Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EpOrwgrw0Q_50AMyS5sOCXiCPLY.roa
File: EpOrwgrw0Q_50AMyS5sOCXiCPLY.roa (raw, json)
Hash identifier: KYtyNc///WO0Zr8sBR0I0QEAGMAQQ3Hmt/SK8zFXYUc=
Subject key identifier: 12:93:AB:C2:0A:F0:D1:0F:F9:D0:03:32:4B:9B:0E:09:78:82:3C:B6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4D2FD93713D6523F1E2BE099D59CD8DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EpOrwgrw0Q_50AMyS5sOCXiCPLY.roa
Signing time: Sun 17 Mar 2024 16:12:45 +0000
ROA not before: Sun 17 Mar 2024 16:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:2f:d9:37:13:d6:52:3f:1e:2b:e0:99:d5:9c:d8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 16:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1293abc20af0d10ff9d003324b9b0e0978823cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:83:47:b4:1c:3b:ab:90:ee:9f:18:cb:16:
1c:7d:d1:da:82:5c:00:c0:41:37:ae:08:cd:cd:99:
c7:bf:03:45:ea:fb:1a:44:e1:8b:08:be:db:80:27:
24:05:aa:e0:6c:cb:51:f4:e1:9b:42:9c:53:f2:c9:
d2:7f:33:16:30:42:31:3b:9a:aa:c5:81:19:9d:ea:
01:fc:03:94:f9:ef:65:f4:9b:b6:76:4d:2b:79:3d:
ac:d4:3f:9e:9d:7d:10:6e:56:c0:15:88:e6:04:29:
88:ff:2b:5a:d5:6f:48:57:d3:ac:b8:77:41:de:9f:
3c:01:33:16:d9:0f:a4:d9:98:9f:fd:f6:f7:58:5e:
84:a6:2a:59:c7:7f:27:62:cf:23:55:36:f5:9f:b7:
21:f2:ae:e0:54:5b:4e:8b:c0:1b:19:fb:69:86:6c:
f9:34:22:a2:e0:a6:f9:3b:23:7f:ba:7f:4e:f5:a4:
70:49:60:66:48:1f:99:90:f2:92:05:e3:7f:a6:2c:
59:a2:35:15:42:b7:5d:2d:73:bf:a1:ca:dd:a1:21:
63:66:02:72:95:fc:8f:fb:bc:70:0b:e5:b0:28:fb:
16:83:ac:d2:cf:e3:ad:b9:64:a0:fb:89:8a:bc:d7:
54:ce:c0:48:aa:15:46:ef:74:48:a3:c2:45:6e:e2:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:AB:C2:0A:F0:D1:0F:F9:D0:03:32:4B:9B:0E:09:78:82:3C:B6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EpOrwgrw0Q_50AMyS5sOCXiCPLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:70:8a:e3:16:f2:bf:ac:0b:3f:d8:aa:89:85:8a:ce:9c:1a:
fd:fc:24:b4:8f:68:8e:48:89:b8:11:eb:19:2b:6e:eb:4a:aa:
5a:89:3f:24:d2:05:d5:91:c3:8a:a8:e8:1b:0b:56:97:e1:2a:
0a:03:65:9f:de:6b:57:62:9b:7c:94:06:0d:f4:6c:7b:98:8d:
47:47:64:7f:d0:72:d3:c0:ab:44:66:ca:c8:ab:0c:17:6c:0c:
62:05:90:15:59:95:f4:27:27:cb:ae:d7:bf:c0:a4:9b:a8:01:
c7:3e:e3:fe:e0:c7:29:0e:6d:d2:0c:c5:e7:37:8b:c6:ec:08:
ee:54:46:a8:0f:7a:aa:c3:8a:93:ad:12:46:32:ff:36:40:ac:
53:8f:43:46:89:22:75:5f:c8:ae:bc:ef:57:0f:7c:2d:cf:2e:
07:71:bb:e0:23:3a:8e:f7:17:0b:27:df:3b:22:25:98:4e:a5:
92:51:92:65:8d:ac:f1:a1:73:59:aa:a2:19:8c:31:30:2e:d9:
40:12:c5:f9:84:92:05:b3:97:0a:94:a7:6b:13:b8:5e:95:7b:
8d:90:4b:32:f7:31:f1:28:8a:e9:f8:33:4c:30:c3:b7:6f:3a:
4f:3a:a7:ae:51:3c:f8:ff:b3:1c:87:5e:d2:ce:78:60:91:30:
83:06:bb:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5NL9k3E9ZSPx4r4JnVnNjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE3MTYxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjkzYWJjMjBhZjBkMTBmZjlkMDAzMzI0YjliMGUwOTc4ODIzY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0qDR7QcO6uQ7p8YyxYcfdHaglwA
wEE3rgjNzZnHvwNF6vsaROGLCL7bgCckBargbMtR9OGbQpxT8snSfzMWMEIxO5qq
xYEZneoB/AOU+e9l9Ju2dk0reT2s1D+enX0QblbAFYjmBCmI/yta1W9IV9OsuHdB
3p88ATMW2Q+k2Zif/fb3WF6EpipZx38nYs8jVTb1n7ch8q7gVFtOi8AbGftphmz5
NCKi4Kb5OyN/un9O9aRwSWBmSB+ZkPKSBeN/pixZojUVQrddLXO/ocrdoSFjZgJy
lfyP+7xwC+WwKPsWg6zSz+OtuWSg+4mKvNdUzsBIqhVG73RIo8JFbuJxTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBKTq8IK8NEP+dADMkubDgl4gjy2MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRXBPcndncncwUV81MEFNeVM1c09DWGlDUExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE9wiuMW8r+sCz/YqomF
is6cGv38JLSPaI5IibgR6xkrbutKqlqJPyTSBdWRw4qo6BsLVpfhKgoDZZ/ea1di
m3yUBg30bHuYjUdHZH/QctPAq0RmysirDBdsDGIFkBVZlfQnJ8uu17/ApJuoAcc+
4/7gxykObdIMxec3i8bsCO5URqgPeqrDipOtEkYy/zZArFOPQ0aJInVfyK6871cP
fC3PLgdxu+AjOo73Fwsn3zsiJZhOpZJRkmWNrPGhc1mqohmMMTAu2UASxfmEkgWz
lwqUp2sTuF6Ve42QSzL3MfEoiun4M0www7dvOk86p65RPPj/sxyHXtLOeGCRMIMG
uzE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:04 2025 by rpki-client