Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vJboV7kCq6vigIJm1PwgleZGqR0.roa
File: vJboV7kCq6vigIJm1PwgleZGqR0.roa (raw, json)
Hash identifier: 9SENhTylRBI8z9NEWH1Tn4jAxShbNKZgSn91QfG0Stc=
Subject key identifier: BC:96:E8:57:B9:02:AB:AB:E2:80:82:66:D4:FC:20:95:E6:46:A9:1D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9C226232BA4A1EDC67DFD9D43C0581D3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vJboV7kCq6vigIJm1PwgleZGqR0.roa
Signing time: Mon 12 Feb 2024 07:05:15 +0000
ROA not before: Mon 12 Feb 2024 07:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:9c21:a963/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:22:62:32:ba:4a:1e:dc:67:df:d9:d4:3c:05:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 07:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc96e857b902ababe2808266d4fc2095e646a91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:74:ff:9b:67:3b:a6:66:47:46:98:9f:d9:
2f:a4:61:49:5e:1b:b4:f1:39:00:0c:a7:d9:8e:98:
7c:1e:09:8d:13:9d:48:eb:7b:65:b5:45:53:60:32:
dd:15:47:60:2d:ac:5e:f8:a7:37:c0:1a:c7:8a:e7:
9a:ba:02:5b:da:da:58:b6:31:2d:5e:df:79:2b:16:
d1:82:0e:23:e0:43:8d:9d:b8:af:01:b0:26:98:76:
42:52:d6:0e:f6:0e:c0:ed:9d:9e:e0:a7:78:24:ec:
95:f5:b2:a1:33:83:1b:8b:a5:84:cb:c2:19:48:33:
d6:ac:90:d9:4d:62:99:99:97:00:c1:c8:d5:e6:f6:
3c:5e:f1:8c:f1:84:d0:cb:15:93:1d:36:6b:d6:5e:
2f:6e:d5:76:c7:d3:08:22:0c:1a:1e:5e:49:53:b1:
d2:b1:1b:5b:19:77:a8:91:01:bf:e6:75:8d:f3:98:
5e:0f:18:80:11:13:4e:3f:f4:4b:af:5f:1e:dc:49:
02:e0:e4:51:eb:98:4c:81:3b:ae:a7:e9:8d:9e:57:
ba:8a:32:0f:8c:7e:91:8a:52:99:6e:62:c4:12:3d:
74:e6:41:14:98:b5:9e:ab:4d:af:b4:e9:ef:48:e5:
88:b8:cb:33:6b:07:1e:98:d9:01:52:c8:33:4d:13:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:E8:57:B9:02:AB:AB:E2:80:82:66:D4:FC:20:95:E6:46:A9:1D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vJboV7kCq6vigIJm1PwgleZGqR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:5e:f1:ab:1a:59:8c:42:1d:b6:ab:ba:77:13:f4:6f:28:32:
a8:c2:51:a8:df:da:25:d9:2b:2c:43:40:65:a0:a1:9b:83:bc:
59:28:a3:14:ee:c1:a6:5e:5d:c0:15:1a:92:ac:ee:44:5a:72:
b2:f6:29:34:69:62:4f:56:61:80:85:ce:73:b8:5d:62:96:3d:
f4:3d:43:6d:3b:a9:7c:1c:f9:84:48:43:b3:d7:b3:b0:49:fa:
d4:d0:a4:dd:b5:4b:9e:5f:c8:98:f4:1c:04:ed:e4:38:d3:97:
40:e6:27:36:b7:60:12:b5:0f:a3:10:bc:85:95:73:af:ca:d6:
64:3f:7c:92:98:ad:65:f2:a5:da:0b:f5:6c:d6:a4:29:de:8d:
dc:78:e7:37:fe:4e:31:60:84:56:5f:44:1f:f2:f2:0b:f3:2c:
79:2c:41:6a:5d:f8:ff:98:24:c5:25:00:ce:00:e4:ba:40:73:
d1:64:2d:f0:3f:65:ae:b8:7e:ac:f1:f5:05:04:d5:70:bd:ec:
3b:8a:d4:9e:7d:b7:f6:49:ea:1a:e2:c7:e7:ab:f7:53:cb:9f:
16:16:c5:43:68:7b:14:8b:ad:ce:b4:97:95:e4:4b:b8:22:79:
4a:1a:41:1a:8d:4b:07:c0:c2:4b:f1:7e:ec:51:74:1a:1e:df:
1f:4f:47:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2cImIyukoe3Gff2dQ8BYHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEyMDcwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzk2ZTg1N2I5MDJhYmFiZTI4MDgyNjZkNGZjMjA5NWU2NDZhOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlR0/5tnO6ZmR0aYn9kvpGFJXhu0
8TkADKfZjph8HgmNE51I63tltUVTYDLdFUdgLaxe+Kc3wBrHiueaugJb2tpYtjEt
Xt95KxbRgg4j4EONnbivAbAmmHZCUtYO9g7A7Z2e4Kd4JOyV9bKhM4Mbi6WEy8IZ
SDPWrJDZTWKZmZcAwcjV5vY8XvGM8YTQyxWTHTZr1l4vbtV2x9MIIgwaHl5JU7HS
sRtbGXeokQG/5nWN85heDxiAERNOP/RLr18e3EkC4ORR65hMgTuup+mNnle6ijIP
jH6RilKZbmLEEj105kEUmLWeq02vtOnvSOWIuMszawcemNkBUsgzTROYoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLyW6Fe5Aqur4oCCZtT8IJXmRqkdMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdkpib1Y3a0NxNnZpZ0lKbTFQd2dsZVpHcVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9e8asaWYxCHbaruncT
9G8oMqjCUajf2iXZKyxDQGWgoZuDvFkooxTuwaZeXcAVGpKs7kRacrL2KTRpYk9W
YYCFznO4XWKWPfQ9Q207qXwc+YRIQ7PXs7BJ+tTQpN21S55fyJj0HATt5DjTl0Dm
Jza3YBK1D6MQvIWVc6/K1mQ/fJKYrWXypdoL9WzWpCnejdx45zf+TjFghFZfRB/y
8gvzLHksQWpd+P+YJMUlAM4A5LpAc9FkLfA/Za64fqzx9QUE1XC97DuK1J59t/ZJ
6hrix+er91PLnxYWxUNoexSLrc60l5XkS7gieUoaQRqNSwfAwkvxfuxRdBoe3x9P
R7g=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:58:08 2025 by rpki-client