Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pMFsm6pFxQmOAXPadI1ZnFPE8vc.roa
File: pMFsm6pFxQmOAXPadI1ZnFPE8vc.roa (raw, json)
Hash identifier: 0ZzUP+8rSqA4J+t9FuEErSAO2wF6u73pxFJ08rjlsQE=
Subject key identifier: A4:C1:6C:9B:AA:45:C5:09:8E:01:73:DA:74:8D:59:9C:53:C4:F2:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E16B1498BD8CCE6CE564850BF49BECDF2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pMFsm6pFxQmOAXPadI1ZnFPE8vc.roa
Signing time: Thu 07 Mar 2024 02:15:01 +0000
ROA not before: Thu 07 Mar 2024 02:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:16:b1:49:8b:d8:cc:e6:ce:56:48:50:bf:49:be:cd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 02:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c16c9baa45c5098e0173da748d599c53c4f2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:cb:6f:ea:85:07:25:e4:95:20:4a:58:fd:
e3:38:d5:12:39:49:ee:10:05:d6:66:04:ff:e1:6b:
af:19:9d:19:04:af:75:9d:d8:dd:e0:a4:b1:ec:15:
b1:84:69:9c:3e:95:a9:db:a5:d9:06:fd:ee:d7:19:
0f:81:d0:d9:6b:49:3b:e7:b9:71:ae:dd:82:a0:15:
1f:e4:54:d9:dd:a9:11:c8:cc:44:f1:d5:29:fc:f9:
e1:fc:8b:a7:27:80:70:30:31:2e:36:91:7d:39:f5:
b9:70:8f:3c:ad:6d:da:4a:98:49:a7:72:0f:65:6b:
51:94:ac:64:d7:48:88:53:37:82:74:85:b7:3d:36:
c7:f1:75:36:d0:3e:1e:f0:39:03:a1:2f:ac:bd:10:
db:ef:99:77:27:63:2b:be:01:ef:6a:58:e9:f7:63:
ea:29:f1:d8:53:c5:4f:f3:31:42:20:4c:1d:4b:7c:
67:dc:23:14:a7:00:0a:b6:41:51:34:43:9a:cc:2e:
2f:5e:ef:d0:e4:69:fd:02:b4:c8:25:5a:5d:34:fb:
0a:ed:35:da:ad:01:5d:4e:91:5c:72:b7:3a:93:e3:
90:b4:22:47:e9:38:6a:f1:b9:84:02:0a:24:f2:c3:
5a:7c:72:94:1d:99:53:99:30:4a:48:a6:6c:d5:de:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:6C:9B:AA:45:C5:09:8E:01:73:DA:74:8D:59:9C:53:C4:F2:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pMFsm6pFxQmOAXPadI1ZnFPE8vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:56:0e:31:e0:dd:04:a4:8c:50:4f:d9:9c:16:7f:06:2c:0e:
cf:87:df:0b:09:a4:c1:ba:21:0c:6c:95:f5:5e:fa:db:ec:88:
31:4c:40:67:39:38:03:81:ea:fc:ec:49:50:7c:89:ec:87:6a:
b4:30:56:40:11:21:c9:92:f8:59:4c:57:eb:6a:41:14:34:01:
ae:fc:7b:6e:4c:a3:57:58:a2:f7:5e:1a:1f:64:f3:28:14:36:
21:a9:4b:77:e5:e8:63:5d:bd:da:2d:7c:30:3f:e3:78:8d:37:
65:e8:2e:d8:e9:e7:03:7d:64:19:b1:1a:7d:f2:8d:d5:98:0b:
98:a7:e6:7f:29:cb:4c:3b:15:c6:17:9d:5a:68:a9:99:7c:49:
a7:9b:2b:50:64:3d:30:23:d8:db:56:7d:30:fb:0f:af:fa:23:
ee:63:0a:d1:c7:7e:14:68:ab:40:a2:d9:e9:e5:23:36:a8:9e:
16:ce:4c:9b:7e:2a:27:cd:75:53:bc:20:f4:83:4d:f6:2c:72:
3e:c6:ea:c6:21:a3:cc:45:4d:eb:b7:70:e7:70:3a:30:17:9f:
4d:c6:fe:16:82:d3:df:6b:8f:16:8c:a2:7f:28:f9:b7:df:62:
93:8a:5e:80:52:6e:f1:93:cc:3c:82:38:5e:b4:e4:73:3d:8c:
70:87:cf:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4WsUmL2MzmzlZIUL9Jvs3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA3MDIxNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGMxNmM5YmFhNDVjNTA5OGUwMTczZGE3NDhkNTk5YzUzYzRmMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXLb+qFByXklSBKWP3jONUSOUnu
EAXWZgT/4WuvGZ0ZBK91ndjd4KSx7BWxhGmcPpWp26XZBv3u1xkPgdDZa0k757lx
rt2CoBUf5FTZ3akRyMxE8dUp/Pnh/IunJ4BwMDEuNpF9OfW5cI88rW3aSphJp3IP
ZWtRlKxk10iIUzeCdIW3PTbH8XU20D4e8DkDoS+svRDb75l3J2MrvgHvaljp92Pq
KfHYU8VP8zFCIEwdS3xn3CMUpwAKtkFRNEOazC4vXu/Q5Gn9ArTIJVpdNPsK7TXa
rQFdTpFccrc6k+OQtCJH6Thq8bmEAgok8sNafHKUHZlTmTBKSKZs1d68+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKTBbJuqRcUJjgFz2nSNWZxTxPL3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcE1Gc202cEZ4UW1PQVhQYWRJMVpuRlBFOHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJBWDjHg3QSkjFBP2ZwW
fwYsDs+H3wsJpMG6IQxslfVe+tvsiDFMQGc5OAOB6vzsSVB8ieyHarQwVkARIcmS
+FlMV+tqQRQ0Aa78e25Mo1dYovdeGh9k8ygUNiGpS3fl6GNdvdotfDA/43iNN2Xo
Ltjp5wN9ZBmxGn3yjdWYC5in5n8py0w7FcYXnVpoqZl8SaebK1BkPTAj2NtWfTD7
D6/6I+5jCtHHfhRoq0Ci2enlIzaonhbOTJt+KifNdVO8IPSDTfYscj7G6sYho8xF
Teu3cOdwOjAXn03G/haC099rjxaMon8o+bffYpOKXoBSbvGTzDyCOF605HM9jHCH
z7I=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:35 2025 by rpki-client