Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ic5NEQAADRRbjE6fRj_Ocn-8miw.roa
File: ic5NEQAADRRbjE6fRj_Ocn-8miw.roa (raw, json)
Hash identifier: x4M0nw8tfSzi3cynd7+v0FA9ekNPy+8n8LV4drg7v88=
Subject key identifier: 89:CE:4D:11:00:00:0D:14:5B:8C:4E:9F:46:3F:CE:72:7F:BC:9A:2C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE40B648D048324DF5142AD75550DFAAD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ic5NEQAADRRbjE6fRj_Ocn-8miw.roa
Signing time: Mon 26 Feb 2024 06:12:48 +0000
ROA not before: Mon 26 Feb 2024 06:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:0b:64:8d:04:83:24:df:51:42:ad:75:55:0d:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 06:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89ce4d1100000d145b8c4e9f463fce727fbc9a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:50:f8:2b:ef:fa:d9:a2:e8:0c:1a:19:a9:
8c:bf:cf:20:e5:7d:10:eb:73:98:81:be:68:9a:d3:
23:b3:21:23:45:8d:f7:fc:42:3a:be:a7:93:fb:aa:
95:fe:f4:48:e0:a9:27:9e:d6:3a:f0:e4:38:e0:d6:
d3:da:dd:20:07:ee:4e:09:df:15:ff:4e:0c:8a:fe:
b3:ef:b2:72:29:63:30:9c:67:fb:eb:ac:dd:4f:df:
2f:d6:cf:27:ee:26:59:f3:55:f9:d2:b8:74:e7:e6:
16:28:12:d6:90:f9:20:65:1b:df:a7:3f:03:43:19:
41:23:02:0f:f7:5b:4e:8c:5b:8c:52:97:bd:43:d9:
dd:63:0a:18:a9:2a:37:ab:97:c3:52:32:a4:4f:ef:
b7:6b:69:2f:7b:11:5f:da:b4:7a:27:c5:ff:73:b5:
99:17:07:fa:c1:9f:f2:90:af:c8:52:1d:55:c1:b7:
f8:70:a8:a6:87:08:72:40:fc:44:b0:4c:02:30:b0:
e4:7a:79:ef:9b:02:5a:8d:5b:39:0c:54:6a:55:88:
29:2a:83:b6:e2:b5:9a:4f:77:3e:d5:e3:0a:f9:b7:
cc:f6:1c:c5:8c:54:30:07:a8:ba:25:7e:6a:0e:5a:
2f:71:a0:3c:ab:6e:44:74:6d:c1:2a:54:90:e3:df:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:4D:11:00:00:0D:14:5B:8C:4E:9F:46:3F:CE:72:7F:BC:9A:2C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ic5NEQAADRRbjE6fRj_Ocn-8miw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:66:94:ea:50:22:55:76:f6:16:50:df:72:7f:7a:f5:60:b7:
a5:74:7d:cc:f9:cc:36:e2:9b:a9:d3:70:78:22:b7:1e:21:4b:
d0:86:d2:a4:53:0b:9e:e5:44:d3:77:3a:a1:5b:15:92:3e:eb:
c4:85:7f:8e:1a:38:d5:04:98:27:40:22:77:ba:74:c4:4e:75:
92:8d:f8:ca:85:88:19:0e:04:82:98:e9:55:38:84:2f:c1:13:
68:fc:20:ac:ae:0b:b9:ea:55:db:79:7e:a2:f1:b5:42:d4:a0:
a1:f0:e3:0d:34:28:98:22:1c:f7:29:77:5f:e8:44:65:1e:88:
46:bb:db:14:0c:d3:d1:66:80:44:ef:1c:e7:83:b9:6f:18:2a:
ff:0d:1d:25:66:ac:c5:a5:b6:58:4d:d2:b6:f2:60:f7:42:92:
93:03:db:89:c1:04:e5:2b:51:43:24:2a:75:8d:fb:99:0e:21:
ef:35:1a:ee:03:50:5e:f5:b5:29:2a:8f:40:63:a1:f3:b1:2b:
14:89:d9:60:45:8e:65:4c:69:1d:23:21:8e:18:85:34:b3:34:
3f:8a:57:f3:a0:bb:81:5b:b3:b4:94:58:41:fa:eb:c0:2f:3b:
18:58:41:7f:f6:24:91:99:52:06:65:61:5c:33:45:3f:7d:cb:
8f:3a:1f:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3kC2SNBIMk31FCrXVVDfqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI2MDYxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWNlNGQxMTAwMDAwZDE0NWI4YzRlOWY0NjNmY2U3MjdmYmM5YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xVQ+Cvv+tmi6AwaGamMv88g5X0Q
63OYgb5omtMjsyEjRY33/EI6vqeT+6qV/vRI4KknntY68OQ44NbT2t0gB+5OCd8V
/04Miv6z77JyKWMwnGf766zdT98v1s8n7iZZ81X50rh05+YWKBLWkPkgZRvfpz8D
QxlBIwIP91tOjFuMUpe9Q9ndYwoYqSo3q5fDUjKkT++3a2kvexFf2rR6J8X/c7WZ
Fwf6wZ/ykK/IUh1Vwbf4cKimhwhyQPxEsEwCMLDkennvmwJajVs5DFRqVYgpKoO2
4rWaT3c+1eMK+bfM9hzFjFQwB6i6JX5qDlovcaA8q25EdG3BKlSQ498L5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFInOTREAAA0UW4xOn0Y/znJ/vJosMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaWM1TkVRQUFEUlJiakU2ZlJqX09jbi04bWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD9mlOpQIlV29hZQ33J/
evVgt6V0fcz5zDbim6nTcHgitx4hS9CG0qRTC57lRNN3OqFbFZI+68SFf44aONUE
mCdAIne6dMROdZKN+MqFiBkOBIKY6VU4hC/BE2j8IKyuC7nqVdt5fqLxtULUoKHw
4w00KJgiHPcpd1/oRGUeiEa72xQM09FmgETvHOeDuW8YKv8NHSVmrMWltlhN0rby
YPdCkpMD24nBBOUrUUMkKnWN+5kOIe81Gu4DUF71tSkqj0BjofOxKxSJ2WBFjmVM
aR0jIY4YhTSzND+KV/Ogu4Fbs7SUWEH668AvOxhYQX/2JJGZUgZlYVwzRT99y486
H8A=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:09 2025 by rpki-client