Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kP5uESv8oek455E0xcDRtvX6Wgo.roa
File: kP5uESv8oek455E0xcDRtvX6Wgo.roa (raw, json)
Hash identifier: nOqwCIgidGTlE1Ant33t6vnOwG4rmzvVpgBCvUeCeRo=
Subject key identifier: 90:FE:6E:11:2B:FC:A1:E9:38:E7:91:34:C5:C0:D1:B6:F5:FA:5A:0A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3A51BC65EADBE7A61F43C28E09018582
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kP5uESv8oek455E0xcDRtvX6Wgo.roa
Signing time: Wed 24 Jan 2024 07:14:11 +0000
ROA not before: Wed 24 Jan 2024 07:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:51:bc:65:ea:db:e7:a6:1f:43:c2:8e:09:01:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 07:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90fe6e112bfca1e938e79134c5c0d1b6f5fa5a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:2a:fa:3f:82:73:49:33:52:29:c6:6b:3f:
23:49:b8:c9:02:37:63:4f:93:84:45:ab:ed:30:a8:
62:af:9d:10:78:d1:02:b4:61:87:cb:3d:46:a0:29:
e1:9b:8e:a5:17:da:ae:75:49:54:28:db:48:2d:e3:
0a:80:a1:12:97:f1:e8:8c:b6:cd:af:9f:80:55:16:
c4:d2:3f:62:ab:5a:b7:de:60:b0:58:4a:94:55:3b:
8d:0f:6e:6f:a6:cd:32:52:9e:50:c9:9a:e6:ed:5e:
d1:79:62:ce:5f:df:29:f1:b0:0a:ea:3a:4a:1d:ea:
c0:2a:d3:29:3a:98:1d:44:b3:29:93:be:7c:c8:ee:
93:d2:fb:a9:4e:2a:b3:ff:a5:e9:14:d2:2b:fa:3f:
b5:8a:91:39:89:87:2f:9e:83:78:bb:2a:a8:98:f7:
dc:4e:f7:9b:fa:e0:75:29:15:b7:3d:30:c6:56:7e:
c2:f3:8c:73:fe:ad:82:d9:75:71:f7:df:79:67:f8:
1c:fd:49:b3:50:27:6b:10:04:4e:7b:3e:00:7e:ac:
a0:6b:c3:e9:31:35:70:1a:b3:0f:54:e8:47:45:f7:
11:c4:b0:cc:df:98:6c:6e:c9:98:5c:e5:2c:22:66:
3b:a4:9a:b2:8b:cb:e7:76:8f:dc:c4:ea:e3:b5:05:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:6E:11:2B:FC:A1:E9:38:E7:91:34:C5:C0:D1:B6:F5:FA:5A:0A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kP5uESv8oek455E0xcDRtvX6Wgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:48:fc:b8:d6:cd:f1:3c:6c:1e:40:26:55:33:e9:92:16:74:
44:38:a8:e9:dd:c7:4c:bc:e4:81:cd:c2:a2:e1:2a:d2:9f:16:
9d:fd:f9:d6:67:de:74:58:48:40:4f:28:f0:95:73:c5:d5:1c:
63:9f:8a:a6:8a:b5:7c:60:ea:f5:dc:6b:21:8b:54:45:21:f7:
24:81:0d:06:01:15:c8:c3:89:39:53:af:4a:d6:da:b4:73:87:
dd:9e:9a:ad:2f:6e:a5:fe:75:38:b7:71:f7:a4:88:98:f0:f3:
95:06:62:31:73:2c:f3:8f:76:f6:ac:d1:d7:65:3e:12:4c:cb:
c3:b6:5f:2c:89:79:8d:9c:c9:7f:28:ad:19:55:aa:f1:83:ed:
f8:50:41:1b:28:a4:b4:6f:28:a8:21:08:5c:af:20:3f:7f:b5:
e8:5b:2d:0d:42:18:39:28:7d:00:fc:53:7c:d2:7e:8c:03:d6:
fd:b0:71:fd:ef:3c:37:2b:42:6e:da:dd:ff:76:b9:e6:61:d8:
09:5f:b3:fd:96:f1:ff:8f:89:cd:aa:84:9d:8c:80:a4:ea:49:
14:8f:66:5e:93:48:6e:61:9b:d1:9c:ed:15:e6:63:76:ff:96:
56:5f:87:84:e1:0b:e0:fb:40:39:7c:52:19:1b:eb:33:df:ad:
8f:d4:ce:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY06Ubxl6tvnph9Dwo4JAYWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI0MDcxNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGZlNmUxMTJiZmNhMWU5MzhlNzkxMzRjNWMwZDFiNmY1ZmE1YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEgq+j+Cc0kzUinGaz8jSbjJAjdj
T5OERavtMKhir50QeNECtGGHyz1GoCnhm46lF9qudUlUKNtILeMKgKESl/HojLbN
r5+AVRbE0j9iq1q33mCwWEqUVTuND25vps0yUp5QyZrm7V7ReWLOX98p8bAK6jpK
HerAKtMpOpgdRLMpk758yO6T0vupTiqz/6XpFNIr+j+1ipE5iYcvnoN4uyqomPfc
Tveb+uB1KRW3PTDGVn7C84xz/q2C2XVx9995Z/gc/UmzUCdrEAROez4Afqyga8Pp
MTVwGrMPVOhHRfcRxLDM35hsbsmYXOUsImY7pJqyi8vndo/cxOrjtQVrnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJD+bhEr/KHpOOeRNMXA0bb1+loKMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEva1A1dUVTdjhvZWs0NTVFMHhjRFJ0dlg2V2dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxI/LjWzfE8bB5AJlUz
6ZIWdEQ4qOndx0y85IHNwqLhKtKfFp39+dZn3nRYSEBPKPCVc8XVHGOfiqaKtXxg
6vXcayGLVEUh9ySBDQYBFcjDiTlTr0rW2rRzh92emq0vbqX+dTi3cfekiJjw85UG
YjFzLPOPdvas0ddlPhJMy8O2XyyJeY2cyX8orRlVqvGD7fhQQRsopLRvKKghCFyv
ID9/tehbLQ1CGDkofQD8U3zSfowD1v2wcf3vPDcrQm7a3f92ueZh2Alfs/2W8f+P
ic2qhJ2MgKTqSRSPZl6TSG5hm9Gc7RXmY3b/llZfh4ThC+D7QDl8Uhkb6zPfrY/U
zlY=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:18 2025 by rpki-client