Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_TZ5pkf8PIvVVnA0xfX9p6BDnY.roa
File: r_TZ5pkf8PIvVVnA0xfX9p6BDnY.roa (raw, json)
Hash identifier: TFTT7Y8GXZpQnyG+zvN8zw/DaoR3kuPO8G13jiOVXw4=
Subject key identifier: AF:F4:D9:E6:99:1F:F0:F2:2F:55:59:C0:D3:17:D7:F6:9E:81:0E:76
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8BDE90F2886F700A990A3CD06222F580
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_TZ5pkf8PIvVVnA0xfX9p6BDnY.roa
Signing time: Fri 09 Feb 2024 03:17:15 +0000
ROA not before: Fri 09 Feb 2024 03:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8b:de:90:f2:88:6f:70:0a:99:0a:3c:d0:62:22:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 03:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff4d9e6991ff0f22f5559c0d317d7f69e810e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:2a:33:c5:f6:9b:67:07:9a:a6:e0:fa:97:
60:23:2d:68:0d:58:63:e7:70:4b:02:96:a4:43:28:
3e:01:2e:b4:64:f4:96:80:fc:31:16:ad:39:8c:80:
b1:f2:40:ae:c4:c9:f7:96:7e:7f:07:88:1f:be:60:
46:91:d6:9f:8f:ae:91:2a:05:e3:d1:cd:24:a2:4f:
85:b1:e5:a7:95:20:82:06:1b:fc:5d:d2:d2:57:c5:
74:11:fc:b0:9e:f4:16:7a:a7:83:ba:f8:b5:fa:e7:
9a:c3:fc:7c:31:59:9e:0b:79:2b:a5:02:83:ca:40:
78:11:3d:ff:b6:1a:8e:c0:96:2a:03:0a:b2:9e:ca:
d0:cc:2a:2d:20:c6:48:53:1f:f7:3e:ab:a3:42:40:
33:2f:00:ca:b4:f2:f0:88:f4:a8:29:7a:32:ef:49:
38:ba:87:bb:9a:a7:57:3a:0f:aa:3c:c8:8c:3a:51:
ce:87:35:48:19:49:88:f3:a1:dc:82:fc:d9:a4:35:
13:1a:2d:88:b7:85:d3:6f:07:dc:3d:95:27:8b:5a:
2e:92:33:88:47:c6:a2:4c:5e:05:7f:23:de:9c:f8:
aa:d5:c1:77:ee:62:2a:77:40:24:51:47:c7:4d:63:
08:c2:53:da:2c:b3:5b:19:ef:36:44:56:e2:01:80:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:D9:E6:99:1F:F0:F2:2F:55:59:C0:D3:17:D7:F6:9E:81:0E:76
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_TZ5pkf8PIvVVnA0xfX9p6BDnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:b4:19:e0:a4:42:89:dd:07:4e:c1:1a:11:ff:c7:ee:a3:98:
01:62:bd:86:3a:d4:25:01:82:91:42:dc:db:fc:dc:35:24:af:
79:a4:83:8e:b8:bf:eb:17:6b:af:71:11:21:8b:e0:83:46:c0:
95:6a:6c:38:2b:cd:9b:9f:98:cb:ff:1f:ef:51:7b:5d:c8:44:
2b:98:89:77:f4:5e:dd:61:da:e1:54:f8:10:9c:22:b6:7e:af:
10:a4:c4:a8:0d:9e:b7:03:6f:84:8f:b2:8d:36:b4:37:90:87:
f4:e5:d5:94:d1:4c:4b:17:89:91:6f:24:3e:8d:5a:1a:f1:46:
4f:5b:54:1a:27:02:87:66:35:6b:de:42:ee:a8:77:df:5a:70:
3a:af:dd:b8:e4:66:2a:5c:c8:de:6f:7e:88:5d:57:76:6f:97:
0d:5e:dd:61:e3:72:28:20:da:a3:4e:2f:df:8f:72:0a:1c:9d:
6f:25:28:af:76:43:51:3a:3e:3c:36:21:1d:b4:fa:ce:61:5e:
61:26:7a:59:59:63:df:22:c3:5c:f4:d1:0f:cd:41:82:9c:56:
fe:47:b4:3f:c9:e4:24:ce:be:91:a7:32:0c:d2:b3:7b:b8:de:
91:5b:a1:d1:7c:93:78:e1:76:d1:45:d0:6e:bb:02:bb:ca:04:
30:b7:29:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2L3pDyiG9wCpkKPNBiIvWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA5MDMxNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmY0ZDllNjk5MWZmMGYyMmY1NTU5YzBkMzE3ZDdmNjllODEwZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qIqM8X2m2cHmqbg+pdgIy1oDVhj
53BLApakQyg+AS60ZPSWgPwxFq05jICx8kCuxMn3ln5/B4gfvmBGkdafj66RKgXj
0c0kok+FseWnlSCCBhv8XdLSV8V0EfywnvQWeqeDuvi1+ueaw/x8MVmeC3krpQKD
ykB4ET3/thqOwJYqAwqynsrQzCotIMZIUx/3PqujQkAzLwDKtPLwiPSoKXoy70k4
uoe7mqdXOg+qPMiMOlHOhzVIGUmI86HcgvzZpDUTGi2It4XTbwfcPZUni1oukjOI
R8aiTF4FfyPenPiq1cF37mIqd0AkUUfHTWMIwlPaLLNbGe82RFbiAYBTTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK/02eaZH/DyL1VZwNMX1/aegQ52MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcl9UWjVwa2Y4UEl2VlZuQTB4Zlg5cDZCRG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFi0GeCkQondB07BGhH/
x+6jmAFivYY61CUBgpFC3Nv83DUkr3mkg464v+sXa69xESGL4INGwJVqbDgrzZuf
mMv/H+9Re13IRCuYiXf0Xt1h2uFU+BCcIrZ+rxCkxKgNnrcDb4SPso02tDeQh/Tl
1ZTRTEsXiZFvJD6NWhrxRk9bVBonAodmNWveQu6od99acDqv3bjkZipcyN5vfohd
V3Zvlw1e3WHjcigg2qNOL9+PcgocnW8lKK92Q1E6Pjw2IR20+s5hXmEmellZY98i
w1z00Q/NQYKcVv5HtD/J5CTOvpGnMgzSs3u43pFbodF8k3jhdtFF0G67ArvKBDC3
Kd4=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:50 2025 by rpki-client