Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kSx8xivuLo_O9ZZ063TVeGYSejc.roa
File: kSx8xivuLo_O9ZZ063TVeGYSejc.roa (raw, json)
Hash identifier: lH7o5dpkBwiLwooulwqoX011C7TURKhKEwbaK+PydnY=
Subject key identifier: 91:2C:7C:C6:2B:EE:2E:8F:CE:F5:96:74:EB:74:D5:78:66:12:7A:37
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E551D924652CF8819684493F14B10C48A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kSx8xivuLo_O9ZZ063TVeGYSejc.roa
Signing time: Tue 19 Mar 2024 05:09:45 +0000
ROA not before: Tue 19 Mar 2024 05:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:1d:92:46:52:cf:88:19:68:44:93:f1:4b:10:c4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 05:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912c7cc62bee2e8fcef59674eb74d57866127a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:1b:7c:85:fc:71:f1:63:cc:92:d7:1a:13:
77:45:99:3c:4b:d4:5d:21:5b:06:24:bd:63:ab:0b:
02:c5:ca:8f:de:c2:3c:14:e0:28:06:61:34:06:a9:
99:96:23:0b:ac:db:5e:22:0e:47:38:26:e2:b9:01:
0c:7f:37:92:4b:f2:28:9d:9f:93:8c:88:81:ec:8d:
94:91:13:4a:03:a2:1b:2e:cc:e1:76:b7:05:27:ac:
b1:40:51:fc:15:cc:22:06:0d:02:c0:9d:db:77:b1:
ae:0e:9d:1d:4e:b7:29:73:54:84:d4:d4:76:3c:ff:
41:00:d7:fa:8e:51:46:f7:0c:9b:5c:57:76:89:87:
0e:fa:19:1d:80:41:7d:cc:68:38:fa:0a:fc:f7:6e:
5b:b9:c8:69:27:1f:5d:9c:5f:7c:e1:99:85:88:c5:
b0:b7:99:99:67:e3:57:45:37:5d:5f:c5:a9:d9:9a:
24:ee:9a:1f:50:a8:3e:e0:b1:3e:78:ee:05:d5:1d:
3a:01:fc:37:df:07:13:87:92:78:f4:ab:b5:f5:2f:
f5:92:d7:47:e6:9b:3b:9f:f6:7a:23:4d:e8:21:18:
a2:39:a7:a5:3d:c5:5d:d0:49:61:ee:37:4c:bc:7c:
f6:05:13:d0:c5:cc:1c:4c:6f:e6:3b:bf:39:ed:ac:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:7C:C6:2B:EE:2E:8F:CE:F5:96:74:EB:74:D5:78:66:12:7A:37
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kSx8xivuLo_O9ZZ063TVeGYSejc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:9b:e2:69:89:14:a3:55:ae:7a:87:eb:83:96:90:54:bd:1b:
27:ea:64:8c:f7:cb:2c:f5:72:94:89:c9:f1:19:41:f9:f4:23:
75:4a:f0:32:74:f6:8c:37:10:3e:bb:f9:43:87:f8:f9:d0:75:
8d:f2:b6:44:fd:78:a7:89:4e:5b:db:a8:05:29:c1:36:5b:7a:
da:f8:52:a2:10:c6:0e:5c:de:bb:39:5c:b4:bc:26:3d:09:9f:
f7:49:13:f9:56:32:32:6e:2e:90:70:41:4c:87:39:3a:87:34:
d6:e9:8e:71:98:d2:be:19:21:0b:b3:c9:cc:59:6f:bc:d2:c5:
ae:cc:a9:c5:65:9c:1c:e5:1f:e0:77:f2:d8:0e:d0:30:41:8d:
29:d6:a9:5b:20:b7:99:bf:09:73:3e:6c:fa:62:d8:d3:55:ef:
8c:eb:f0:47:2b:a9:b7:c9:bf:21:ee:8d:50:e4:bb:0e:0c:49:
79:5e:72:16:06:a4:d9:b6:37:4d:15:66:19:92:e7:af:e5:ef:
80:a4:1c:a7:01:de:88:12:43:a2:cc:e5:7b:ed:54:a8:d9:4f:
bc:67:f6:5f:cd:f9:d5:93:d2:90:27:f6:a0:07:f6:b0:12:32:
1a:50:03:41:c6:e4:58:3b:8f:7f:7b:4d:48:67:e5:09:74:5d:
3c:ed:82:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5VHZJGUs+IGWhEk/FLEMSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE5MDUwOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTJjN2NjNjJiZWUyZThmY2VmNTk2NzRlYjc0ZDU3ODY2MTI3YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8MbfIX8cfFjzJLXGhN3RZk8S9Rd
IVsGJL1jqwsCxcqP3sI8FOAoBmE0BqmZliMLrNteIg5HOCbiuQEMfzeSS/IonZ+T
jIiB7I2UkRNKA6IbLszhdrcFJ6yxQFH8FcwiBg0CwJ3bd7GuDp0dTrcpc1SE1NR2
PP9BANf6jlFG9wybXFd2iYcO+hkdgEF9zGg4+gr8925buchpJx9dnF984ZmFiMWw
t5mZZ+NXRTddX8Wp2Zok7pofUKg+4LE+eO4F1R06Afw33wcTh5J49Ku19S/1ktdH
5ps7n/Z6I03oIRiiOaelPcVd0Elh7jdMvHz2BRPQxcwcTG/mO7857awIiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJEsfMYr7i6PzvWWdOt01XhmEno3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEva1N4OHhpdnVMb19POVpaMDYzVFZlR1lTZWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAub4mmJFKNVrnqH64OW
kFS9GyfqZIz3yyz1cpSJyfEZQfn0I3VK8DJ09ow3ED67+UOH+PnQdY3ytkT9eKeJ
TlvbqAUpwTZbetr4UqIQxg5c3rs5XLS8Jj0Jn/dJE/lWMjJuLpBwQUyHOTqHNNbp
jnGY0r4ZIQuzycxZb7zSxa7MqcVlnBzlH+B38tgO0DBBjSnWqVsgt5m/CXM+bPpi
2NNV74zr8EcrqbfJvyHujVDkuw4MSXlechYGpNm2N00VZhmS56/l74CkHKcB3ogS
Q6LM5XvtVKjZT7xn9l/N+dWT0pAn9qAH9rASMhpQA0HG5Fg7j397TUhn5Ql0XTzt
goc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:18 2025 by rpki-client