Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tp21rqMNncREuJwdQ250-ug5qKA.roa
File: tp21rqMNncREuJwdQ250-ug5qKA.roa (raw, json)
Hash identifier: PPaUz32lIFiYAFokEavvfATpNpNLQkcw4Jooq8TOfYY=
Subject key identifier: B6:9D:B5:AE:A3:0D:9D:C4:44:B8:9C:1D:43:6E:74:FA:E8:39:A8:A0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBCBF2C93697328ED143392D0C07C5D17
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tp21rqMNncREuJwdQ250-ug5qKA.roa
Signing time: Sun 18 Feb 2024 15:04:21 +0000
ROA not before: Sun 18 Feb 2024 15:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:bcbf:129f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:bf:2c:93:69:73:28:ed:14:33:92:d0:c0:7c:5d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 15:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b69db5aea30d9dc444b89c1d436e74fae839a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:f3:f0:3b:93:a7:e3:4c:84:68:e0:07:43:
29:cf:9c:68:e9:94:d0:93:9d:50:67:d3:a2:4d:37:
cc:ac:4b:d1:ab:29:d1:4d:bc:1d:01:01:24:d3:09:
74:82:56:c5:78:6f:0e:4d:f5:e0:e0:52:eb:94:dd:
2a:b0:08:47:94:d3:7a:ff:ff:89:0f:0f:8c:5a:df:
80:7c:e4:51:29:bc:fd:dc:80:12:7b:7a:0b:5f:82:
0b:dd:e0:2b:d3:ea:f5:93:14:ba:4d:be:23:3f:8d:
29:5b:99:46:34:1a:54:b7:e9:5f:48:cc:31:0f:55:
17:76:51:4b:c9:90:92:db:0d:27:a2:cd:a7:33:76:
3a:81:35:ad:18:da:53:98:c9:b0:53:65:67:c2:b6:
18:82:36:1b:96:99:c2:ec:87:ba:5c:ba:99:1e:4e:
fa:0e:f8:6b:53:e6:83:57:58:74:27:ef:31:2e:d3:
a1:85:d5:7b:6f:c0:81:bb:52:5b:2a:8c:a2:18:d7:
91:50:33:dd:3a:4e:3c:1f:86:a9:06:6f:b1:2c:2c:
87:03:53:a6:2c:29:19:3c:a8:54:5a:af:5a:c4:1c:
63:96:cd:a2:01:e0:35:86:c2:ed:ce:d5:0e:a0:ac:
cf:0d:c3:13:58:07:be:30:3d:5e:27:5b:3a:d9:cb:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:B5:AE:A3:0D:9D:C4:44:B8:9C:1D:43:6E:74:FA:E8:39:A8:A0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tp21rqMNncREuJwdQ250-ug5qKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:d9:47:7f:5b:16:6f:61:be:66:b6:5d:15:23:27:80:46:e1:
5d:1b:1d:e2:be:56:20:ab:f2:a3:9b:1f:53:9d:5a:38:89:e8:
08:c7:1b:18:69:4c:fe:88:ff:34:a6:9b:a4:99:61:10:53:4c:
91:63:d5:7f:45:64:fa:f1:fd:1e:5c:62:22:dc:d9:e2:c9:06:
35:dd:b3:b5:25:d1:8d:64:f1:4f:df:9c:3a:20:f2:4f:b2:97:
44:71:f4:3c:02:f8:87:40:5d:f9:03:13:cb:47:3d:98:5d:8e:
4f:74:fc:fe:20:c1:63:a2:b6:4c:78:e5:82:34:11:b4:ea:17:
79:cb:64:ec:23:88:5a:c8:27:1d:02:cb:a1:ca:73:6d:84:e9:
ea:7b:69:e4:f1:39:bb:ff:74:29:62:1c:cd:f0:9b:cc:bc:d7:
41:ae:1c:d2:23:21:1b:ef:27:3b:4a:4b:77:29:35:cb:7a:16:
f5:44:5c:77:28:0c:2c:fb:52:fa:43:79:af:a7:67:3a:54:f9:
bc:35:7b:0b:67:9f:e3:6f:07:35:16:2f:ad:53:cd:b9:36:1f:
15:fd:ac:c6:07:f8:f2:51:05:34:d6:e8:ec:d0:b1:10:d8:b7:
12:93:e0:28:6d:d0:3c:90:67:75:7e:e0:8e:34:31:6a:4a:c2:
75:3f:c6:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY28vyyTaXMo7RQzktDAfF0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE4MTUwNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjlkYjVhZWEzMGQ5ZGM0NDRiODljMWQ0MzZlNzRmYWU4MzlhOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMDz8DuTp+NMhGjgB0Mpz5xo6ZTQ
k51QZ9OiTTfMrEvRqynRTbwdAQEk0wl0glbFeG8OTfXg4FLrlN0qsAhHlNN6//+J
Dw+MWt+AfORRKbz93IASe3oLX4IL3eAr0+r1kxS6Tb4jP40pW5lGNBpUt+lfSMwx
D1UXdlFLyZCS2w0nos2nM3Y6gTWtGNpTmMmwU2VnwrYYgjYblpnC7Ie6XLqZHk76
DvhrU+aDV1h0J+8xLtOhhdV7b8CBu1JbKoyiGNeRUDPdOk48H4apBm+xLCyHA1Om
LCkZPKhUWq9axBxjls2iAeA1hsLtztUOoKzPDcMTWAe+MD1eJ1s62cs18QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLadta6jDZ3ERLicHUNudProOaigMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdHAyMXJxTU5uY1JFdUp3ZFEyNTAtdWc1cUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGrZR39bFm9hvma2XRUj
J4BG4V0bHeK+ViCr8qObH1OdWjiJ6AjHGxhpTP6I/zSmm6SZYRBTTJFj1X9FZPrx
/R5cYiLc2eLJBjXds7Ul0Y1k8U/fnDog8k+yl0Rx9DwC+IdAXfkDE8tHPZhdjk90
/P4gwWOitkx45YI0EbTqF3nLZOwjiFrIJx0Cy6HKc22E6ep7aeTxObv/dCliHM3w
m8y810GuHNIjIRvvJztKS3cpNct6FvVEXHcoDCz7UvpDea+nZzpU+bw1ewtnn+Nv
BzUWL61Tzbk2HxX9rMYH+PJRBTTW6OzQsRDYtxKT4Cht0DyQZ3V+4I40MWpKwnU/
xl0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:34 2025 by rpki-client