Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i0dyi2E72IS-BDc7C4x5i_nQUuI.roa
File: i0dyi2E72IS-BDc7C4x5i_nQUuI.roa (raw, json)
Hash identifier: 39t4IpYVFDkMtqSWjam95oqa7BSvGq2QiyYKpSKfLFk=
Subject key identifier: 8B:47:72:8B:61:3B:D8:84:BE:04:37:3B:0B:8C:79:8B:F9:D0:52:E2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEF6E6EC2F0E97F248950C77113BCBB51
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i0dyi2E72IS-BDc7C4x5i_nQUuI.roa
Signing time: Wed 28 Feb 2024 11:16:48 +0000
ROA not before: Wed 28 Feb 2024 11:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:6e:6e:c2:f0:e9:7f:24:89:50:c7:71:13:bc:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 11:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b47728b613bd884be04373b0b8c798bf9d052e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:1c:f1:a0:11:7c:87:ae:79:8e:e3:c8:4e:
2f:2b:86:cc:97:18:af:72:87:bf:e2:2d:6c:e9:a4:
7b:58:79:c7:7e:f7:36:35:2e:ef:c7:72:95:19:81:
dd:ac:8e:f9:f9:fe:b4:0f:e1:e2:6b:93:f4:ce:df:
3f:00:04:33:af:51:f1:e1:ae:3e:4f:a1:4b:cd:14:
6a:0d:8f:d0:43:1f:4b:cc:d5:11:93:9f:57:a3:40:
61:7b:8f:67:c6:4b:25:d0:11:8a:af:81:c7:d5:a1:
5b:93:54:66:ea:79:d4:e7:dd:34:8c:94:1b:a4:a2:
2d:4c:c2:e7:a6:6a:8c:44:81:63:bc:5a:a4:96:c9:
cd:84:f3:6a:83:75:e9:87:93:ab:7f:c1:bc:98:bc:
7e:3e:62:50:ca:94:e7:be:75:8a:aa:a5:4f:f4:e0:
03:42:8b:ca:97:d9:19:84:eb:bd:3e:31:ac:20:9a:
72:85:ee:3e:a2:a0:31:a9:d3:15:cc:88:87:1b:20:
3e:f3:02:f0:14:8a:fe:80:ad:63:ea:bf:f7:7f:d3:
8f:28:c7:c2:3d:df:85:f4:90:80:ac:ee:8b:6c:f7:
49:04:cd:10:15:a0:7b:d0:c8:1c:3e:e7:73:81:80:
f6:88:d4:25:87:ce:c7:d0:5c:f5:c4:8a:96:59:cb:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:72:8B:61:3B:D8:84:BE:04:37:3B:0B:8C:79:8B:F9:D0:52:E2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i0dyi2E72IS-BDc7C4x5i_nQUuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:95:ed:df:7b:37:2f:49:28:3a:88:28:b0:c9:47:48:ad:28:
58:84:fc:f4:60:bc:22:b8:26:34:77:4a:d7:e3:3d:86:c0:5d:
2d:89:0b:5e:eb:5c:83:d8:3e:52:63:c9:79:7e:27:e9:66:ba:
47:7c:2d:8f:08:09:d9:e1:ca:2a:11:49:df:e3:26:f6:25:c4:
09:a1:eb:ed:4e:2c:dd:fc:18:f8:97:b8:f2:70:9c:ac:76:12:
12:0a:6a:1f:e3:98:20:c3:d6:71:1d:76:7e:2a:29:d1:d1:9a:
56:6a:0a:89:a1:0b:5c:b0:c4:31:0c:e0:4a:ff:c9:e4:f8:89:
62:ad:73:18:04:f5:43:7a:7d:f5:e2:6f:30:fe:00:b8:d7:ce:
8b:e4:00:bd:c2:10:68:0f:fa:72:50:db:72:32:49:d4:fa:af:
5f:6a:a9:c4:05:92:60:a9:92:d5:0d:b2:9d:c3:32:12:c3:f1:
e6:52:21:4a:83:f6:92:58:59:42:75:f9:ab:21:6d:ca:96:75:
15:5f:fa:40:4d:5f:74:8b:e4:7c:72:02:98:d2:8f:fc:ec:00:
6a:9d:5d:86:e3:67:21:0e:51:92:69:7d:18:bf:60:9a:21:b4:
41:2a:f0:12:31:b2:67:2d:94:54:90:4b:ce:8e:83:b7:87:dc:
bd:85:0a:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3vbm7C8Ol/JIlQx3ETvLtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI4MTExNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjQ3NzI4YjYxM2JkODg0YmUwNDM3M2IwYjhjNzk4YmY5ZDA1MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMAc8aARfIeueY7jyE4vK4bMlxiv
coe/4i1s6aR7WHnHfvc2NS7vx3KVGYHdrI75+f60D+Hia5P0zt8/AAQzr1Hx4a4+
T6FLzRRqDY/QQx9LzNURk59Xo0Bhe49nxksl0BGKr4HH1aFbk1Rm6nnU5900jJQb
pKItTMLnpmqMRIFjvFqklsnNhPNqg3Xph5Orf8G8mLx+PmJQypTnvnWKqqVP9OAD
QovKl9kZhOu9PjGsIJpyhe4+oqAxqdMVzIiHGyA+8wLwFIr+gK1j6r/3f9OPKMfC
Pd+F9JCArO6LbPdJBM0QFaB70MgcPudzgYD2iNQlh87H0Fz1xIqWWctEFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFItHcothO9iEvgQ3OwuMeYv50FLiMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaTBkeWkyRTcySVMtQkRjN0M0eDVpX25RVXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIOV7d97Ny9JKDqIKLDJ
R0itKFiE/PRgvCK4JjR3StfjPYbAXS2JC17rXIPYPlJjyXl+J+lmukd8LY8ICdnh
yioRSd/jJvYlxAmh6+1OLN38GPiXuPJwnKx2EhIKah/jmCDD1nEddn4qKdHRmlZq
ComhC1ywxDEM4Er/yeT4iWKtcxgE9UN6ffXibzD+ALjXzovkAL3CEGgP+nJQ23Iy
SdT6r19qqcQFkmCpktUNsp3DMhLD8eZSIUqD9pJYWUJ1+ashbcqWdRVf+kBNX3SL
5HxyApjSj/zsAGqdXYbjZyEOUZJpfRi/YJohtEEq8BIxsmctlFSQS86Og7eH3L2F
CkM=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:57 2025 by rpki-client