Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4OD0T1aElMLHXAft9Dar2p8BZU.roa
File: A4OD0T1aElMLHXAft9Dar2p8BZU.roa (raw, json)
Hash identifier: 6DISii9pN9YMy8eulzVz+/qA1Xb2tHGmZbMBwRZpxic=
Subject key identifier: 03:83:83:D1:3D:5A:12:53:0B:1D:70:1F:B7:D0:DA:AF:6A:7C:05:95
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C91D7F484DE4E77B947B66B0C8CECD6BC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4OD0T1aElMLHXAft9Dar2p8BZU.roa
Signing time: Fri 22 Dec 2023 14:04:58 +0000
ROA not before: Fri 22 Dec 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:91d7:73d6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:d7:f4:84:de:4e:77:b9:47:b6:6b:0c:8c:ec:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038383d13d5a12530b1d701fb7d0daaf6a7c0595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:e5:3f:63:43:f7:68:fd:71:30:46:50:40:
fe:64:90:ab:ca:b7:a3:e1:88:09:86:81:5e:21:fd:
7b:1f:00:ae:89:7e:f3:52:06:ee:f2:fb:35:1b:b0:
fb:5c:de:aa:90:36:e6:30:05:92:ab:4c:59:0e:a7:
fc:62:e3:f0:48:25:c2:9b:66:3e:9d:1d:4c:61:90:
54:e5:90:c9:22:d9:29:6c:51:47:11:f1:34:56:d7:
c1:1c:76:2f:6b:fa:6c:e0:d4:76:1a:e2:0a:76:9e:
72:21:c8:73:df:b4:02:a8:0f:ae:75:18:5e:5a:ee:
80:6a:3c:5b:d4:59:2d:52:f0:f8:cb:1e:63:d1:90:
62:a5:fa:86:7c:41:55:62:c7:45:e8:2c:5b:bc:30:
ad:6f:2c:2e:be:77:24:e4:ed:6a:46:f5:9e:bc:a3:
47:3f:72:0b:ea:07:d1:7c:7f:74:c5:69:f8:e3:73:
5d:44:3a:33:b7:1e:97:53:68:a4:8e:09:ac:a3:ce:
67:53:c9:59:7a:40:f2:fa:dc:63:a9:4b:af:97:6c:
ee:9c:45:d0:49:3c:da:10:65:b8:9b:2b:a2:42:ba:
d5:0f:d0:10:0c:e7:c4:f2:31:ed:ad:56:df:d3:ca:
39:e1:48:53:f1:c2:37:72:10:2b:84:16:c7:0b:cc:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:83:D1:3D:5A:12:53:0B:1D:70:1F:B7:D0:DA:AF:6A:7C:05:95
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4OD0T1aElMLHXAft9Dar2p8BZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:08:b5:aa:6d:04:a3:04:11:de:17:38:64:a7:f0:7e:f3:6a:
a4:58:ef:50:af:6f:0d:84:c0:c7:ac:52:97:8f:25:9c:0f:8e:
77:e0:e6:91:71:e7:32:ab:29:14:46:84:c6:91:d2:25:67:33:
bb:be:37:85:84:03:bd:ac:b0:de:0f:86:28:e3:7f:7b:77:e5:
47:cc:f5:7a:1e:04:d1:ac:a1:89:7d:21:6f:65:fb:df:a6:2f:
26:ef:6e:ad:50:ea:d8:42:9e:56:dc:a5:1e:f0:2f:3a:91:dd:
db:c8:91:2a:cf:0f:ea:53:99:ed:5e:5e:f0:19:ec:47:77:41:
f0:fb:77:96:04:7b:3c:11:a8:2c:98:a3:db:5c:a2:07:e9:12:
eb:94:39:e6:a6:e6:67:9e:31:67:8c:e9:bf:94:5f:02:22:6c:
e3:40:4b:33:b6:12:46:f5:d0:db:1c:05:32:4e:cd:62:b7:20:
13:1d:2b:38:61:1f:49:ff:c8:96:e4:fc:84:3f:a4:88:3c:ce:
b9:7c:0d:5f:00:63:97:0d:12:b9:8d:be:56:17:07:91:d4:01:
57:fd:aa:bb:fd:d8:88:76:ee:e5:33:ec:5e:e5:20:4f:fd:ad:
83:ad:c2:ed:27:80:87:70:99:8b:d1:37:62:f6:ad:2a:a3:8b:
14:c6:32:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyR1/SE3k53uUe2awyM7Na8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIyMTQwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzgzODNkMTNkNWExMjUzMGIxZDcwMWZiN2QwZGFhZjZhN2MwNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvlP2ND92j9cTBGUED+ZJCryrej
4YgJhoFeIf17HwCuiX7zUgbu8vs1G7D7XN6qkDbmMAWSq0xZDqf8YuPwSCXCm2Y+
nR1MYZBU5ZDJItkpbFFHEfE0VtfBHHYva/ps4NR2GuIKdp5yIchz37QCqA+udRhe
Wu6Aajxb1FktUvD4yx5j0ZBipfqGfEFVYsdF6CxbvDCtbywuvnck5O1qRvWevKNH
P3IL6gfRfH90xWn443NdRDoztx6XU2ikjgmso85nU8lZekDy+txjqUuvl2zunEXQ
STzaEGW4myuiQrrVD9AQDOfE8jHtrVbf08o54UhT8cI3chArhBbHC8wC2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAODg9E9WhJTCx1wH7fQ2q9qfAWVMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQTRPRDBUMWFFbE1MSFhBZnQ5RGFyMnA4QlpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACgItaptBKMEEd4XOGSn
8H7zaqRY71Cvbw2EwMesUpePJZwPjnfg5pFx5zKrKRRGhMaR0iVnM7u+N4WEA72s
sN4Phijjf3t35UfM9XoeBNGsoYl9IW9l+9+mLybvbq1Q6thCnlbcpR7wLzqR3dvI
kSrPD+pTme1eXvAZ7Ed3QfD7d5YEezwRqCyYo9tcogfpEuuUOeam5meeMWeM6b+U
XwIibONASzO2Ekb10NscBTJOzWK3IBMdKzhhH0n/yJbk/IQ/pIg8zrl8DV8AY5cN
ErmNvlYXB5HUAVf9qrv92Ih27uUz7F7lIE/9rYOtwu0ngIdwmYvRN2L2rSqjixTG
Mj4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:13 2025 by rpki-client