Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0CAaBUpwPCiQBw9u660-S5JQjEM.roa
File: 0CAaBUpwPCiQBw9u660-S5JQjEM.roa (raw, json)
Hash identifier: 4Dzsk3i+j7l7bI0GO6xXP1GpD1sN6pHowwHSkW+/EqA=
Subject key identifier: D0:20:1A:05:4A:70:3C:28:90:07:0F:6E:EB:AD:3E:4B:92:50:8C:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF7565A79D7F06C8F10E58CD85B99D8E4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0CAaBUpwPCiQBw9u660-S5JQjEM.roa
Signing time: Thu 11 Jan 2024 07:04:40 +0000
ROA not before: Thu 11 Jan 2024 07:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:f756:1731/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:56:5a:79:d7:f0:6c:8f:10:e5:8c:d8:5b:99:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 07:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0201a054a703c2890070f6eebad3e4b92508c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:55:d2:37:db:a9:fe:0c:8b:19:6d:04:da:
bf:f8:48:9e:11:dc:b4:f3:f5:b3:41:d6:2c:f6:f0:
59:32:e0:bd:74:c8:ae:50:e4:74:7f:e0:2b:c6:cd:
78:00:73:dd:4f:cc:ed:90:12:e6:22:5d:4b:17:79:
21:14:62:47:20:3c:bc:49:29:32:2c:92:b0:d7:96:
38:4c:ec:20:cc:2a:9b:8e:08:6d:8e:37:90:8b:ee:
04:82:f7:ba:2d:75:03:f1:b2:37:51:a0:8d:39:86:
f3:66:9f:67:c0:73:53:5f:3c:90:86:c6:94:79:97:
5f:33:13:ba:8a:53:b9:0d:c5:b1:66:ec:ff:fa:d6:
4b:2e:08:4a:ae:14:0e:af:29:57:f6:70:97:cb:69:
52:c3:91:8f:11:1d:18:f4:33:4f:80:38:2b:3f:bf:
d1:da:75:c7:8f:8d:0f:6c:5e:ec:28:f8:38:6f:e7:
9b:fc:2d:b3:61:6b:fa:f7:89:9e:13:7b:c4:ab:78:
ee:4d:50:aa:72:7e:c0:7f:e8:b3:f4:6c:50:a3:22:
d5:fb:fe:16:f0:b7:18:3e:29:07:e7:b4:b0:0a:2e:
3a:77:47:a4:2b:19:1d:cb:2f:a4:d3:b5:36:ae:34:
03:54:9f:33:47:82:b9:fb:f2:3b:dd:cf:69:9e:d2:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:1A:05:4A:70:3C:28:90:07:0F:6E:EB:AD:3E:4B:92:50:8C:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0CAaBUpwPCiQBw9u660-S5JQjEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:a7:51:32:6d:e7:46:b1:89:35:a2:14:bb:e5:fe:c7:de:70:
ff:6b:9c:70:00:1c:c1:ef:68:eb:44:38:21:f2:91:e4:27:f1:
1e:97:09:c4:ad:26:5b:63:42:7f:ca:85:9f:2f:27:1e:9b:48:
c4:54:13:20:5f:ae:21:53:35:64:4a:80:eb:7b:cd:80:bb:60:
52:3e:4a:f3:2a:b0:30:68:31:a5:72:40:a9:80:63:56:e1:d2:
30:b7:19:22:15:48:ab:db:e4:fc:b9:ca:7f:54:26:92:fd:7d:
a7:84:ba:79:d2:c2:2f:22:84:89:21:e5:53:04:65:fd:33:32:
d6:0e:48:6b:88:8d:fa:c0:d1:44:e1:bf:1a:c3:d6:a5:b1:2c:
86:31:48:47:bf:9b:86:13:81:cb:d5:0c:f1:f2:8a:f7:f6:dd:
60:70:92:6f:51:cc:b4:f0:e4:32:63:f8:9e:90:9c:89:67:b7:
05:ef:87:60:5c:73:60:d2:cf:00:ec:3a:64:f8:83:89:68:91:
49:e6:a0:5e:c6:e9:2f:e4:b7:bf:3f:25:bc:7c:d8:e9:2b:5a:
57:bf:2f:66:6b:3b:9a:83:57:1c:81:d2:ba:d8:00:75:d9:ae:
51:40:22:b1:d7:66:09:53:13:87:a4:41:1f:eb:ac:9e:0b:83:
27:a9:5a:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz3Vlp51/BsjxDljNhbmdjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTExMDcwNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDIwMWEwNTRhNzAzYzI4OTAwNzBmNmVlYmFkM2U0YjkyNTA4YzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+tV0jfbqf4MixltBNq/+EieEdy0
8/WzQdYs9vBZMuC9dMiuUOR0f+Arxs14AHPdT8ztkBLmIl1LF3khFGJHIDy8SSky
LJKw15Y4TOwgzCqbjghtjjeQi+4Egve6LXUD8bI3UaCNOYbzZp9nwHNTXzyQhsaU
eZdfMxO6ilO5DcWxZuz/+tZLLghKrhQOrylX9nCXy2lSw5GPER0Y9DNPgDgrP7/R
2nXHj40PbF7sKPg4b+eb/C2zYWv694meE3vEq3juTVCqcn7Af+iz9GxQoyLV+/4W
8LcYPikH57SwCi46d0ekKxkdyy+k07U2rjQDVJ8zR4K5+/I73c9pntIsuwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNAgGgVKcDwokAcPbuutPkuSUIxDMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMENBYUJVcHdQQ2lRQnc5dTY2MC1TNUpRakVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACqnUTJt50axiTWiFLvl
/sfecP9rnHAAHMHvaOtEOCHykeQn8R6XCcStJltjQn/KhZ8vJx6bSMRUEyBfriFT
NWRKgOt7zYC7YFI+SvMqsDBoMaVyQKmAY1bh0jC3GSIVSKvb5Py5yn9UJpL9faeE
unnSwi8ihIkh5VMEZf0zMtYOSGuIjfrA0UThvxrD1qWxLIYxSEe/m4YTgcvVDPHy
ivf23WBwkm9RzLTw5DJj+J6QnIlntwXvh2Bcc2DSzwDsOmT4g4lokUnmoF7G6S/k
t78/Jbx82OkrWle/L2ZrO5qDVxyB0rrYAHXZrlFAIrHXZglTE4ekQR/rrJ4Lgyep
WgI=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:45 2025 by rpki-client