Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nWI7x7edf01KtlmSVvzVR-JXkY.roa
File: 0nWI7x7edf01KtlmSVvzVR-JXkY.roa (raw, json)
Hash identifier: wOM7FNOUhkDIcXfzUnNQT5cxfv5Jghp6vRAS/S3b8B8=
Subject key identifier: D2:75:88:EF:1E:DE:75:FD:35:2A:D9:66:49:5B:F3:55:1F:89:5E:46
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ECAB731FD99DD01D5B28DA8E8C7CE6BFF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nWI7x7edf01KtlmSVvzVR-JXkY.roa
Signing time: Thu 11 Apr 2024 01:13:07 +0000
ROA not before: Thu 11 Apr 2024 01:13:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ca:b7:31:fd:99:dd:01:d5:b2:8d:a8:e8:c7:ce:6b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 11 01:13:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27588ef1ede75fd352ad966495bf3551f895e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:f5:cd:fb:31:46:1c:bf:c0:cb:3a:cc:ca:
50:49:71:66:fa:4d:8e:9b:9b:3a:19:33:26:5e:82:
8c:ba:cc:34:e5:1a:ae:01:7c:91:ea:2e:73:ae:7e:
f1:7a:ed:89:40:8f:04:0f:b5:4b:db:e2:8b:c6:af:
31:c3:70:ea:07:16:45:e6:ad:26:01:85:2d:43:8a:
50:a5:3e:d3:75:0d:f9:cb:de:a6:1d:fa:c6:c9:09:
88:54:ab:5e:d9:2d:08:95:97:ed:12:d5:95:3e:43:
23:f8:2e:77:10:68:d3:43:77:85:6f:dc:ea:23:81:
26:55:9f:10:66:88:6b:07:be:a1:b3:f6:0a:c8:06:
c9:82:c3:4f:3a:94:59:ea:a0:18:f7:56:41:4c:3d:
4d:96:92:90:33:5e:e4:34:b0:d5:f1:4f:50:48:fc:
b9:42:13:ba:48:a1:bd:9c:dd:9a:62:06:ec:b0:79:
79:3d:b9:c7:20:ca:8d:c2:bc:f8:da:95:96:f8:d7:
60:61:db:0a:f5:76:82:95:07:e3:3a:7a:3c:74:53:
3e:d4:76:0d:f8:dc:89:c0:05:f9:ae:f3:05:bf:d0:
4c:c5:9c:ba:23:f3:fb:58:d9:fe:92:f8:06:94:59:
22:57:43:da:43:dd:36:43:1c:bc:89:8c:5e:5e:9b:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:88:EF:1E:DE:75:FD:35:2A:D9:66:49:5B:F3:55:1F:89:5E:46
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nWI7x7edf01KtlmSVvzVR-JXkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:cd:80:eb:0e:dc:a9:ee:74:9a:8c:e3:a0:83:f0:aa:92:b5:
27:6f:da:6d:4d:7f:b5:6c:05:0a:c1:0a:bf:37:21:58:46:b5:
aa:5b:9b:4d:3e:7a:d1:e8:b1:b9:21:a3:e7:43:05:45:3d:93:
8c:2b:35:b7:3d:c5:2f:ce:f2:bd:3a:42:a9:8f:f0:f7:2a:09:
14:0c:2a:ac:5c:cb:c0:99:79:1b:77:0f:40:91:05:be:63:93:
0d:01:4c:77:45:5e:be:8d:7f:67:80:7e:54:b9:84:b3:b8:f0:
ea:c8:52:06:53:91:26:00:3f:61:f6:23:0a:c5:aa:5b:ec:98:
3c:50:1f:97:12:74:ad:9b:17:06:fe:e0:38:92:f2:d5:0e:c6:
e2:5e:a8:6b:f1:66:6d:7e:fb:9f:cd:d6:fd:89:98:2b:47:50:
c9:de:e7:d4:c9:3e:20:a1:39:6d:21:a5:07:a0:47:d9:bd:89:
99:c8:f4:77:5f:1c:d0:6f:16:e7:77:5d:b4:8b:b0:50:86:8b:
ee:7d:79:d9:11:fb:e8:de:12:11:4f:f2:5c:53:b1:4e:b4:2c:
84:a9:82:18:54:cf:df:b2:57:1f:16:30:55:b3:25:22:1f:c9:
fd:e9:29:11:22:c1:a0:be:76:0e:c3:a1:a3:21:b5:43:47:88:
9f:cb:7a:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7KtzH9md0B1bKNqOjHzmv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDExMDExMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjc1ODhlZjFlZGU3NWZkMzUyYWQ5NjY0OTViZjM1NTFmODk1ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/1zfsxRhy/wMs6zMpQSXFm+k2O
m5s6GTMmXoKMusw05RquAXyR6i5zrn7xeu2JQI8ED7VL2+KLxq8xw3DqBxZF5q0m
AYUtQ4pQpT7TdQ35y96mHfrGyQmIVKte2S0IlZftEtWVPkMj+C53EGjTQ3eFb9zq
I4EmVZ8QZohrB76hs/YKyAbJgsNPOpRZ6qAY91ZBTD1NlpKQM17kNLDV8U9QSPy5
QhO6SKG9nN2aYgbssHl5PbnHIMqNwrz42pWW+NdgYdsK9XaClQfjOno8dFM+1HYN
+NyJwAX5rvMFv9BMxZy6I/P7WNn+kvgGlFkiV0PaQ902Qxy8iYxeXpuJYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNJ1iO8e3nX9NSrZZklb81UfiV5GMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMG5XSTd4N2VkZjAxS3RsbVNWdnpWUi1KWGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE/NgOsO3KnudJqM46CD
8KqStSdv2m1Nf7VsBQrBCr83IVhGtapbm00+etHosbkho+dDBUU9k4wrNbc9xS/O
8r06QqmP8PcqCRQMKqxcy8CZeRt3D0CRBb5jkw0BTHdFXr6Nf2eAflS5hLO48OrI
UgZTkSYAP2H2IwrFqlvsmDxQH5cSdK2bFwb+4DiS8tUOxuJeqGvxZm1++5/N1v2J
mCtHUMne59TJPiChOW0hpQegR9m9iZnI9HdfHNBvFud3XbSLsFCGi+59edkR++je
EhFP8lxTsU60LISpghhUz9+yVx8WMFWzJSIfyf3pKREiwaC+dg7DoaMhtUNHiJ/L
eoQ=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:52 2025 by rpki-client