Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fIz2lj3t5zpNnQ6ZvevvHaNy93c.roa
File: fIz2lj3t5zpNnQ6ZvevvHaNy93c.roa (raw, json)
Hash identifier: Dwh+GOqqT2C/UHcf0Dqe9hfPv7GGAvroqMoNE9j4HCQ=
Subject key identifier: 7C:8C:F6:96:3D:ED:E7:3A:4D:9D:0E:99:BD:EB:EF:1D:A3:72:F7:77
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC33B7CFAD0B0D94434CDE220C67BF459
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fIz2lj3t5zpNnQ6ZvevvHaNy93c.roa
Signing time: Mon 19 Feb 2024 21:17:52 +0000
ROA not before: Mon 19 Feb 2024 21:17:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:3b:7c:fa:d0:b0:d9:44:34:cd:e2:20:c6:7b:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 19 21:17:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c8cf6963dede73a4d9d0e99bdebef1da372f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:d2:9d:b9:a5:44:9a:98:0c:e3:13:bb:a3:
48:01:52:bd:3c:34:5c:0e:06:1b:4b:27:85:fa:05:
99:20:b1:db:b8:5b:35:1f:38:59:13:a3:a6:9f:aa:
49:7f:8b:d2:32:95:e2:84:60:b7:22:21:ff:a8:6e:
6b:fe:1c:53:f0:c0:20:27:dc:87:18:c3:50:5f:8f:
36:3d:4c:a6:c4:95:25:3a:b5:00:1b:a2:9c:52:76:
fe:1d:11:2d:30:2c:a8:13:43:0c:7d:c3:5e:42:d1:
b6:9d:eb:c6:48:81:a2:5a:15:84:c2:47:5d:7f:9d:
07:54:2c:90:32:9d:ba:a6:a3:76:27:f4:e1:57:5c:
ae:22:75:26:c1:fa:6f:11:f3:8b:92:19:48:5b:dc:
b8:f5:82:8d:49:30:8d:79:d3:21:24:bb:56:38:93:
7a:9c:ea:32:4d:b5:20:59:a9:51:d9:c8:f7:9b:5c:
cf:69:74:95:81:73:2a:8e:25:4b:f1:75:61:f4:16:
62:4d:c7:e4:40:13:e2:97:f1:16:b4:aa:64:b9:71:
ec:97:32:a2:34:59:43:a4:15:a4:88:8e:cd:64:cb:
79:21:ca:63:59:88:38:c0:ae:7e:34:12:bc:43:56:
56:66:de:ed:9a:5a:1a:40:fc:39:76:29:0b:77:18:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:F6:96:3D:ED:E7:3A:4D:9D:0E:99:BD:EB:EF:1D:A3:72:F7:77
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fIz2lj3t5zpNnQ6ZvevvHaNy93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:84:ba:9a:f1:b3:4e:e5:85:d6:82:1e:a8:00:e6:a2:fd:6f:
87:4f:3b:5b:d9:a5:00:57:4b:29:0b:94:e1:ee:94:c3:09:53:
97:32:a5:40:4b:71:5f:0c:dc:f6:2d:d6:c2:a2:d2:2e:9a:e3:
e6:ba:78:cd:eb:20:72:91:e7:44:24:2a:e8:22:b8:9d:88:19:
67:53:be:cf:8d:a4:c3:b1:2f:ee:03:80:21:e5:2c:8e:fb:17:
0b:71:8c:eb:cb:cd:39:0f:ef:78:32:43:be:70:42:3e:df:22:
54:3b:0a:fb:d5:79:e4:08:5e:85:e9:6d:e1:56:e5:ed:20:1f:
c3:0b:b7:aa:a2:b0:c9:74:54:7f:79:ec:bd:d8:98:f9:e0:d0:
54:b0:8d:15:b9:67:f0:ad:b8:4f:7f:d4:8c:c7:14:3c:7e:fb:
06:ec:2e:9e:4d:e6:e5:5d:b3:ec:69:eb:08:14:39:a2:33:19:
f7:44:d2:09:4a:b8:51:73:44:b7:06:61:0b:42:f7:a3:91:01:
17:1b:2d:8d:9c:7a:84:7a:82:c6:cd:42:44:5d:87:0c:54:73:
37:8f:fa:8f:12:32:fb:7f:7f:07:ff:ae:eb:d3:e6:ba:d6:af:
fc:8a:5b:5a:5e:14:b1:88:a2:4f:ed:89:63:84:fe:c0:ef:86:
eb:9b:a5:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3DO3z60LDZRDTN4iDGe/RZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE5MjExNzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzhjZjY5NjNkZWRlNzNhNGQ5ZDBlOTliZGViZWYxZGEzNzJmNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSjSnbmlRJqYDOMTu6NIAVK9PDRc
DgYbSyeF+gWZILHbuFs1HzhZE6Omn6pJf4vSMpXihGC3IiH/qG5r/hxT8MAgJ9yH
GMNQX482PUymxJUlOrUAG6KcUnb+HREtMCyoE0MMfcNeQtG2nevGSIGiWhWEwkdd
f50HVCyQMp26pqN2J/ThV1yuInUmwfpvEfOLkhlIW9y49YKNSTCNedMhJLtWOJN6
nOoyTbUgWalR2cj3m1zPaXSVgXMqjiVL8XVh9BZiTcfkQBPil/EWtKpkuXHslzKi
NFlDpBWkiI7NZMt5IcpjWYg4wK5+NBK8Q1ZWZt7tmloaQPw5dikLdxgtLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHyM9pY97ec6TZ0Omb3r7x2jcvd3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZkl6MmxqM3Q1enBOblE2WnZldnZIYU55OTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+Euprxs07lhdaCHqgA
5qL9b4dPO1vZpQBXSykLlOHulMMJU5cypUBLcV8M3PYt1sKi0i6a4+a6eM3rIHKR
50QkKugiuJ2IGWdTvs+NpMOxL+4DgCHlLI77FwtxjOvLzTkP73gyQ75wQj7fIlQ7
CvvVeeQIXoXpbeFW5e0gH8MLt6qisMl0VH957L3YmPng0FSwjRW5Z/CtuE9/1IzH
FDx++wbsLp5N5uVds+xp6wgUOaIzGfdE0glKuFFzRLcGYQtC96ORARcbLY2ceoR6
gsbNQkRdhwxUczeP+o8SMvt/fwf/ruvT5rrWr/yKW1peFLGIok/tiWOE/sDvhuub
pR4=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:30 2025 by rpki-client