Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oAxUYzNGZRrfoFDIddEz7aJDjro.roa
File: oAxUYzNGZRrfoFDIddEz7aJDjro.roa (raw, json)
Hash identifier: NxgJIsc9pdFB+O1l0Q5El1ntCDApq0sj7/qxj/YrWcQ=
Subject key identifier: A0:0C:54:63:33:46:65:1A:DF:A0:50:C8:75:D1:33:ED:A2:43:8E:BA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA6E8BB550A276434FF260DB1691DCCF9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oAxUYzNGZRrfoFDIddEz7aJDjro.roa
Signing time: Wed 14 Feb 2024 09:18:06 +0000
ROA not before: Wed 14 Feb 2024 09:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:e8:bb:55:0a:27:64:34:ff:26:0d:b1:69:1d:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 09:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a00c54633346651adfa050c875d133eda2438eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:b9:d1:7f:f4:b5:b9:5c:26:30:cb:1a:3d:
f8:e8:91:23:7c:f0:8a:3c:57:e5:ed:5a:d6:b4:7c:
e7:46:59:35:eb:05:03:ed:bb:55:a4:9d:51:50:aa:
6b:34:33:c6:a9:d5:66:fd:4e:c1:cb:c3:e9:b0:55:
b8:dc:3f:c1:a6:e4:50:90:3e:04:a5:5a:9d:e9:f0:
02:34:bf:d9:b7:9e:1f:8a:52:7b:08:0e:7a:21:e8:
4b:63:73:42:c0:e8:33:d6:52:dd:19:4b:22:5b:db:
07:91:e1:34:86:34:fa:83:e3:82:e2:79:62:cc:b0:
69:b6:ca:69:f9:87:4d:11:65:3b:fc:3c:40:c5:c1:
a0:b3:3e:4a:2c:75:63:41:e1:ca:1c:6d:2b:2a:64:
b2:67:5e:2a:89:2a:9a:80:64:31:19:70:b3:a4:73:
92:7c:c7:b9:03:1d:41:46:d5:53:a6:9a:4f:aa:9a:
d7:c6:fe:fd:9a:96:f9:58:6c:7a:53:43:c2:93:ba:
70:e9:02:e0:83:38:75:e8:23:c6:84:11:69:bb:27:
6f:93:94:53:bf:12:a3:7e:a8:d1:44:88:59:4c:bb:
33:df:77:26:30:ee:0d:a8:b7:3f:35:aa:c2:88:4d:
03:84:6b:9b:b3:71:88:ba:07:8f:9e:f6:ee:fa:2a:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:54:63:33:46:65:1A:DF:A0:50:C8:75:D1:33:ED:A2:43:8E:BA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oAxUYzNGZRrfoFDIddEz7aJDjro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:d7:39:02:5c:89:8f:02:10:92:37:a2:f3:36:41:22:4f:7f:
08:dd:8d:9d:a9:e2:59:8b:11:25:a6:8b:fd:c7:7f:37:47:fa:
4d:76:46:b7:b9:cf:ff:ee:c7:65:79:c7:c5:51:0f:0b:85:d0:
56:27:f4:44:97:ac:5f:6b:3d:e0:77:2b:b3:aa:08:d4:a4:51:
76:9b:a0:31:38:85:3d:67:3f:8f:8b:b7:6b:2f:76:45:2e:77:
d6:38:ec:a1:62:fa:ed:0d:e8:cc:39:25:33:fd:89:de:9f:dc:
1a:13:d0:de:24:28:e6:8a:18:4b:22:aa:ec:61:c5:ea:51:cf:
00:07:c3:b5:f4:8f:cd:1e:09:1e:ab:59:45:7b:b9:a6:f1:5e:
d4:91:5e:a2:58:aa:8d:a7:31:9f:7f:a0:e4:f8:9e:ec:fb:70:
70:38:cd:11:d4:fd:99:bc:b0:c4:07:13:20:88:d3:d3:1c:d6:
b0:02:6c:2b:13:26:04:95:f3:51:a6:88:80:0c:a0:30:35:8e:
00:fe:0e:eb:9c:84:68:d1:9d:1d:99:00:08:e6:86:fd:34:24:
03:94:b1:b8:31:16:0a:04:11:10:83:34:55:a3:4d:59:64:c1:
0d:bb:75:fc:13:84:fd:f0:2d:0b:06:95:87:1f:be:2f:22:d1:
25:11:80:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2m6LtVCidkNP8mDbFpHcz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE0MDkxODA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDBjNTQ2MzMzNDY2NTFhZGZhMDUwYzg3NWQxMzNlZGEyNDM4ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXe50X/0tblcJjDLGj346JEjfPCK
PFfl7VrWtHznRlk16wUD7btVpJ1RUKprNDPGqdVm/U7By8PpsFW43D/BpuRQkD4E
pVqd6fACNL/Zt54filJ7CA56IehLY3NCwOgz1lLdGUsiW9sHkeE0hjT6g+OC4nli
zLBptspp+YdNEWU7/DxAxcGgsz5KLHVjQeHKHG0rKmSyZ14qiSqagGQxGXCzpHOS
fMe5Ax1BRtVTpppPqprXxv79mpb5WGx6U0PCk7pw6QLggzh16CPGhBFpuydvk5RT
vxKjfqjRRIhZTLsz33cmMO4NqLc/NarCiE0DhGubs3GIugePnvbu+ioxqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKAMVGMzRmUa36BQyHXRM+2iQ466MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvb0F4VVl6TkdaUnJmb0ZESWRkRXo3YUpEanJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACvXOQJciY8CEJI3ovM2
QSJPfwjdjZ2p4lmLESWmi/3HfzdH+k12Rre5z//ux2V5x8VRDwuF0FYn9ESXrF9r
PeB3K7OqCNSkUXaboDE4hT1nP4+Lt2svdkUud9Y47KFi+u0N6Mw5JTP9id6f3BoT
0N4kKOaKGEsiquxhxepRzwAHw7X0j80eCR6rWUV7uabxXtSRXqJYqo2nMZ9/oOT4
nuz7cHA4zRHU/Zm8sMQHEyCI09Mc1rACbCsTJgSV81GmiIAMoDA1jgD+DuuchGjR
nR2ZAAjmhv00JAOUsbgxFgoEERCDNFWjTVlkwQ27dfwThP3wLQsGlYcfvi8i0SUR
gJU=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:25 2025 by rpki-client