Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k7ze7saShXOJqjw5h5yef51YHpc.roa
File: k7ze7saShXOJqjw5h5yef51YHpc.roa (raw, json)
Hash identifier: TkLQJtVb+FH9/dU3cOJSFstxPkyq6yTfkcLJxk/9Pcw=
Subject key identifier: 93:BC:DE:EE:C6:92:85:73:89:AA:3C:39:87:9C:9E:7F:9D:58:1E:97
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA6A88282280281540B92ECAA6F7F1F47
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k7ze7saShXOJqjw5h5yef51YHpc.roa
Signing time: Thu 04 Apr 2024 01:10:45 +0000
ROA not before: Thu 04 Apr 2024 01:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a6:a8:82:82:28:02:81:54:0b:92:ec:aa:6f:7f:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 01:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93bcdeeec692857389aa3c39879c9e7f9d581e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:62:0b:97:7e:2e:3f:d6:04:72:80:c5:d6:
d1:18:e5:b2:ac:a1:11:9a:76:68:2b:52:33:7d:02:
36:5f:04:9b:b2:15:4b:a3:6b:bb:58:fb:23:cd:f4:
43:d4:39:c6:0c:22:e0:43:3e:50:02:9d:a0:43:93:
6c:5c:43:10:9e:36:18:d9:d8:b8:b5:9e:ab:78:90:
bc:0d:ca:3b:95:5a:e5:9e:e7:3c:89:a6:38:1c:64:
f4:21:af:08:6f:eb:e1:8b:ab:68:72:d3:af:a8:21:
9a:db:32:d6:e7:bb:37:5b:8e:80:e1:7a:7d:98:d2:
60:61:27:01:1e:30:83:22:8d:17:a5:2e:a5:06:7c:
23:87:67:a6:83:85:95:1f:b7:fb:15:3e:01:f6:dc:
e7:ed:fa:88:6f:ff:27:d2:3a:6c:d6:b9:36:59:90:
5f:87:22:d4:b2:74:f5:8b:76:52:d8:2b:76:44:ae:
1d:14:c1:ce:a8:13:89:8a:f8:90:fe:90:28:e9:e8:
05:1b:b5:66:1b:91:08:4a:bb:c5:0a:28:8b:27:29:
25:0b:5f:79:8f:73:83:fd:43:93:c5:d6:33:4c:c0:
98:3f:49:82:35:01:61:57:ee:17:48:ad:63:8e:81:
d7:60:0b:dc:cb:c3:a4:93:5a:5c:3b:14:17:43:b3:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:DE:EE:C6:92:85:73:89:AA:3C:39:87:9C:9E:7F:9D:58:1E:97
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k7ze7saShXOJqjw5h5yef51YHpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:21:f8:58:81:a7:03:ab:c4:35:15:10:81:d5:8d:97:cb:d2:
92:6d:dc:e1:79:12:32:82:21:bf:db:5c:2a:6c:33:ef:49:7b:
1d:94:eb:11:41:0c:4a:80:6e:2e:ea:27:ae:b2:8e:4b:45:34:
dc:c0:7f:23:76:39:54:4f:12:0b:33:97:ef:c9:4a:2f:08:ce:
57:71:93:81:cc:56:4b:08:1e:39:98:d7:a8:c0:73:c8:69:6d:
fa:b7:ec:95:45:65:3a:32:0e:d4:67:a3:aa:91:00:e0:74:6c:
9a:47:b8:83:29:44:95:1d:87:0b:8a:64:38:3b:d2:e5:05:47:
cb:cc:73:0a:96:6a:22:d8:77:65:24:08:b4:ec:bd:d5:09:88:
33:86:7d:fc:45:a4:80:2e:8d:24:bc:c3:59:c5:74:db:ce:d8:
42:a5:6a:d8:ad:8c:32:be:d7:4e:71:42:b9:99:dc:01:c2:18:
a7:2a:e3:5e:a7:9c:74:20:6f:69:8f:26:3f:e4:74:4d:a6:7d:
08:a9:df:38:97:3e:c0:0c:47:b0:f4:78:5b:18:d5:d5:07:c1:
7e:3f:83:52:63:51:eb:dd:e7:ac:98:c7:f0:5d:2b:7c:ec:d8:
e0:27:af:9e:6f:22:b5:7a:63:af:29:11:af:17:32:ec:9b:12:
cd:fb:45:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6mqIKCKAKBVAuS7Kpvfx9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA0MDExMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2JjZGVlZWM2OTI4NTczODlhYTNjMzk4NzljOWU3ZjlkNTgxZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m5iC5d+Lj/WBHKAxdbRGOWyrKER
mnZoK1IzfQI2XwSbshVLo2u7WPsjzfRD1DnGDCLgQz5QAp2gQ5NsXEMQnjYY2di4
tZ6reJC8Dco7lVrlnuc8iaY4HGT0Ia8Ib+vhi6toctOvqCGa2zLW57s3W46A4Xp9
mNJgYScBHjCDIo0XpS6lBnwjh2emg4WVH7f7FT4B9tzn7fqIb/8n0jps1rk2WZBf
hyLUsnT1i3ZS2Ct2RK4dFMHOqBOJiviQ/pAo6egFG7VmG5EISrvFCiiLJyklC195
j3OD/UOTxdYzTMCYP0mCNQFhV+4XSK1jjoHXYAvcy8Okk1pcOxQXQ7PCQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJO83u7GkoVziao8OYecnn+dWB6XMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvazd6ZTdzYVNoWE9KcWp3NWg1eWVmNTFZSHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEIh+FiBpwOrxDUVEIHV
jZfL0pJt3OF5EjKCIb/bXCpsM+9Jex2U6xFBDEqAbi7qJ66yjktFNNzAfyN2OVRP
Egszl+/JSi8Izldxk4HMVksIHjmY16jAc8hpbfq37JVFZToyDtRno6qRAOB0bJpH
uIMpRJUdhwuKZDg70uUFR8vMcwqWaiLYd2UkCLTsvdUJiDOGffxFpIAujSS8w1nF
dNvO2EKlatitjDK+105xQrmZ3AHCGKcq416nnHQgb2mPJj/kdE2mfQip3ziXPsAM
R7D0eFsY1dUHwX4/g1JjUevd56yYx/BdK3zs2OAnr55vIrV6Y68pEa8XMuybEs37
Rb0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:13 2025 by rpki-client