Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DrLkAXLoakTfnAcLfk3H4UrfXIM.roa
File: DrLkAXLoakTfnAcLfk3H4UrfXIM.roa (raw, json)
Hash identifier: 5NuP0eKoBaWeQ7CEDvR4/4oBMiOtHRUsfMkwwhy60xU=
Subject key identifier: 0E:B2:E4:01:72:E8:6A:44:DF:9C:07:0B:7E:4D:C7:E1:4A:DF:5C:83
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEC6C78E8DC8B76182C514E6DEFF4027B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DrLkAXLoakTfnAcLfk3H4UrfXIM.roa
Signing time: Tue 27 Feb 2024 21:15:48 +0000
ROA not before: Tue 27 Feb 2024 21:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:6c:78:e8:dc:8b:76:18:2c:51:4e:6d:ef:f4:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 21:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb2e40172e86a44df9c070b7e4dc7e14adf5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:66:0f:72:ee:c1:ce:53:83:75:1d:bd:21:
5d:b4:dc:08:6f:54:1e:aa:6a:10:49:c1:4c:f4:b7:
b1:1b:19:b1:de:cb:2a:4f:bf:82:18:5a:8b:5d:7e:
7a:47:cb:0b:43:30:89:e1:dd:bb:c4:4e:31:c0:71:
39:c8:46:5e:18:3e:c2:34:53:9c:8c:5a:fe:da:32:
46:f9:ca:0e:4a:1a:aa:5d:a9:27:39:8b:2d:b8:a6:
76:ec:ba:02:b8:67:1b:af:44:7d:80:59:f5:89:5e:
c4:0a:29:28:12:04:6c:6c:df:e1:9a:72:28:0d:64:
12:17:a8:b8:31:43:89:39:e7:47:3f:42:68:21:20:
c3:68:06:b5:22:24:a9:c3:30:90:24:23:f7:3b:9f:
8c:58:68:50:10:b0:c8:86:bb:f6:11:b5:ed:56:e2:
8b:1a:e4:8f:0e:2d:e6:fe:2f:21:88:e1:ab:4a:3d:
e0:20:2e:96:f7:a1:ad:1e:23:6c:4a:c0:33:33:3b:
78:f7:cd:7f:1c:82:b8:16:46:32:3f:33:0a:b7:7f:
ca:dd:c0:02:b9:dc:fb:e5:63:a1:86:b9:5f:2a:de:
8f:0a:d7:c9:fa:a2:1c:3b:68:14:3c:0e:38:74:72:
34:36:ff:22:2a:b0:95:69:a8:7c:fd:03:0a:8e:82:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:E4:01:72:E8:6A:44:DF:9C:07:0B:7E:4D:C7:E1:4A:DF:5C:83
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DrLkAXLoakTfnAcLfk3H4UrfXIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:77:0c:d5:73:08:0f:11:5f:8f:b6:dd:49:95:28:a5:e7:c0:
64:85:df:c1:3f:7c:dd:06:45:e6:ab:65:c9:99:7a:e6:88:24:
78:c8:a6:42:0f:9f:82:79:39:d0:e4:64:05:ce:7d:71:f2:51:
2c:a2:42:0b:be:a2:85:7d:26:4c:3f:48:e7:d5:9d:24:e4:8b:
4b:15:85:01:a3:a9:f7:e3:27:68:8c:86:08:2a:cf:15:e8:7d:
2a:87:5c:e4:35:d2:28:bc:d5:0d:21:39:8f:0d:d4:12:5c:9d:
b1:a4:a6:44:ca:93:0b:a8:91:46:3e:07:2f:b1:c1:ac:cd:ed:
3c:ca:b1:c0:62:cb:a2:fb:a4:62:04:59:bf:4a:dd:34:68:5f:
c0:46:08:a5:70:39:06:30:63:3a:fe:76:bd:3e:2b:8b:23:19:
42:b1:41:1a:40:26:f0:11:bf:3a:41:54:ea:8e:83:0e:ea:77:
c8:f3:ff:48:cf:51:f9:8c:8f:ea:bf:a8:cd:ad:7d:a8:27:cc:
86:04:d1:7a:54:42:80:c5:1c:f8:87:94:4b:ee:d2:4e:60:2e:
cf:0f:2d:a3:ab:28:85:98:04:51:31:c3:35:ce:d4:60:3f:58:
1a:78:88:ad:77:16:b2:5a:f2:92:dd:09:d0:d9:3e:7c:d1:bd:
5f:a1:a9:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3sbHjo3It2GCxRTm3v9AJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI3MjExNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWIyZTQwMTcyZTg2YTQ0ZGY5YzA3MGI3ZTRkYzdlMTRhZGY1YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgepmD3Luwc5Tg3UdvSFdtNwIb1Qe
qmoQScFM9LexGxmx3ssqT7+CGFqLXX56R8sLQzCJ4d27xE4xwHE5yEZeGD7CNFOc
jFr+2jJG+coOShqqXaknOYstuKZ27LoCuGcbr0R9gFn1iV7ECikoEgRsbN/hmnIo
DWQSF6i4MUOJOedHP0JoISDDaAa1IiSpwzCQJCP3O5+MWGhQELDIhrv2EbXtVuKL
GuSPDi3m/i8hiOGrSj3gIC6W96GtHiNsSsAzMzt4981/HIK4FkYyPzMKt3/K3cAC
udz75WOhhrlfKt6PCtfJ+qIcO2gUPA44dHI0Nv8iKrCVaah8/QMKjoJzIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA6y5AFy6GpE35wHC35Nx+FK31yDMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRHJMa0FYTG9ha1RmbkFjTGZrM0g0VXJmWElNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKV3DNVzCA8RX4+23UmV
KKXnwGSF38E/fN0GRearZcmZeuaIJHjIpkIPn4J5OdDkZAXOfXHyUSyiQgu+ooV9
Jkw/SOfVnSTki0sVhQGjqffjJ2iMhggqzxXofSqHXOQ10ii81Q0hOY8N1BJcnbGk
pkTKkwuokUY+By+xwazN7TzKscBiy6L7pGIEWb9K3TRoX8BGCKVwOQYwYzr+dr0+
K4sjGUKxQRpAJvARvzpBVOqOgw7qd8jz/0jPUfmMj+q/qM2tfagnzIYE0XpUQoDF
HPiHlEvu0k5gLs8PLaOrKIWYBFExwzXO1GA/WBp4iK13FrJa8pLdCdDZPnzRvV+h
qaQ=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:15 2025 by rpki-client