Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8GtnZpe4o8m2RwmZSPei15SsqS8.roa
File: 8GtnZpe4o8m2RwmZSPei15SsqS8.roa (raw, json)
Hash identifier: TIdz+Ds06Fb3oARUi9Nfpb4kW8GDxp88lGTmJP0MIao=
Subject key identifier: F0:6B:67:66:97:B8:A3:C9:B6:47:09:99:48:F7:A2:D7:94:AC:A9:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D660F9F8BF0C30388CBC5FD472E50925F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8GtnZpe4o8m2RwmZSPei15SsqS8.roa
Signing time: Thu 01 Feb 2024 19:05:16 +0000
ROA not before: Thu 01 Feb 2024 19:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:660e:b739/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:0f:9f:8b:f0:c3:03:88:cb:c5:fd:47:2e:50:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 19:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f06b676697b8a3c9b647099948f7a2d794aca92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:67:9f:b9:14:ac:67:e9:a9:2d:da:b9:d7:
38:74:ba:6d:ab:73:90:e8:50:7d:3f:9b:51:02:2e:
f2:3c:59:16:bc:1a:50:cb:61:ae:8c:1d:68:bd:48:
7b:3b:93:e2:c3:10:1c:dc:80:c5:e5:b8:29:0e:36:
81:81:0a:cb:b4:12:0e:a4:b1:e1:71:f9:ff:a1:bf:
fd:40:db:87:70:2c:81:aa:32:0d:e8:5c:5f:e8:1b:
90:de:aa:7f:9a:3e:28:79:67:20:9d:39:c1:54:12:
02:ec:5d:4d:7a:ac:3b:0d:ab:53:0b:45:1a:1a:99:
6a:67:96:01:25:fe:72:d2:9e:2f:b6:6d:be:a5:ab:
c1:09:b6:d4:a2:01:41:da:cd:37:72:e4:37:cf:6f:
8c:7d:bd:63:96:7b:63:02:33:12:c9:d3:2d:54:d8:
46:6e:1e:65:cb:3a:c3:11:53:7a:ad:22:b2:b8:93:
6a:07:26:f6:5a:2e:ee:63:91:16:67:17:38:32:09:
9d:61:6c:03:30:ca:bc:a0:70:0c:34:8f:00:7b:e2:
e3:2a:9f:16:81:50:0f:37:1b:bc:5d:0b:a8:0b:b7:
40:78:0d:77:53:cd:49:4f:92:7a:27:ff:9c:95:f0:
4b:d1:30:2b:f5:7b:f9:40:b7:4f:0e:56:51:99:ec:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:67:66:97:B8:A3:C9:B6:47:09:99:48:F7:A2:D7:94:AC:A9:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8GtnZpe4o8m2RwmZSPei15SsqS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:02:b8:fe:41:fd:2b:60:5b:f2:ad:d3:2b:c9:e3:3a:b2:70:
b9:b5:b7:c8:4e:a6:88:0b:2f:6c:bc:f7:f4:48:6e:70:2e:51:
eb:89:ea:1d:05:cf:a5:09:84:1b:2b:30:b3:6e:5b:e5:23:11:
a7:52:49:59:75:cb:69:3b:ad:4a:40:74:7e:e6:a5:dd:83:4e:
81:52:77:d0:e5:bc:ca:18:5e:37:91:dd:e0:7b:89:e2:b7:0b:
9a:ca:e9:ee:68:d1:38:e9:1e:8e:8a:23:e6:e7:f0:33:bc:78:
a6:dc:11:1f:0a:0d:38:29:8b:ef:6b:3b:c4:c0:57:77:8d:7b:
25:b8:88:ac:91:79:74:28:94:7b:bd:25:22:8c:3f:ef:af:da:
33:56:c1:3e:4a:0a:9d:55:ff:99:c7:59:3a:e5:5f:44:b7:fb:
eb:ae:58:01:73:82:32:0f:13:9d:d7:b6:08:7e:65:7f:81:dd:
d6:74:32:c0:e5:7d:07:c7:53:3a:b4:25:79:cd:c0:ba:25:8a:
81:12:eb:06:c2:75:6f:54:72:8f:2b:33:42:e4:8b:1a:94:d0:
84:f1:b6:60:5b:29:60:c6:7e:0b:3f:b4:62:f3:23:93:e7:1a:
75:da:db:54:27:ac:c5:f1:1a:53:c5:b3:c4:ef:2a:a3:93:17:
ae:25:e1:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1mD5+L8MMDiMvF/UcuUJJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjAxMTkwNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDZiNjc2Njk3YjhhM2M5YjY0NzA5OTk0OGY3YTJkNzk0YWNhOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIFnn7kUrGfpqS3audc4dLptq3OQ
6FB9P5tRAi7yPFkWvBpQy2GujB1ovUh7O5PiwxAc3IDF5bgpDjaBgQrLtBIOpLHh
cfn/ob/9QNuHcCyBqjIN6Fxf6BuQ3qp/mj4oeWcgnTnBVBIC7F1Neqw7DatTC0Ua
GplqZ5YBJf5y0p4vtm2+pavBCbbUogFB2s03cuQ3z2+Mfb1jlntjAjMSydMtVNhG
bh5lyzrDEVN6rSKyuJNqByb2Wi7uY5EWZxc4MgmdYWwDMMq8oHAMNI8Ae+LjKp8W
gVAPNxu8XQuoC7dAeA13U81JT5J6J/+clfBL0TAr9Xv5QLdPDlZRmewsPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPBrZ2aXuKPJtkcJmUj3oteUrKkvMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOEd0blpwZTRvOG0yUndtWlNQZWkxNVNzcVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADACuP5B/StgW/Kt0yvJ
4zqycLm1t8hOpogLL2y89/RIbnAuUeuJ6h0Fz6UJhBsrMLNuW+UjEadSSVl1y2k7
rUpAdH7mpd2DToFSd9DlvMoYXjeR3eB7ieK3C5rK6e5o0TjpHo6KI+bn8DO8eKbc
ER8KDTgpi+9rO8TAV3eNeyW4iKyReXQolHu9JSKMP++v2jNWwT5KCp1V/5nHWTrl
X0S3++uuWAFzgjIPE53Xtgh+ZX+B3dZ0MsDlfQfHUzq0JXnNwLolioES6wbCdW9U
co8rM0LkixqU0ITxtmBbKWDGfgs/tGLzI5PnGnXa21QnrMXxGlPFs8TvKqOTF64l
4Q4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:17 2025 by rpki-client