Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pUCPp_8VaRd8txhaxYWPUuA0vmk.roa
File: pUCPp_8VaRd8txhaxYWPUuA0vmk.roa (raw, json)
Hash identifier: Kv9RNIO+SWuKryj/euKa6ZW5DuNRTK1wTRvY3GSwxW0=
Subject key identifier: A5:40:8F:A7:FF:15:69:17:7C:B7:18:5A:C5:85:8F:52:E0:34:BE:69
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF1FDF3278C33BDDE63C5B71145D2F22A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pUCPp_8VaRd8txhaxYWPUuA0vmk.roa
Signing time: Wed 28 Feb 2024 23:12:48 +0000
ROA not before: Wed 28 Feb 2024 23:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f1:fd:f3:27:8c:33:bd:de:63:c5:b7:11:45:d2:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 23:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5408fa7ff1569177cb7185ac5858f52e034be69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:83:95:27:f3:d6:30:03:3e:d9:72:a6:f7:
cd:5f:c2:ba:98:f0:b2:c9:69:1f:aa:1f:33:02:34:
8e:06:85:c5:3c:8a:6d:02:c9:a5:bb:14:73:2b:54:
d4:a3:78:fb:a1:a3:54:08:6b:d8:d8:a0:ea:8b:74:
60:fd:d6:9e:5d:ca:d8:b4:1c:2b:b6:08:61:68:01:
64:f8:8a:dc:15:d2:db:3d:27:2b:bf:ed:1b:73:1d:
83:83:99:88:6d:55:f0:a5:fe:4f:e6:ad:4d:21:e6:
5f:bd:f0:14:f5:64:30:67:47:52:ea:de:15:b6:21:
d6:af:6a:f8:f8:26:a8:97:7e:25:fa:50:9a:91:2d:
2c:25:4d:9b:04:9a:d9:1d:16:a2:4b:79:22:8c:7a:
4d:a5:7c:b7:b9:50:a0:2b:38:e4:d5:b6:bc:2a:94:
ea:2d:5f:9e:36:61:63:c5:fa:69:90:00:47:80:95:
e2:5d:09:1c:6f:58:c5:0f:c5:e3:63:4a:33:88:0a:
09:ce:cc:37:24:57:3b:ca:b8:2e:1f:9a:49:6a:30:
df:e2:7d:23:94:f6:9b:94:59:c1:4f:e1:fa:d2:ce:
0a:f2:44:04:46:8e:58:07:09:3a:b4:a6:a0:9b:7a:
5f:78:94:70:38:82:a6:91:ba:6e:22:56:c7:98:e6:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:8F:A7:FF:15:69:17:7C:B7:18:5A:C5:85:8F:52:E0:34:BE:69
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pUCPp_8VaRd8txhaxYWPUuA0vmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c6:cb:7b:0e:93:da:ba:74:85:1d:f7:fa:e0:da:4b:5b:2d:
dd:4a:3b:2d:0e:00:3e:43:db:f7:d2:33:45:1c:ce:6a:94:e6:
3e:40:54:a6:e8:4b:fe:f1:95:94:d2:4f:24:54:5d:6d:cc:95:
cb:01:6b:41:5a:f4:82:b5:29:25:7b:91:69:14:e1:50:9f:c2:
52:b6:c8:1d:9d:f8:df:d9:ba:29:2c:5d:cf:e0:2c:b9:1e:93:
86:b4:e6:bf:ef:e1:be:7f:2a:29:30:c8:8b:8c:34:cd:14:62:
6c:48:e7:9f:07:0a:6d:bf:02:71:7c:2f:c3:72:3c:ed:a1:4b:
e9:2b:61:50:3c:27:84:22:5a:75:08:c0:02:56:ec:26:4d:eb:
78:a4:66:3b:78:ab:47:52:0d:25:25:3b:7f:0e:59:7a:ab:c5:
38:23:5e:a6:40:b5:4a:f2:78:09:32:74:cb:07:0b:8a:b0:cb:
c6:fd:00:a9:2e:e0:a0:49:a5:1d:f6:e7:cc:91:c1:bd:4f:fb:
c6:dd:a4:12:06:71:7d:88:b2:61:46:9f:38:25:d1:75:ff:0a:
22:55:08:31:1d:1d:db:6f:3d:8e:f0:27:09:d2:51:05:a1:ba:
00:99:47:5e:18:fc:af:dc:50:f7:8b:3e:39:a7:65:bc:a2:11:
a5:de:1f:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3x/fMnjDO93mPFtxFF0vIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI4MjMxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTQwOGZhN2ZmMTU2OTE3N2NiNzE4NWFjNTg1OGY1MmUwMzRiZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26KDlSfz1jADPtlypvfNX8K6mPCy
yWkfqh8zAjSOBoXFPIptAsmluxRzK1TUo3j7oaNUCGvY2KDqi3Rg/daeXcrYtBwr
tghhaAFk+IrcFdLbPScrv+0bcx2Dg5mIbVXwpf5P5q1NIeZfvfAU9WQwZ0dS6t4V
tiHWr2r4+Caol34l+lCakS0sJU2bBJrZHRaiS3kijHpNpXy3uVCgKzjk1ba8KpTq
LV+eNmFjxfppkABHgJXiXQkcb1jFD8XjY0oziAoJzsw3JFc7yrguH5pJajDf4n0j
lPablFnBT+H60s4K8kQERo5YBwk6tKagm3pfeJRwOIKmkbpuIlbHmOb5KwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKVAj6f/FWkXfLcYWsWFj1LgNL5pMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcFVDUHBfOFZhUmQ4dHhoYXhZV1BVdUEwdm1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI3Gy3sOk9q6dIUd9/rg
2ktbLd1KOy0OAD5D2/fSM0UczmqU5j5AVKboS/7xlZTSTyRUXW3MlcsBa0Fa9IK1
KSV7kWkU4VCfwlK2yB2d+N/ZuiksXc/gLLkek4a05r/v4b5/KikwyIuMNM0UYmxI
558HCm2/AnF8L8NyPO2hS+krYVA8J4QiWnUIwAJW7CZN63ikZjt4q0dSDSUlO38O
WXqrxTgjXqZAtUryeAkydMsHC4qwy8b9AKku4KBJpR3258yRwb1P+8bdpBIGcX2I
smFGnzgl0XX/CiJVCDEdHdtvPY7wJwnSUQWhugCZR14Y/K/cUPeLPjmnZbyiEaXe
HzA=
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:29 2025 by rpki-client