Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S3hKfbB-g0oF7DyxuijNltI_03c.roa
File: S3hKfbB-g0oF7DyxuijNltI_03c.roa (raw, json)
Hash identifier: XR1KxQ3HCVe6qZGgrq7zypxTwu3t6Jh4fxNDrXMoNS4=
Subject key identifier: 4B:78:4A:7D:B0:7E:83:4A:05:EC:3C:B1:BA:28:CD:96:D2:3F:D3:77
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D71404E33E035D102FDF901BCD04B97BB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S3hKfbB-g0oF7DyxuijNltI_03c.roa
Signing time: Sat 03 Feb 2024 23:14:16 +0000
ROA not before: Sat 03 Feb 2024 23:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:71:40:4e:33:e0:35:d1:02:fd:f9:01:bc:d0:4b:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 23:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b784a7db07e834a05ec3cb1ba28cd96d23fd377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:8f:95:c0:28:58:c2:f8:03:32:12:96:da:
74:93:14:57:e8:e0:94:28:1c:a3:4d:81:74:8c:73:
1b:4b:00:a0:6d:5c:0f:05:9f:99:6c:f6:cd:d7:bc:
79:2a:bb:bf:b8:43:41:10:c3:01:52:70:93:03:26:
0e:5a:0a:5e:79:71:3f:50:66:4b:36:d8:72:91:21:
22:a7:33:ca:de:53:77:0e:20:9a:47:79:27:34:2f:
d4:7e:04:38:6e:59:4e:f3:c0:cc:10:00:15:14:bd:
b6:99:ae:15:ba:fa:ac:cb:14:b9:0a:33:c5:8c:98:
65:6a:c3:ba:85:5a:d6:53:b3:e0:15:e8:8e:af:af:
69:d4:94:7c:f5:df:e9:65:bc:9e:b8:96:7b:f8:bc:
6a:16:53:bc:9d:e1:2b:89:b4:30:ec:d8:cf:f1:81:
4b:ab:05:b1:25:53:84:c3:4b:e6:8a:de:1b:82:28:
c2:a1:6c:b8:fd:34:ee:35:e0:cd:cc:95:0b:d7:4a:
e5:d5:9e:49:9a:a7:f8:d2:4c:56:a8:3d:45:8a:3f:
09:ae:43:97:c6:6d:0d:06:cb:fe:23:93:7e:9a:88:
c2:2b:9a:42:76:2f:03:71:62:2f:08:5d:45:bf:a3:
d7:22:6e:31:ca:e3:6b:8a:37:5a:37:5c:b3:e9:48:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:4A:7D:B0:7E:83:4A:05:EC:3C:B1:BA:28:CD:96:D2:3F:D3:77
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S3hKfbB-g0oF7DyxuijNltI_03c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:cc:57:c1:77:9c:0e:85:f7:c7:f8:85:b1:6a:c9:95:1e:74:
25:28:5a:4e:81:d6:d1:38:49:da:63:be:ea:38:9b:43:dd:43:
1a:fa:35:94:2c:71:9a:b2:73:5e:c7:76:2d:a6:d4:00:7e:3b:
5f:80:f0:04:ac:23:b7:6a:9f:a4:d1:cf:51:75:a6:4c:c0:8f:
45:06:a2:89:fd:a1:5c:37:ec:80:e5:eb:7b:de:3a:d5:bc:b3:
15:e4:5f:19:e6:50:46:db:5c:94:13:26:98:fa:c7:bb:69:8d:
1a:6c:6b:47:99:33:f9:93:3a:39:54:a5:5e:0a:24:c4:bc:10:
89:30:bb:09:2c:54:79:82:4f:eb:56:d8:32:e8:6c:8f:54:68:
02:c4:5f:7f:44:e3:e7:4c:e2:99:a6:c2:9e:db:83:01:f0:af:
23:86:81:46:ae:7b:0e:c5:14:b0:f6:2d:b1:ab:eb:c1:d1:a5:
c1:4d:86:4e:ff:d4:d5:2e:ab:60:11:f1:38:24:6e:17:a1:43:
79:74:a1:51:cb:2b:18:5f:ee:bc:0f:4c:6d:a4:b9:dd:a7:ff:
9c:b6:0a:eb:d8:b3:7e:15:f0:5c:9b:cb:ed:20:a5:e4:9b:6d:
67:26:5f:87:84:1b:9c:e7:a0:43:cd:bb:2b:ea:63:f9:e3:7e:
63:34:52:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1xQE4z4DXRAv35AbzQS5e7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjAzMjMxNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjc4NGE3ZGIwN2U4MzRhMDVlYzNjYjFiYTI4Y2Q5NmQyM2ZkMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2iPlcAoWML4AzISltp0kxRX6OCU
KByjTYF0jHMbSwCgbVwPBZ+ZbPbN17x5Kru/uENBEMMBUnCTAyYOWgpeeXE/UGZL
NthykSEipzPK3lN3DiCaR3knNC/UfgQ4bllO88DMEAAVFL22ma4VuvqsyxS5CjPF
jJhlasO6hVrWU7PgFeiOr69p1JR89d/pZbyeuJZ7+LxqFlO8neEribQw7NjP8YFL
qwWxJVOEw0vmit4bgijCoWy4/TTuNeDNzJUL10rl1Z5Jmqf40kxWqD1Fij8JrkOX
xm0NBsv+I5N+mojCK5pCdi8DcWIvCF1Fv6PXIm4xyuNrijdaN1yz6UhIfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEt4Sn2wfoNKBew8sboozZbSP9N3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUzNoS2ZiQi1nMG9GN0R5eHVpak5sdElfMDNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACLMV8F3nA6F98f4hbFq
yZUedCUoWk6B1tE4Sdpjvuo4m0PdQxr6NZQscZqyc17Hdi2m1AB+O1+A8ASsI7dq
n6TRz1F1pkzAj0UGoon9oVw37IDl63veOtW8sxXkXxnmUEbbXJQTJpj6x7tpjRps
a0eZM/mTOjlUpV4KJMS8EIkwuwksVHmCT+tW2DLobI9UaALEX39E4+dM4pmmwp7b
gwHwryOGgUauew7FFLD2LbGr68HRpcFNhk7/1NUuq2AR8TgkbhehQ3l0oVHLKxhf
7rwPTG2kud2n/5y2CuvYs34V8Fyby+0gpeSbbWcmX4eEG5znoEPNuyvqY/njfmM0
Uho=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:03 2025 by rpki-client