Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pqsGJeX2HGWhtuXUuYcOq2pzt_8.roa
File: pqsGJeX2HGWhtuXUuYcOq2pzt_8.roa (raw, json)
Hash identifier: GiiUjfFi+fGCMbRE1WyNpAHFHTErqwEGTmIhZi//7Gc=
Subject key identifier: A6:AB:06:25:E5:F6:1C:65:A1:B6:E5:D4:B9:87:0E:AB:6A:73:B7:FF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4B05ACFA62F42156444A20C098AFFAC9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pqsGJeX2HGWhtuXUuYcOq2pzt_8.roa
Signing time: Sat 27 Jan 2024 13:04:39 +0000
ROA not before: Sat 27 Jan 2024 13:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:4b05:47b8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:05:ac:fa:62:f4:21:56:44:4a:20:c0:98:af:fa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 13:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6ab0625e5f61c65a1b6e5d4b9870eab6a73b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:f0:ff:b0:89:be:da:d9:e0:59:10:31:b8:
1e:5d:4b:df:bc:ad:b1:38:6d:b5:d4:c4:1d:82:85:
29:4e:af:3b:53:33:e4:51:70:7b:b1:f4:20:da:26:
9a:49:57:6b:98:3f:b8:f9:17:d3:43:40:65:e5:e4:
ec:ca:0c:bf:2b:95:84:a5:c9:cf:0c:14:9d:91:13:
76:0f:7d:45:be:c3:85:01:76:dc:eb:64:62:da:b8:
27:08:18:f1:d3:b9:88:26:f4:e0:a3:5a:48:29:d0:
d8:61:90:93:1f:80:17:46:a1:77:0e:b7:e4:f4:f9:
36:c3:29:70:48:46:42:42:9a:03:d2:da:50:67:a8:
3e:c4:73:c1:77:52:ae:e2:cc:43:aa:97:97:63:e4:
57:9f:d4:4a:5c:04:1e:1a:06:c5:44:c4:5b:e7:0e:
64:d1:4f:a9:c3:58:44:46:5c:b7:da:f5:d1:00:8d:
f8:22:4b:90:9a:e0:91:c7:16:55:98:74:60:ef:fd:
fb:68:89:cf:fa:1a:be:46:45:46:94:8c:a5:88:d7:
54:4b:af:49:11:20:70:c7:f3:01:ca:a4:27:3c:d4:
49:d3:e7:c1:e5:b8:71:11:0f:11:b3:7e:f5:3f:39:
61:b1:74:4e:a1:b3:5e:9e:f1:48:45:ab:15:0d:d0:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:06:25:E5:F6:1C:65:A1:B6:E5:D4:B9:87:0E:AB:6A:73:B7:FF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pqsGJeX2HGWhtuXUuYcOq2pzt_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:e8:f4:54:da:e1:be:34:da:2e:5e:cc:42:8b:cb:ae:42:74:
7a:5a:b7:94:b1:06:99:59:1b:84:88:19:67:22:34:b0:16:49:
80:5a:98:5b:07:60:6c:59:e2:73:02:8b:13:27:30:70:80:51:
d5:43:eb:eb:39:c7:6f:74:a9:da:7e:94:73:70:14:3e:47:21:
86:ab:c6:3b:22:2a:a0:17:d3:33:6f:18:a2:90:ed:5f:ab:b1:
eb:0c:38:4e:c4:b2:48:03:a5:10:a5:a5:d9:7d:0f:bd:08:b8:
d8:01:4a:50:28:5f:bf:b9:b2:93:2f:d4:4b:ee:0b:9f:65:09:
43:e6:cc:9a:c7:f2:dd:88:6a:c9:29:9c:d4:36:2d:8a:55:c2:
8c:4e:fe:b0:d5:d6:f2:97:d1:22:cc:87:e8:42:14:bc:d4:fc:
54:f2:c9:52:9a:6f:9b:25:e5:57:07:5f:83:ad:8a:95:93:e2:
58:c0:10:15:a5:8d:df:9f:46:f5:b7:bd:4c:74:2d:43:df:87:
67:fe:52:cf:ad:b7:6a:d9:4a:e1:8e:07:8a:43:63:67:78:e2:
59:b1:e3:a9:4b:a2:fc:ae:88:2f:e7:6f:d8:1c:95:5b:b3:0c:
d1:6d:3e:4a:66:f3:c7:78:9f:79:0a:61:15:78:29:5b:32:6e:
db:c7:67:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1LBaz6YvQhVkRKIMCYr/rJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI3MTMwNDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmFiMDYyNWU1ZjYxYzY1YTFiNmU1ZDRiOTg3MGVhYjZhNzNiN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE/w/7CJvtrZ4FkQMbgeXUvfvK2x
OG211MQdgoUpTq87UzPkUXB7sfQg2iaaSVdrmD+4+RfTQ0Bl5eTsygy/K5WEpcnP
DBSdkRN2D31FvsOFAXbc62Ri2rgnCBjx07mIJvTgo1pIKdDYYZCTH4AXRqF3Drfk
9Pk2wylwSEZCQpoD0tpQZ6g+xHPBd1Ku4sxDqpeXY+RXn9RKXAQeGgbFRMRb5w5k
0U+pw1hERly32vXRAI34IkuQmuCRxxZVmHRg7/37aInP+hq+RkVGlIyliNdUS69J
ESBwx/MByqQnPNRJ0+fB5bhxEQ8Rs371PzlhsXROobNenvFIRasVDdDi+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKarBiXl9hxlobbl1LmHDqtqc7f/MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcHFzR0plWDJIR1dodHVYVXVZY09xMnB6dF84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIbo9FTa4b402i5ezEKL
y65CdHpat5SxBplZG4SIGWciNLAWSYBamFsHYGxZ4nMCixMnMHCAUdVD6+s5x290
qdp+lHNwFD5HIYarxjsiKqAX0zNvGKKQ7V+rsesMOE7EskgDpRClpdl9D70IuNgB
SlAoX7+5spMv1EvuC59lCUPmzJrH8t2IaskpnNQ2LYpVwoxO/rDV1vKX0SLMh+hC
FLzU/FTyyVKab5sl5VcHX4OtipWT4ljAEBWljd+fRvW3vUx0LUPfh2f+Us+tt2rZ
SuGOB4pDY2d44lmx46lLovyuiC/nb9gclVuzDNFtPkpm88d4n3kKYRV4KVsybtvH
Z7M=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:26 2025 by rpki-client