOTk1ZjQ5ZTJiYzNhZThjNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohdnJ6CQqZRkSH2TvXrsq78U2bCx
u8Su4JHYkLRjamnDVAeVpQdNpfqkNVlfkFtwU4/GSHmjB/cHpu+m3/ZJs2lswQOo
Ggu5yyyXkah5YqiCC2pKc++YHreIp5Wz9ApQG7uSSk6ULz9POTCoekDlJNRrkPY/
kLx71/HpUUN/siTdFXGHQAkrbi2zNSbYecgqvNPPNqQFR9zTGofeLvK0FMp5Q2Xg
kSu9UKhe3vHNIJm1Bq5tHa1kEJgCuoRA7C3uAPGuRXPBXGLCQoSc4QbDeSpwqkSQ
Z+KzpxZg02VPvu5VlFQgpSkZc0zvb2j6NioTT2UJrBTbGtXrRPW+tdSZAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHn1hOwOo6lThQN+mV9J4rw66MYAMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZWZXRTdBNmpxVk9GQTM2Wlgwbml2RHJveGdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFytQbgeOtxVc6YUj8RN
etojprNkzI80hpEEyS8z4lIWY3Kdek6i2DS23ejsZV4QMPjPAY7kwWNizaJwfEqY
EA9uYlXtnC68MmPje/Rns2Vnkw+b2W5iKohnv3kzsPhO/K3yc5xTpBF0CjrD/6oD
05k5qNQT4SOfWwLJBMtqM5/KP1UpFBTOn/FuneAO+Cf+IJxT/HHYTI+oMXUmwfXW
nM9VXhC162Uudpcrf91TM80fDlYb0pxs/hTpnMnwx4LcPef3q1FKpZt1d9KGmvf8
DJSOzwbLjI0FKZeelr9BbMWbIIvGzvRb0tCHkf3o1HesfLnRwVCw7Trf7BwAs7Nv
iHA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:50 2025 by rpki-client