Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NxxOiV3FGHAyVo-7bpbLzn-WcI.roa
File: 9NxxOiV3FGHAyVo-7bpbLzn-WcI.roa (raw, json)
Hash identifier: ctDsN+9X8l1RguvQWF2spCC5QySxX+aro7JGPr8A5oA=
Subject key identifier: F4:DC:71:3A:25:77:14:61:C0:C9:5A:3E:ED:BA:5B:2F:39:FE:59:C2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CCC6C4BBF3F6FC70427F6919C0B7A8F67
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NxxOiV3FGHAyVo-7bpbLzn-WcI.roa
Signing time: Tue 02 Jan 2024 23:04:58 +0000
ROA not before: Tue 02 Jan 2024 23:04:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:cc6b:847e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:6c:4b:bf:3f:6f:c7:04:27:f6:91:9c:0b:7a:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 2 23:04:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4dc713a25771461c0c95a3eedba5b2f39fe59c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:4e:5b:c9:c7:60:14:95:5a:de:b9:0d:b2:
ec:e4:17:ac:3c:c7:e4:b0:56:f9:5b:bc:46:a9:54:
f7:2e:36:21:3f:89:4e:44:af:81:56:27:78:19:57:
4f:b8:e9:78:15:0d:02:a5:61:b4:41:0d:1a:55:a5:
d8:ae:8b:d2:68:5f:05:28:8a:6f:f8:29:7b:3b:74:
c7:e8:7a:bc:bc:b2:fd:c9:77:57:34:8a:cc:ee:20:
52:a9:3c:cd:1c:01:41:d0:f8:02:dd:89:f2:0a:9b:
76:2e:ca:5c:e0:2d:13:af:93:ec:cb:e7:3f:48:95:
c7:df:ad:fe:b4:1c:4d:90:03:af:ef:18:42:7f:f7:
69:81:67:8c:41:3e:1a:1d:fa:36:6a:9f:38:93:f1:
3e:0d:68:73:ab:c9:ac:14:94:a4:fc:76:2d:ab:1d:
1c:ab:75:d4:7c:48:1e:ba:2a:fb:50:6d:52:56:4f:
d8:fd:f9:ff:c6:42:80:0f:b2:d6:2d:33:53:fe:ba:
5e:bf:83:ff:cd:2b:f1:19:a9:2f:5a:72:38:b6:ee:
0a:22:f7:66:0e:fb:50:a0:1e:dd:80:bd:3e:54:9c:
a2:53:ce:ae:0d:90:e9:5e:db:04:1b:33:92:05:43:
54:fc:7e:2c:d0:37:54:84:98:04:30:bb:40:02:30:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:71:3A:25:77:14:61:C0:C9:5A:3E:ED:BA:5B:2F:39:FE:59:C2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9NxxOiV3FGHAyVo-7bpbLzn-WcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:dd:85:5b:53:52:31:27:6e:32:17:65:89:12:60:09:06:71:
0c:7c:c3:0b:52:1b:13:04:cb:5f:5f:b8:01:2d:a1:33:42:c5:
29:24:d6:ff:8b:0e:03:a5:4e:b1:a2:fe:8e:4c:fb:43:d0:e9:
f7:b5:42:05:8a:25:4e:7f:af:0b:67:4d:d7:a5:91:bc:da:4b:
12:c3:14:d2:5f:3f:79:0f:d0:d0:b9:c7:8e:cc:2d:87:11:92:
1c:3f:65:65:eb:ac:69:6b:9c:c9:30:6d:f2:77:e0:39:ac:fe:
a7:4c:0d:a3:5c:35:20:1d:4c:03:df:41:da:83:57:fb:60:40:
9b:30:8c:3d:ea:4f:64:e9:49:08:6e:70:6a:15:dd:2d:13:8f:
ee:2c:1d:50:35:da:25:5d:87:70:49:04:dc:58:cf:f5:2b:b4:
fd:f6:99:84:67:15:ba:40:81:21:4c:cf:8c:9a:f2:55:08:c5:
ba:95:9f:a6:e2:16:cc:5b:bc:0a:95:69:db:50:79:d2:c1:91:
75:63:36:fe:01:13:2e:fc:68:54:b3:85:c8:e8:07:77:c4:cc:
0b:92:74:de:28:8b:f6:a8:a6:1b:a1:24:58:34:8a:3c:cd:14:
98:3a:40:ad:58:6c:79:62:d8:0f:18:58:53:a7:6c:ae:63:af:
7f:75:7a:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzMbEu/P2/HBCf2kZwLeo9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAyMjMwNDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGRjNzEzYTI1NzcxNDYxYzBjOTVhM2VlZGJhNWIyZjM5ZmU1OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/BOW8nHYBSVWt65DbLs5BesPMfk
sFb5W7xGqVT3LjYhP4lORK+BVid4GVdPuOl4FQ0CpWG0QQ0aVaXYrovSaF8FKIpv
+Cl7O3TH6Hq8vLL9yXdXNIrM7iBSqTzNHAFB0PgC3YnyCpt2Lspc4C0Tr5Psy+c/
SJXH363+tBxNkAOv7xhCf/dpgWeMQT4aHfo2ap84k/E+DWhzq8msFJSk/HYtqx0c
q3XUfEgeuir7UG1SVk/Y/fn/xkKAD7LWLTNT/rpev4P/zSvxGakvWnI4tu4KIvdm
DvtQoB7dgL0+VJyiU86uDZDpXtsEGzOSBUNU/H4s0DdUhJgEMLtAAjA68wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPTccToldxRhwMlaPu26Wy85/lnCMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOU54eE9pVjNGR0hBeVZvLTdicGJMem4tV2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD3dhVtTUjEnbjIXZYkS
YAkGcQx8wwtSGxMEy19fuAEtoTNCxSkk1v+LDgOlTrGi/o5M+0PQ6fe1QgWKJU5/
rwtnTdelkbzaSxLDFNJfP3kP0NC5x47MLYcRkhw/ZWXrrGlrnMkwbfJ34Dms/qdM
DaNcNSAdTAPfQdqDV/tgQJswjD3qT2TpSQhucGoV3S0Tj+4sHVA12iVdh3BJBNxY
z/UrtP32mYRnFbpAgSFMz4ya8lUIxbqVn6biFsxbvAqVadtQedLBkXVjNv4BEy78
aFSzhcjoB3fEzAuSdN4oi/aophuhJFg0ijzNFJg6QK1YbHli2A8YWFOnbK5jr391
emY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:29:22 2025 by rpki-client