Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GjMRNXq5fjlAsEBj5SfE8aspUxY.roa
File: GjMRNXq5fjlAsEBj5SfE8aspUxY.roa (raw, json)
Hash identifier: p6aVS5Q7Z7A9ZvehX5FYr9yuvaWJb1pi5D34LJ5GF8E=
Subject key identifier: 1A:33:11:35:7A:B9:7E:39:40:B0:40:63:E5:27:C4:F1:AB:29:53:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9EFDFC9B86EEFF36950E3CA02CBD768F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GjMRNXq5fjlAsEBj5SfE8aspUxY.roa
Signing time: Mon 12 Feb 2024 20:24:21 +0000
ROA not before: Mon 12 Feb 2024 20:24:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:fd:fc:9b:86:ee:ff:36:95:0e:3c:a0:2c:bd:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 20:24:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a3311357ab97e3940b04063e527c4f1ab295316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:87:e4:e3:f1:21:b4:20:ae:46:25:bf:61:
31:c1:8a:6c:33:08:81:86:de:76:86:67:31:c0:19:
17:3a:af:6a:be:7f:ab:16:bb:4f:29:9c:56:c5:2a:
ae:73:f3:18:89:d5:2e:b7:c8:51:25:06:51:08:81:
db:75:6b:58:2a:36:fa:52:14:c0:f8:06:6a:5c:7e:
f7:95:91:4a:d4:57:89:65:33:69:c8:e6:1e:89:65:
55:b1:0c:74:14:b8:27:c8:1c:01:64:b4:a1:93:a9:
a0:ba:5e:d7:e9:39:db:59:31:02:bf:e6:7a:ae:4e:
29:15:63:08:44:ce:fa:61:6c:69:2a:59:31:8a:1b:
f4:62:a0:9b:75:8f:f6:01:b8:35:b6:43:ad:de:d6:
6d:03:39:64:08:5f:2d:b0:1e:00:68:e9:e9:67:da:
49:18:30:db:cb:ba:ea:d0:9b:19:7f:d0:ab:87:5e:
ca:93:19:c1:d8:1a:e3:66:41:93:28:5c:44:0c:a5:
a1:19:33:64:77:4e:8b:62:fd:70:6c:06:d3:61:15:
1d:35:05:14:40:64:35:5e:9d:4b:67:e1:97:e1:9f:
64:1d:48:2c:bb:e4:e5:a2:b2:c2:a3:fb:d5:5d:57:
6e:c0:de:17:c3:75:da:59:fe:af:5b:ee:a7:f0:9c:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:11:35:7A:B9:7E:39:40:B0:40:63:E5:27:C4:F1:AB:29:53:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GjMRNXq5fjlAsEBj5SfE8aspUxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:47:7d:30:17:78:88:06:34:85:97:f9:11:8c:00:c1:1e:ad:
ce:fb:aa:1c:1f:c3:42:4a:8f:6e:ce:f1:43:fc:96:01:51:42:
c1:2b:1e:09:a0:e1:04:da:a5:bf:e0:b3:82:04:d9:51:70:2f:
81:07:61:6c:d9:1e:39:d2:15:6f:77:c1:cb:ed:95:ea:c1:bc:
2f:e4:00:e3:04:d3:bb:e7:4e:e8:3a:e0:1d:01:05:da:38:8f:
7c:05:a9:08:1b:36:e7:a4:d2:01:d1:40:32:24:5f:c9:78:0c:
b4:5a:e5:be:17:db:0c:32:33:fa:b6:65:7a:c5:cc:bf:24:20:
b8:66:ea:b5:77:40:be:7d:f1:80:5c:80:d0:ac:56:75:a0:1c:
83:64:b2:a9:56:3e:ab:1f:fc:bd:f8:2e:26:da:c3:48:1c:2d:
c2:f2:f3:4f:08:30:7a:f1:ab:68:2f:be:e5:4a:f6:f0:47:c6:
90:61:cf:f2:be:6d:e7:01:45:aa:06:ec:41:73:27:1c:72:7e:
59:5c:ba:6b:01:bb:3e:68:c6:96:c3:8d:16:df:d3:cd:51:c9:
53:8a:6c:ef:ee:4d:b0:98:19:70:81:61:4d:2a:4c:34:30:31:
1c:4e:e2:73:e9:f6:a4:de:b3:db:9b:98:f3:07:25:34:7c:56:
30:59:92:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2e/fybhu7/NpUOPKAsvXaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEyMjAyNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTMzMTEzNTdhYjk3ZTM5NDBiMDQwNjNlNTI3YzRmMWFiMjk1MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2CH5OPxIbQgrkYlv2ExwYpsMwiB
ht52hmcxwBkXOq9qvn+rFrtPKZxWxSquc/MYidUut8hRJQZRCIHbdWtYKjb6UhTA
+AZqXH73lZFK1FeJZTNpyOYeiWVVsQx0FLgnyBwBZLShk6mgul7X6TnbWTECv+Z6
rk4pFWMIRM76YWxpKlkxihv0YqCbdY/2Abg1tkOt3tZtAzlkCF8tsB4AaOnpZ9pJ
GDDby7rq0JsZf9Crh17KkxnB2BrjZkGTKFxEDKWhGTNkd06LYv1wbAbTYRUdNQUU
QGQ1Xp1LZ+GX4Z9kHUgsu+TlorLCo/vVXVduwN4Xw3XaWf6vW+6n8JySTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBozETV6uX45QLBAY+UnxPGrKVMWMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvR2pNUk5YcTVmamxBc0VCajVTZkU4YXNwVXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD5HfTAXeIgGNIWX+RGM
AMEerc77qhwfw0JKj27O8UP8lgFRQsErHgmg4QTapb/gs4IE2VFwL4EHYWzZHjnS
FW93wcvtlerBvC/kAOME07vnTug64B0BBdo4j3wFqQgbNuek0gHRQDIkX8l4DLRa
5b4X2wwyM/q2ZXrFzL8kILhm6rV3QL598YBcgNCsVnWgHINksqlWPqsf/L34Liba
w0gcLcLy808IMHrxq2gvvuVK9vBHxpBhz/K+becBRaoG7EFzJxxyfllcumsBuz5o
xpbDjRbf081RyVOKbO/uTbCYGXCBYU0qTDQwMRxO4nPp9qTes9ubmPMHJTR8VjBZ
kvc=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:48 2025 by rpki-client