Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0O09EwfEDa7QOER8LkL1SfG85Q.roa
File: w0O09EwfEDa7QOER8LkL1SfG85Q.roa (raw, json)
Hash identifier: uGK5Hh5M0XeRgK72jk1cYSBec9Z4ctgi89gTLwW25bs=
Subject key identifier: C3:43:B4:F4:4C:1F:10:36:BB:40:E1:11:F0:B9:0B:D5:27:C6:F3:94
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D03649858CB15994FC4160C1E11C41A27
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0O09EwfEDa7QOER8LkL1SfG85Q.roa
Signing time: Sat 13 Jan 2024 15:15:40 +0000
ROA not before: Sat 13 Jan 2024 15:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:64:98:58:cb:15:99:4f:c4:16:0c:1e:11:c4:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 15:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c343b4f44c1f1036bb40e111f0b90bd527c6f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:24:b5:3e:d8:2e:f4:de:ff:2e:4f:d4:66:
82:fc:a5:60:c9:42:19:a1:89:c7:b6:04:ab:ff:17:
fc:fe:11:e9:2f:87:52:71:ca:b6:a4:1d:06:ba:a7:
88:dc:f8:c2:17:34:33:3a:7f:10:a7:d4:7d:34:b4:
f8:1c:99:57:2f:bf:66:e0:ba:a7:ee:da:ee:d0:e5:
5a:b6:f5:af:50:96:a5:19:bf:3e:4d:70:e4:aa:14:
7d:22:e3:3a:30:91:30:a6:61:ea:9e:f6:36:71:64:
2b:85:a1:93:49:21:c0:7a:90:a8:a8:ae:d5:29:5e:
0a:dd:43:1a:5e:3f:31:86:ea:30:ee:14:4c:24:ff:
96:2c:a9:c0:bd:a8:c5:c1:96:83:96:08:e2:19:63:
05:29:b7:d4:af:42:21:2a:81:65:3a:46:1c:2d:e2:
92:e9:02:59:17:48:2a:80:a8:1f:bf:26:83:1f:cd:
cb:fa:6f:e2:15:fd:31:82:db:85:1d:52:98:c0:3f:
54:e9:1a:11:12:b0:76:77:c7:f5:c0:42:17:17:d9:
d2:e4:80:1f:c2:4a:75:40:5a:50:88:fd:3a:7f:f9:
5e:fd:2e:e2:47:3e:72:0b:4f:7e:10:39:75:71:68:
9e:33:aa:bb:e9:71:0b:8b:c5:36:61:51:52:3f:e3:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:B4:F4:4C:1F:10:36:BB:40:E1:11:F0:B9:0B:D5:27:C6:F3:94
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0O09EwfEDa7QOER8LkL1SfG85Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:19:ca:15:b5:3a:ed:7c:7d:9a:69:1e:c6:0e:16:54:5c:bd:
5c:a0:1b:6d:80:96:09:7a:57:38:4a:5b:b3:57:91:7d:f6:d0:
3c:f6:2b:12:70:52:a6:95:a9:9c:7e:86:6e:01:32:1c:37:17:
62:59:9f:41:bd:26:58:cf:7d:f0:e0:b4:e5:19:41:9c:49:24:
15:6b:9c:27:8d:8e:90:6b:22:8e:6e:9a:ed:c3:36:45:32:a5:
f1:ef:40:ed:ed:25:bc:55:20:91:ce:e4:c0:ac:38:86:0d:c9:
e4:5a:3a:04:9c:a0:a6:8a:57:0c:9f:ed:fc:dd:ce:8e:13:29:
fe:79:e2:50:b8:64:29:ff:fb:eb:71:3e:0a:fd:eb:74:4b:19:
18:2e:2f:17:63:c2:8c:57:8e:6c:ec:08:96:ae:51:4e:c3:9a:
0a:2c:6b:c7:ae:2a:5f:30:a9:3b:e2:5d:2a:b1:94:fd:a7:2c:
00:88:24:b7:9f:c7:a4:00:a7:44:a4:97:33:f7:3e:14:b8:86:
6b:33:31:3c:48:26:fe:7d:4e:02:7c:07:63:45:14:40:3e:e1:
db:98:7c:af:a6:00:44:41:d2:99:6e:03:82:58:e1:a3:1f:31:
59:59:a6:08:90:1c:e2:73:c9:6a:64:db:65:e8:f8:f9:b1:a5:
0a:0b:55:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0DZJhYyxWZT8QWDB4RxBonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEzMTUxNTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQzYjRmNDRjMWYxMDM2YmI0MGUxMTFmMGI5MGJkNTI3YzZmMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvUktT7YLvTe/y5P1GaC/KVgyUIZ
oYnHtgSr/xf8/hHpL4dSccq2pB0GuqeI3PjCFzQzOn8Qp9R9NLT4HJlXL79m4Lqn
7tru0OVatvWvUJalGb8+TXDkqhR9IuM6MJEwpmHqnvY2cWQrhaGTSSHAepCoqK7V
KV4K3UMaXj8xhuow7hRMJP+WLKnAvajFwZaDlgjiGWMFKbfUr0IhKoFlOkYcLeKS
6QJZF0gqgKgfvyaDH83L+m/iFf0xgtuFHVKYwD9U6RoRErB2d8f1wEIXF9nS5IAf
wkp1QFpQiP06f/le/S7iRz5yC09+EDl1cWieM6q76XELi8U2YVFSP+OxUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMNDtPRMHxA2u0DhEfC5C9UnxvOUMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdzBPMDlFd2ZFRGE3UU9FUjhMa0wxU2ZHODVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJwZyhW1Ou18fZppHsYO
FlRcvVygG22Algl6VzhKW7NXkX320Dz2KxJwUqaVqZx+hm4BMhw3F2JZn0G9JljP
ffDgtOUZQZxJJBVrnCeNjpBrIo5umu3DNkUypfHvQO3tJbxVIJHO5MCsOIYNyeRa
OgScoKaKVwyf7fzdzo4TKf554lC4ZCn/++txPgr963RLGRguLxdjwoxXjmzsCJau
UU7Dmgosa8euKl8wqTviXSqxlP2nLACIJLefx6QAp0SklzP3PhS4hmszMTxIJv59
TgJ8B2NFFEA+4duYfK+mAERB0pluA4JY4aMfMVlZpgiQHOJzyWpk22Xo+PmxpQoL
VXU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:26 2025 by rpki-client