Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fB69IbdXYtU2RyXglUle5ZrmIao.roa
File: fB69IbdXYtU2RyXglUle5ZrmIao.roa (raw, json)
Hash identifier: fyAtAigloZOWCsFxpumqRJ48ROVcEOP2RT435wmGNK8=
Subject key identifier: 7C:1E:BD:21:B7:57:62:D5:36:47:25:E0:95:49:5E:E5:9A:E6:21:AA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDFC1ACC6922C23A547D2C77CBB92E587
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fB69IbdXYtU2RyXglUle5ZrmIao.roa
Signing time: Sun 25 Feb 2024 10:13:48 +0000
ROA not before: Sun 25 Feb 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:c1:ac:c6:92:2c:23:a5:47:d2:c7:7c:bb:92:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c1ebd21b75762d5364725e095495ee59ae621aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:68:06:5b:b9:13:7b:1e:33:74:74:43:bd:
9e:4c:76:f6:73:a2:c0:35:c4:e4:e5:1c:4e:cb:30:
6b:d9:af:a1:18:0b:74:33:04:9e:3e:0c:49:b4:0f:
aa:35:ca:a4:29:34:24:0b:4f:0e:fd:75:d3:62:4e:
9c:97:b5:c8:10:1f:8b:25:c0:5a:dc:7c:25:0f:47:
26:73:c5:70:5e:0f:37:18:1f:21:20:b0:f2:c4:6f:
1a:1e:21:23:d7:02:b5:90:80:ec:95:cb:e2:16:1a:
9a:47:a2:3c:9c:34:db:e1:86:72:6a:4a:ee:10:1e:
8e:6a:6e:7b:42:c9:ba:70:64:dd:33:e3:cf:d6:37:
40:b9:c8:dc:7d:1a:31:c2:94:4c:93:92:53:9d:26:
8d:7b:32:5c:c0:e5:cc:0e:93:c0:d7:6e:18:35:6f:
f4:14:20:4f:5a:a0:9d:b8:8e:bd:fe:ee:21:fb:26:
76:3d:3d:cf:05:48:42:35:db:04:cc:97:ac:30:7e:
84:c2:9a:93:e6:5c:92:8a:35:d9:cc:6f:d4:0f:0f:
56:b1:58:ba:2f:34:c7:c0:89:a0:0d:b7:04:97:84:
69:86:4e:da:01:c1:eb:77:ee:02:33:c1:25:7f:b8:
d6:01:32:48:da:9d:f6:88:83:ed:e0:4a:ea:7b:e2:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:BD:21:B7:57:62:D5:36:47:25:E0:95:49:5E:E5:9A:E6:21:AA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fB69IbdXYtU2RyXglUle5ZrmIao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:51:fc:7f:c6:06:28:56:14:3e:df:ce:48:fb:7f:18:3d:98:
2f:e1:20:93:60:79:7c:42:36:1b:68:f6:69:7d:cb:54:61:ff:
3c:d5:1e:a0:ed:3b:7e:bb:04:b6:2f:35:d9:2b:85:2a:78:3c:
e3:ae:87:64:c7:a0:fb:64:44:be:30:fe:4c:38:01:3a:18:83:
4a:55:69:ec:be:12:b1:57:b9:df:bc:e4:9d:75:21:a1:ac:29:
39:74:6a:2e:3e:b9:69:5a:43:09:24:ee:26:06:8b:de:32:5b:
85:f8:fc:65:b4:5a:a1:5e:6f:ea:5a:4f:91:a1:9e:a3:25:1f:
25:ec:29:39:cb:5f:de:d4:a4:14:9e:6f:1b:62:3f:a5:f9:85:
11:de:8f:19:f4:c9:0e:c1:72:3a:57:3b:e1:1c:bd:7c:68:10:
54:8f:08:25:6d:87:f2:82:ca:fe:c4:85:0a:09:eb:0b:c8:47:
03:a2:8c:26:a4:b2:2d:0e:67:94:9c:4c:ec:61:e9:18:c9:5e:
2a:0e:eb:b6:17:4a:db:50:5c:12:35:04:3c:05:e8:5b:03:53:
07:36:65:88:23:ae:42:6b:ab:16:53:28:25:56:fd:fb:36:61:
6c:bf:68:f3:fe:f6:0e:55:d7:aa:9e:1d:fd:11:21:d8:8a:0b:
e3:fc:5f:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3fwazGkiwjpUfSx3y7kuWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI1MTAxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzFlYmQyMWI3NTc2MmQ1MzY0NzI1ZTA5NTQ5NWVlNTlhZTYyMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNJoBlu5E3seM3R0Q72eTHb2c6LA
NcTk5RxOyzBr2a+hGAt0MwSePgxJtA+qNcqkKTQkC08O/XXTYk6cl7XIEB+LJcBa
3HwlD0cmc8VwXg83GB8hILDyxG8aHiEj1wK1kIDslcviFhqaR6I8nDTb4YZyakru
EB6Oam57Qsm6cGTdM+PP1jdAucjcfRoxwpRMk5JTnSaNezJcwOXMDpPA124YNW/0
FCBPWqCduI69/u4h+yZ2PT3PBUhCNdsEzJesMH6EwpqT5lySijXZzG/UDw9WsVi6
LzTHwImgDbcEl4Rphk7aAcHrd+4CM8Elf7jWATJI2p32iIPt4Erqe+JwHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHwevSG3V2LVNkcl4JVJXuWa5iGqMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZkI2OUliZFhZdFUyUnlYZ2xVbGU1WnJtSWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJFR/H/GBihWFD7fzkj7
fxg9mC/hIJNgeXxCNhto9ml9y1Rh/zzVHqDtO367BLYvNdkrhSp4POOuh2THoPtk
RL4w/kw4AToYg0pVaey+ErFXud+85J11IaGsKTl0ai4+uWlaQwkk7iYGi94yW4X4
/GW0WqFeb+paT5GhnqMlHyXsKTnLX97UpBSebxtiP6X5hRHejxn0yQ7BcjpXO+Ec
vXxoEFSPCCVth/KCyv7EhQoJ6wvIRwOijCaksi0OZ5ScTOxh6RjJXioO67YXSttQ
XBI1BDwF6FsDUwc2ZYgjrkJrqxZTKCVW/fs2YWy/aPP+9g5V16qeHf0RIdiKC+P8
X5E=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:04 2025 by rpki-client