Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vF4jyKXzp0olaxpsHICev8vkV9g.roa
File: vF4jyKXzp0olaxpsHICev8vkV9g.roa (raw, json)
Hash identifier: aLgtbfTMOuQ6pEx+E6Lb06U4KX2GMhgpavCo7qsEGKw=
Subject key identifier: BC:5E:23:C8:A5:F3:A7:4A:25:6B:1A:6C:1C:80:9E:BF:CB:E4:57:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D77E81A8BEC5A94218E998820302066B3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vF4jyKXzp0olaxpsHICev8vkV9g.roa
Signing time: Mon 05 Feb 2024 06:15:16 +0000
ROA not before: Mon 05 Feb 2024 06:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:e8:1a:8b:ec:5a:94:21:8e:99:88:20:30:20:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 06:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc5e23c8a5f3a74a256b1a6c1c809ebfcbe457d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:34:67:6e:0c:2b:98:58:8b:b1:2e:1c:ea:
d9:21:58:d5:a7:57:aa:04:6c:e9:fa:97:e0:ea:1b:
57:4d:59:12:01:5b:bd:93:f3:76:71:3b:61:77:76:
86:4b:b1:ab:83:f6:1f:7e:99:88:de:94:ab:12:58:
b6:33:c5:a3:0a:99:4f:4e:40:4b:1b:94:11:a9:64:
b8:5c:32:52:cd:b7:91:8a:16:7e:6c:5d:bc:55:7b:
d3:ed:4e:7e:ce:7a:50:dd:9c:c2:67:f6:af:e4:5c:
f0:92:47:65:6d:24:84:ab:a1:90:68:e6:fd:bf:d5:
94:44:53:29:f2:9c:8d:22:d0:01:e4:4f:4d:a3:e3:
93:cf:5c:93:4c:66:ba:2e:2b:04:1d:37:26:ee:7f:
bd:9f:65:bb:07:ff:36:b8:c6:12:3d:22:bc:db:f1:
19:e5:54:ae:44:4c:87:88:c0:a8:00:7d:f8:72:c1:
f6:3a:f1:29:7e:d0:5d:e0:ff:41:1a:0a:f1:16:be:
f2:30:ef:98:37:24:30:6e:2a:0d:c5:06:9a:47:df:
59:0c:24:0b:75:27:c0:3d:c1:4b:c4:96:99:ce:f4:
9b:14:32:2f:96:bb:7c:c0:79:eb:de:9e:36:6a:19:
4f:09:5d:2b:69:49:77:91:98:a4:9d:99:99:c5:5a:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5E:23:C8:A5:F3:A7:4A:25:6B:1A:6C:1C:80:9E:BF:CB:E4:57:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vF4jyKXzp0olaxpsHICev8vkV9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:7d:ab:81:8a:1d:21:4a:80:14:52:e2:18:ef:e9:3a:70:ac:
12:84:a4:fb:b6:fb:16:16:55:49:be:60:b9:95:5b:86:7d:66:
15:80:90:b3:59:d9:e9:98:cb:1b:26:d3:c7:62:8b:c7:2d:71:
93:25:e1:5d:69:3d:b5:10:4b:31:ca:93:86:51:6b:da:99:1e:
21:70:72:42:d5:cd:7a:21:95:22:c3:e7:98:48:c9:25:e0:79:
41:cc:7b:33:7b:77:6f:a8:73:d1:10:48:17:1a:27:62:77:26:
f5:b3:d4:48:d9:60:a2:28:2f:1a:b3:51:0b:78:0a:cd:4f:19:
55:fb:4d:7d:ce:dc:b6:a0:a2:2c:89:84:2d:3d:18:f6:89:c2:
8b:99:67:5e:1e:70:a7:2d:1c:14:54:1c:41:65:52:f3:18:a1:
aa:ad:b2:1e:29:06:fe:b7:71:4d:2f:e2:a3:7c:be:2d:ac:5f:
24:70:b9:94:dc:d1:a4:91:95:7f:ac:b1:f4:b4:56:95:d9:dc:
f0:78:b1:dd:90:48:69:40:90:4d:40:17:33:9d:6c:d0:aa:c9:
e2:43:08:87:7d:72:f4:da:1a:7f:ca:f6:28:e1:08:21:33:8e:
ba:58:ad:64:56:67:72:d5:b1:f2:f8:03:32:12:ae:f3:bf:08:
b0:6d:6d:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY136BqL7FqUIY6ZiCAwIGazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA1MDYxNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzVlMjNjOGE1ZjNhNzRhMjU2YjFhNmMxYzgwOWViZmNiZTQ1N2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+w0Z24MK5hYi7EuHOrZIVjVp1eq
BGzp+pfg6htXTVkSAVu9k/N2cTthd3aGS7Grg/YffpmI3pSrEli2M8WjCplPTkBL
G5QRqWS4XDJSzbeRihZ+bF28VXvT7U5+znpQ3ZzCZ/av5FzwkkdlbSSEq6GQaOb9
v9WURFMp8pyNItAB5E9No+OTz1yTTGa6LisEHTcm7n+9n2W7B/82uMYSPSK82/EZ
5VSuREyHiMCoAH34csH2OvEpftBd4P9BGgrxFr7yMO+YNyQwbioNxQaaR99ZDCQL
dSfAPcFLxJaZzvSbFDIvlrt8wHnr3p42ahlPCV0raUl3kZiknZmZxVoy0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLxeI8il86dKJWsabByAnr/L5FfYMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdkY0anlLWHpwMG9sYXhwc0hJQ2V2OHZrVjlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAh9q4GKHSFKgBRS4hjv
6TpwrBKEpPu2+xYWVUm+YLmVW4Z9ZhWAkLNZ2emYyxsm08dii8ctcZMl4V1pPbUQ
SzHKk4ZRa9qZHiFwckLVzXohlSLD55hIySXgeUHMezN7d2+oc9EQSBcaJ2J3JvWz
1EjZYKIoLxqzUQt4Cs1PGVX7TX3O3LagoiyJhC09GPaJwouZZ14ecKctHBRUHEFl
UvMYoaqtsh4pBv63cU0v4qN8vi2sXyRwuZTc0aSRlX+ssfS0VpXZ3PB4sd2QSGlA
kE1AFzOdbNCqyeJDCId9cvTaGn/K9ijhCCEzjrpYrWRWZ3LVsfL4AzISrvO/CLBt
bXU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:56 2025 by rpki-client