Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4qiNrqeLdJywNSIugiyI01Zi1ec.roa
File: 4qiNrqeLdJywNSIugiyI01Zi1ec.roa (raw, json)
Hash identifier: nraF3ft9EWJwKjCKeUCt5059ijuA5yRfLvEfqxqizmA=
Subject key identifier: E2:A8:8D:AE:A7:8B:74:9C:B0:35:22:2E:82:2C:88:D3:56:62:D5:E7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD5B12EF904781020EFF80075BA56F1D6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4qiNrqeLdJywNSIugiyI01Zi1ec.roa
Signing time: Thu 04 Jan 2024 18:16:48 +0000
ROA not before: Thu 04 Jan 2024 18:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:b1:2e:f9:04:78:10:20:ef:f8:00:75:ba:56:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 18:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a88daea78b749cb035222e822c88d35662d5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:77:55:17:87:5f:5c:ea:51:7d:07:74:03:
02:d7:da:75:b1:21:c8:ad:2e:47:b5:03:89:19:62:
c4:8f:52:3d:57:98:59:8b:9d:c4:b3:5e:7d:fd:a2:
fc:cf:8d:73:f0:02:56:f8:9f:e4:a3:6f:51:ab:24:
8e:92:26:31:f6:a5:33:ac:ee:d9:5b:cb:17:95:a4:
18:3a:ec:4d:10:89:d0:d8:3a:35:8c:2c:90:26:fd:
4d:e4:60:e5:90:2f:00:cd:5c:00:c8:7c:8d:81:6b:
8b:8f:44:a0:44:87:e8:f5:da:ef:47:6c:d3:c9:e0:
f1:ee:f2:76:12:8e:68:29:55:20:20:d8:50:78:95:
92:49:94:4e:cf:29:0a:1e:66:30:c5:a6:ec:b8:3e:
e4:fa:92:89:93:be:ac:48:7a:f9:78:8a:b9:8d:20:
e3:0b:0f:42:15:4b:c1:3f:3e:55:6a:9f:76:b9:5a:
14:1d:a1:5d:98:f2:2f:1e:0e:8e:d4:06:06:27:ec:
02:52:37:c1:1d:c7:2e:8b:5f:c2:f4:f5:52:53:ad:
4f:1a:6c:d7:ac:ec:10:e2:a7:76:60:a5:5b:62:6d:
b3:7f:a3:b0:3d:fe:4e:b6:99:fa:ff:58:00:a1:62:
fe:b1:3f:bc:c4:c1:ba:64:06:41:1f:df:b3:88:be:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:8D:AE:A7:8B:74:9C:B0:35:22:2E:82:2C:88:D3:56:62:D5:E7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4qiNrqeLdJywNSIugiyI01Zi1ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:db:80:1f:67:b9:de:66:ed:c7:87:b2:41:5e:0e:f6:35:2d:
49:09:38:ee:e3:7a:f0:08:b4:69:cb:cc:74:99:13:27:a2:cc:
cd:a0:77:ec:1e:cf:0e:94:04:dd:39:67:a8:86:f8:02:0d:bf:
68:da:94:cf:ed:4d:cc:4e:38:4c:5f:40:51:73:3d:9a:2d:9c:
38:28:be:0a:01:6a:42:43:0e:ca:e3:d2:9f:38:e8:39:04:5d:
30:f7:31:6c:2b:50:cb:08:63:f2:4a:81:15:70:3e:65:e5:d0:
ee:15:f5:67:3a:9b:09:95:92:c0:16:bd:20:28:ee:e2:e1:23:
3b:fc:1b:70:b9:8e:ad:f6:e2:2d:10:99:77:e0:e5:9c:ed:40:
43:d3:a2:4e:29:f1:f2:96:f9:76:d8:52:cf:88:0f:4f:10:21:
c4:90:80:8e:30:e6:c4:ef:3e:7c:1b:a7:ca:d9:e5:42:ce:de:
9d:17:4c:d4:90:16:4f:23:88:7b:c1:32:ca:b7:e1:4d:c0:4b:
5e:2c:00:c5:88:a1:fb:3b:8a:2e:5d:62:c9:8d:9c:4c:d2:65:
a6:10:88:7d:52:c5:fc:dc:87:de:86:1b:27:6b:de:84:35:b4:
83:bc:8f:87:2b:d9:51:69:94:9b:f9:2c:2f:b4:5d:07:21:ae:
4d:3e:73:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzVsS75BHgQIO/4AHW6VvHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA0MTgxNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmE4OGRhZWE3OGI3NDljYjAzNTIyMmU4MjJjODhkMzU2NjJkNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT13VReHX1zqUX0HdAMC19p1sSHI
rS5HtQOJGWLEj1I9V5hZi53Es159/aL8z41z8AJW+J/ko29RqySOkiYx9qUzrO7Z
W8sXlaQYOuxNEInQ2Do1jCyQJv1N5GDlkC8AzVwAyHyNgWuLj0SgRIfo9drvR2zT
yeDx7vJ2Eo5oKVUgINhQeJWSSZROzykKHmYwxabsuD7k+pKJk76sSHr5eIq5jSDj
Cw9CFUvBPz5Vap92uVoUHaFdmPIvHg6O1AYGJ+wCUjfBHccui1/C9PVSU61PGmzX
rOwQ4qd2YKVbYm2zf6OwPf5Otpn6/1gAoWL+sT+8xMG6ZAZBH9+ziL4b/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOKoja6ni3ScsDUiLoIsiNNWYtXnMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNHFpTnJxZUxkSnl3TlNJdWdpeUkwMVppMWVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFfbgB9nud5m7ceHskFe
DvY1LUkJOO7jevAItGnLzHSZEyeizM2gd+wezw6UBN05Z6iG+AINv2jalM/tTcxO
OExfQFFzPZotnDgovgoBakJDDsrj0p846DkEXTD3MWwrUMsIY/JKgRVwPmXl0O4V
9Wc6mwmVksAWvSAo7uLhIzv8G3C5jq324i0QmXfg5ZztQEPTok4p8fKW+XbYUs+I
D08QIcSQgI4w5sTvPnwbp8rZ5ULO3p0XTNSQFk8jiHvBMsq34U3AS14sAMWIofs7
ii5dYsmNnEzSZaYQiH1Sxfzch96GGydr3oQ1tIO8j4cr2VFplJv5LC+0XQchrk0+
c3E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:40 2025 by rpki-client