Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIRAN10YnYiUTYOUSQpVPk9ENBI.roa
File: uIRAN10YnYiUTYOUSQpVPk9ENBI.roa (raw, json)
Hash identifier: YF27ck2V2z+4HvVdrjZV0t2ZQqK1dXnIrhvKYmcJ1c0=
Subject key identifier: B8:84:40:37:5D:18:9D:88:94:4D:83:94:49:0A:55:3E:4F:44:34:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D77A80418C2E425622B9977A58E2A0C91
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIRAN10YnYiUTYOUSQpVPk9ENBI.roa
Signing time: Mon 05 Feb 2024 05:05:16 +0000
ROA not before: Mon 05 Feb 2024 05:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:77a7:22e8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:a8:04:18:c2:e4:25:62:2b:99:77:a5:8e:2a:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 05:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88440375d189d88944d8394490a553e4f443412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:27:ff:d1:4c:78:b6:f4:f8:2e:7d:af:1b:
03:7a:ee:1a:8d:c7:89:0f:2c:f3:0a:2f:c8:59:c8:
df:16:6e:bc:f7:5a:d4:34:d9:31:17:04:0f:80:dd:
08:dc:28:89:25:5f:d5:d8:ea:4e:f8:cf:c6:b9:c9:
27:a2:38:6a:1d:dc:5c:4d:ca:42:fc:e2:6d:3a:7f:
25:05:5a:85:84:7e:d4:ab:7a:a9:9d:da:95:36:b4:
af:47:aa:0b:af:c8:f1:c7:c6:dd:2c:00:92:74:25:
22:9a:42:1f:e5:09:a7:b1:d8:1a:85:b8:d8:08:96:
99:8c:88:92:fa:ad:fe:82:7b:ca:5f:52:d6:bf:13:
b5:2a:ad:a0:fc:17:72:d9:3f:80:e2:8d:28:bd:66:
15:4c:85:b5:90:e6:81:c8:0c:d7:75:80:5e:46:11:
61:b7:02:aa:28:c6:4e:89:05:d8:84:4a:ed:4b:b6:
45:5e:46:f4:3f:5f:aa:99:f2:0e:e2:ac:53:74:62:
bd:08:f3:66:18:b8:10:a4:f1:3d:77:d4:9a:52:6c:
67:ee:0a:b1:62:0b:84:b5:e5:a8:09:c3:91:de:3f:
93:d1:a0:f9:4b:bd:a4:fb:f8:4e:5f:06:3f:55:c7:
f2:14:30:c7:2d:b6:bd:b2:b8:95:7b:2a:a3:94:d8:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:40:37:5D:18:9D:88:94:4D:83:94:49:0A:55:3E:4F:44:34:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIRAN10YnYiUTYOUSQpVPk9ENBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:58:0f:ac:5b:0a:22:67:58:5e:c0:78:5f:ef:4d:ea:99:6d:
9e:95:47:b9:5c:18:c0:8e:8d:78:92:4f:84:16:7b:e5:57:2f:
1d:ee:ca:c6:e8:28:21:cd:64:2b:02:e6:c7:4d:c9:ac:53:e7:
d5:d6:f7:54:a2:82:58:04:9c:20:44:b8:ff:6d:4b:f1:3a:8f:
6d:72:f2:1a:45:25:d6:0a:85:5e:3d:0a:02:2c:0a:df:68:30:
51:61:70:bc:c6:7a:ed:37:1e:4b:4a:37:14:98:66:25:80:72:
0e:34:d4:e4:c3:41:2b:45:c2:6e:12:4d:04:f7:49:3f:b9:65:
d3:00:5e:ab:d3:76:41:5a:e9:62:ee:c2:a4:27:a5:30:24:47:
51:ed:5a:24:7c:23:56:ea:69:9e:88:7a:ba:d3:6e:37:d3:1e:
71:0b:18:ec:e1:4c:2f:ea:54:1c:d6:bc:27:3c:5a:b2:bb:7d:
cc:6e:a0:27:bd:3f:2d:92:27:4a:2e:84:c5:e8:25:2a:e8:25:
64:2d:98:3f:e1:d7:14:0c:e7:3f:e7:c4:4f:9c:61:d4:71:58:
39:a1:81:ba:59:12:ce:28:21:81:8c:80:b8:d3:72:93:cc:bc:
38:d4:48:62:32:2f:ac:f0:1f:9c:1d:00:94:cf:4d:4f:07:3d:
b1:ca:e6:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY13qAQYwuQlYiuZd6WOKgyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA1MDUwNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg0NDAzNzVkMTg5ZDg4OTQ0ZDgzOTQ0OTBhNTUzZTRmNDQzNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLQn/9FMeLb0+C59rxsDeu4ajceJ
DyzzCi/IWcjfFm6891rUNNkxFwQPgN0I3CiJJV/V2OpO+M/GucknojhqHdxcTcpC
/OJtOn8lBVqFhH7Uq3qpndqVNrSvR6oLr8jxx8bdLACSdCUimkIf5QmnsdgahbjY
CJaZjIiS+q3+gnvKX1LWvxO1Kq2g/Bdy2T+A4o0ovWYVTIW1kOaByAzXdYBeRhFh
twKqKMZOiQXYhErtS7ZFXkb0P1+qmfIO4qxTdGK9CPNmGLgQpPE9d9SaUmxn7gqx
YguEteWoCcOR3j+T0aD5S72k+/hOXwY/VcfyFDDHLba9sriVeyqjlNhrJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLiEQDddGJ2IlE2DlEkKVT5PRDQSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdUlSQU4xMFluWWlVVFlPVVNRcFZQazlFTkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJNYD6xbCiJnWF7AeF/v
TeqZbZ6VR7lcGMCOjXiST4QWe+VXLx3uysboKCHNZCsC5sdNyaxT59XW91SiglgE
nCBEuP9tS/E6j21y8hpFJdYKhV49CgIsCt9oMFFhcLzGeu03HktKNxSYZiWAcg40
1OTDQStFwm4STQT3ST+5ZdMAXqvTdkFa6WLuwqQnpTAkR1HtWiR8I1bqaZ6IerrT
bjfTHnELGOzhTC/qVBzWvCc8WrK7fcxuoCe9Py2SJ0ouhMXoJSroJWQtmD/h1xQM
5z/nxE+cYdRxWDmhgbpZEs4oIYGMgLjTcpPMvDjUSGIyL6zwH5wdAJTPTU8HPbHK
5hI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:09 2025 by rpki-client