Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Lrwl2AhDU875UOPedeQmaw7Tmg.roa
File: 8Lrwl2AhDU875UOPedeQmaw7Tmg.roa (raw, json)
Hash identifier: 17qmp9VZvsclKHHY8P6nuQ6g3GMbAG/fu9oIunHr9tU=
Subject key identifier: F0:BA:F0:97:60:21:0D:4F:3B:E5:43:8F:79:D7:90:99:AC:3B:4E:68
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E208F5D45B248D828307579A3776D04AA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Lrwl2AhDU875UOPedeQmaw7Tmg.roa
Signing time: Sat 09 Mar 2024 00:14:10 +0000
ROA not before: Sat 09 Mar 2024 00:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:20:8f:5d:45:b2:48:d8:28:30:75:79:a3:77:6d:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 00:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0baf09760210d4f3be5438f79d79099ac3b4e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:b3:67:9f:6f:69:10:b7:f0:7c:97:8c:7a:
58:7a:46:99:95:c1:d5:f6:9e:52:8b:32:60:aa:84:
9b:0b:f0:34:85:fb:ca:c7:f0:9c:fe:be:f0:a3:38:
32:3e:c8:83:1c:06:2f:cb:cf:cd:1b:1b:2b:a4:8b:
ac:f5:72:fc:19:b0:ac:c6:92:74:ba:00:bb:fe:3c:
a3:2b:93:af:c1:37:e9:6a:1b:78:35:b2:fe:f9:88:
f6:02:fd:62:2b:ab:99:7e:65:1d:b4:a4:52:4d:5b:
4a:07:9a:12:3f:a8:cd:22:68:4d:6e:ba:4b:5f:36:
7a:d3:60:4f:12:8c:48:fd:a1:89:9b:06:97:8a:4a:
cb:9f:d0:09:ac:22:f3:e1:5e:d1:c7:7c:63:6b:ea:
13:f0:c9:77:e7:ba:f5:74:a2:cb:f9:d7:05:2d:de:
b3:5e:d6:f9:8c:2c:b8:1d:f9:6b:90:d7:67:e4:02:
88:19:85:55:18:8a:4a:55:2c:93:91:ed:ef:89:a5:
6a:f9:54:fe:a5:d4:cb:80:af:a7:2e:eb:9a:93:e4:
ca:d8:8a:fa:a5:20:32:f8:97:24:51:e7:e4:0f:cc:
3e:8a:2a:da:7c:9f:0e:91:ee:fd:e3:88:78:33:6a:
02:4f:5e:2c:ee:50:2e:3f:9b:80:f7:82:04:f8:eb:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:F0:97:60:21:0D:4F:3B:E5:43:8F:79:D7:90:99:AC:3B:4E:68
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8Lrwl2AhDU875UOPedeQmaw7Tmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:07:33:8e:64:22:65:63:b1:89:83:a8:d7:4f:1b:d7:04:96:
9c:74:4c:6a:21:5e:2b:a4:86:66:34:82:37:e0:47:56:a4:fd:
94:57:de:ba:3b:c1:d3:cb:d7:b2:45:31:c1:d8:a9:52:ce:27:
92:45:7c:9b:6d:64:3b:c5:b2:d9:26:3f:50:aa:74:b6:c5:ee:
55:16:64:ee:fb:56:8a:1d:80:24:1d:31:3d:1e:e8:1c:b9:cf:
aa:c4:2c:12:81:83:1f:e6:38:c9:61:47:08:ba:db:21:ae:7c:
30:5d:a3:bf:b6:64:77:03:f1:3e:aa:18:89:b1:31:da:5b:b8:
83:28:5e:73:ea:7c:ad:84:df:f5:99:f0:19:66:c6:2e:08:16:
0e:8f:d8:24:e6:47:b2:b9:83:5e:50:1a:d6:42:e8:20:f1:5d:
d5:67:20:44:fa:da:f0:1f:ed:73:b4:65:f1:c2:06:cb:60:d6:
d7:6a:25:df:a8:27:49:8d:2b:ec:40:a0:c1:17:41:90:c6:ef:
29:aa:c8:83:72:14:43:c7:79:95:09:c3:45:90:c7:a7:fd:08:
28:9f:88:02:5f:36:05:8f:ce:79:2c:4e:3a:70:86:d5:e1:a0:
01:60:b6:8d:21:d0:03:bb:12:6b:e0:36:13:c4:58:f8:02:e3:
4b:55:f5:0d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4gj11FskjYKDB1eaN3bQSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA5MDAxNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGJhZjA5NzYwMjEwZDRmM2JlNTQzOGY3OWQ3OTA5OWFjM2I0ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQizZ59vaRC38HyXjHpYekaZlcHV
9p5SizJgqoSbC/A0hfvKx/Cc/r7wozgyPsiDHAYvy8/NGxsrpIus9XL8GbCsxpJ0
ugC7/jyjK5OvwTfpaht4NbL++Yj2Av1iK6uZfmUdtKRSTVtKB5oSP6jNImhNbrpL
XzZ602BPEoxI/aGJmwaXikrLn9AJrCLz4V7Rx3xja+oT8Ml357r1dKLL+dcFLd6z
Xtb5jCy4HflrkNdn5AKIGYVVGIpKVSyTke3viaVq+VT+pdTLgK+nLuuak+TK2Ir6
pSAy+JckUefkD8w+iirafJ8Oke7944h4M2oCT14s7lAuP5uA94IE+Os/4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPC68JdgIQ1PO+VDj3nXkJmsO05oMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOExyd2wyQWhEVTg3NVVPUGVkZVFtYXc3VG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGsHM45kImVjsYmDqNdP
G9cElpx0TGohXiukhmY0gjfgR1ak/ZRX3ro7wdPL17JFMcHYqVLOJ5JFfJttZDvF
stkmP1CqdLbF7lUWZO77VoodgCQdMT0e6By5z6rELBKBgx/mOMlhRwi62yGufDBd
o7+2ZHcD8T6qGImxMdpbuIMoXnPqfK2E3/WZ8Blmxi4IFg6P2CTmR7K5g15QGtZC
6CDxXdVnIET62vAf7XO0ZfHCBstg1tdqJd+oJ0mNK+xAoMEXQZDG7ymqyINyFEPH
eZUJw0WQx6f9CCifiAJfNgWPznksTjpwhtXhoAFgto0h0AO7EmvgNhPEWPgC40tV
9Q0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:11 2025 by rpki-client