Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NXVnbGKyO9DZVs-9jpWmEIPbPU.roa
File: 9NXVnbGKyO9DZVs-9jpWmEIPbPU.roa (raw, json)
Hash identifier: mT18sqt5cEeU/Stzo4MIXwcSt8g3LzS8aGeOrfdyIiI=
Subject key identifier: F4:D5:D5:9D:B1:8A:C8:EF:43:65:5B:3E:F6:3A:56:98:42:0F:6C:F5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB689971CBEB929BF47BCFC0761D1FCF0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NXVnbGKyO9DZVs-9jpWmEIPbPU.roa
Signing time: Sun 07 Apr 2024 03:10:54 +0000
ROA not before: Sun 07 Apr 2024 03:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:89:97:1c:be:b9:29:bf:47:bc:fc:07:61:d1:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 03:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4d5d59db18ac8ef43655b3ef63a5698420f6cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:49:ee:d9:4d:7b:5d:4c:bd:f6:b9:30:f7:
a3:76:d5:68:2e:b6:b9:05:1e:be:5f:d7:0b:3a:51:
c1:2f:67:5f:75:62:ff:09:89:b0:4e:2b:ab:ee:6d:
e9:f6:cf:e9:d0:cb:8f:aa:df:cd:cf:1b:6f:cc:6d:
53:9c:17:e0:7e:88:9d:9b:7e:c0:51:ac:b3:fd:a7:
1e:a6:73:c7:a7:6b:7f:94:e8:a2:11:0f:48:c1:20:
ad:ab:3e:00:84:f1:c9:14:a6:d8:f6:63:88:2e:9b:
c2:7b:3a:0f:7a:73:a2:e0:52:0c:d0:c2:6f:22:b6:
51:a1:52:78:f5:3b:27:9f:50:a7:77:c2:8c:e2:33:
1b:d4:29:e7:16:01:35:77:b0:a1:94:29:74:1e:ae:
a4:54:f6:44:ae:46:d2:59:4f:9b:28:75:32:e7:f7:
23:4b:7b:8a:89:70:a0:83:5e:27:cf:25:f4:74:7e:
b9:e8:cc:96:23:09:d0:57:66:7b:9f:60:6c:02:ca:
82:be:4b:32:74:c5:ce:3b:68:4a:6f:1d:b4:b7:47:
ec:d9:0d:63:7e:fa:d4:75:66:9b:c8:b9:06:c2:05:
59:fa:23:a6:da:66:79:2c:c8:1c:2b:49:73:f0:d8:
d6:c6:cc:ce:9b:50:a2:f4:eb:86:b9:bf:09:78:62:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:D5:9D:B1:8A:C8:EF:43:65:5B:3E:F6:3A:56:98:42:0F:6C:F5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NXVnbGKyO9DZVs-9jpWmEIPbPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:cd:34:60:e3:33:fe:5d:7c:e2:cb:2a:d0:81:96:ee:93:9b:
8d:2a:7f:df:1c:c5:10:90:ac:88:a4:ab:24:29:42:f6:d7:f9:
71:12:6c:d4:8b:7b:65:2f:4f:6f:ce:37:2c:c1:cc:cf:89:b7:
22:df:b0:65:c5:5b:72:fb:f6:8b:27:45:d2:ca:ca:54:63:38:
0e:98:61:05:c4:9d:1c:a2:3f:3b:72:c1:c8:f5:24:f3:9d:d0:
44:c1:fb:68:73:1d:c0:11:58:d1:4e:e4:dd:c6:d7:44:35:f9:
be:88:48:26:5a:7a:83:5d:a8:9d:2c:19:08:eb:f2:7f:8a:9b:
cd:11:d2:0c:44:72:de:a9:24:fa:b9:f4:a8:2e:27:cf:79:2b:
87:cc:03:7b:26:3e:bc:37:0e:67:31:4d:40:26:65:be:e2:43:
53:f7:26:fc:fc:fa:ba:e5:f1:81:c0:94:76:40:31:25:35:35:
1f:1d:b9:d5:48:f5:be:f1:15:41:9c:62:ac:72:de:70:ee:77:
ed:51:54:d4:e3:0b:2c:6b:df:79:be:88:c6:da:f9:85:2c:ae:
24:38:0a:9d:7c:75:90:a0:75:16:af:ac:f3:b9:ae:ef:22:e9:
9e:c9:93:09:d7:4d:96:6f:8f:c7:62:c5:98:3d:71:b7:98:d8:
c3:46:18:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY62iZccvrkpv0e8/Adh0fzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA3MDMxMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGQ1ZDU5ZGIxOGFjOGVmNDM2NTViM2VmNjNhNTY5ODQyMGY2Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi21J7tlNe11Mvfa5MPejdtVoLra5
BR6+X9cLOlHBL2dfdWL/CYmwTiur7m3p9s/p0MuPqt/NzxtvzG1TnBfgfoidm37A
Uayz/acepnPHp2t/lOiiEQ9IwSCtqz4AhPHJFKbY9mOILpvCezoPenOi4FIM0MJv
IrZRoVJ49Tsnn1Cnd8KM4jMb1CnnFgE1d7ChlCl0Hq6kVPZErkbSWU+bKHUy5/cj
S3uKiXCgg14nzyX0dH656MyWIwnQV2Z7n2BsAsqCvksydMXOO2hKbx20t0fs2Q1j
fvrUdWabyLkGwgVZ+iOm2mZ5LMgcK0lz8NjWxszOm1Ci9OuGub8JeGIUwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPTV1Z2xisjvQ2VbPvY6VphCD2z1MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOU5YVm5iR0t5TzlEWlZzLTlqcFdtRUlQYlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIXNNGDjM/5dfOLLKtCB
lu6Tm40qf98cxRCQrIikqyQpQvbX+XESbNSLe2UvT2/ONyzBzM+JtyLfsGXFW3L7
9osnRdLKylRjOA6YYQXEnRyiPztywcj1JPOd0ETB+2hzHcARWNFO5N3G10Q1+b6I
SCZaeoNdqJ0sGQjr8n+Km80R0gxEct6pJPq59KguJ895K4fMA3smPrw3DmcxTUAm
Zb7iQ1P3Jvz8+rrl8YHAlHZAMSU1NR8dudVI9b7xFUGcYqxy3nDud+1RVNTjCyxr
33m+iMba+YUsriQ4Cp18dZCgdRavrPO5ru8i6Z7JkwnXTZZvj8dixZg9cbeY2MNG
GJ0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:45 2025 by rpki-client