Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hc6uKYNaIeHxG2uaPQjsaoJ1KVk.roa
File: Hc6uKYNaIeHxG2uaPQjsaoJ1KVk.roa (raw, json)
Hash identifier: ULybZ7BZAiCVRHFfZ3X1nGzFA2BH/QRq0pD9AFmUAVo=
Subject key identifier: 1D:CE:AE:29:83:5A:21:E1:F1:1B:6B:9A:3D:08:EC:6A:82:75:29:59
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D77B216578FAA42CE7296240A9FF9A5D3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hc6uKYNaIeHxG2uaPQjsaoJ1KVk.roa
Signing time: Mon 05 Feb 2024 05:16:16 +0000
ROA not before: Mon 05 Feb 2024 05:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:b2:16:57:8f:aa:42:ce:72:96:24:0a:9f:f9:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 05:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dceae29835a21e1f11b6b9a3d08ec6a82752959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:5d:d9:b5:8f:74:b2:cf:4b:73:7e:6a:0b:
17:a2:49:a8:a0:b9:d1:97:c0:a0:2b:db:76:4d:68:
52:7a:0a:c5:ae:db:1c:fc:8d:11:87:f9:73:01:5a:
b2:84:5a:b0:58:c1:87:f5:42:6c:da:d6:c6:2b:87:
25:aa:bf:82:bf:31:e9:40:20:40:d7:e1:5c:91:fe:
6d:8d:40:64:af:50:17:06:33:c9:db:15:b7:94:7e:
cc:75:14:77:db:16:42:fa:a0:74:4c:ac:6c:92:1f:
64:2c:83:17:69:ff:ba:cc:69:09:7b:b3:92:01:48:
03:44:d4:33:de:e4:d6:7f:64:73:6b:ee:21:8a:98:
b5:30:97:9d:dc:ed:e9:6f:63:5a:6e:42:a0:e1:8e:
dd:da:49:21:35:60:ce:5e:d1:c1:dd:b8:38:a6:4b:
fe:04:2b:48:c5:0e:19:36:ee:d2:79:80:59:b5:83:
8f:80:9f:76:5a:0f:e8:b6:e9:bb:f6:62:2b:b8:4d:
75:3b:53:80:af:4a:29:4e:a7:3a:b8:65:3c:21:ab:
4c:dd:77:9e:9a:93:7d:1a:a3:5f:c4:24:ee:dd:a0:
2f:5c:08:f1:80:b1:19:fc:b7:ed:43:f6:fe:3b:dd:
e0:13:b8:cd:8c:7a:02:84:06:d9:7c:15:c3:d1:01:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:AE:29:83:5A:21:E1:F1:1B:6B:9A:3D:08:EC:6A:82:75:29:59
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hc6uKYNaIeHxG2uaPQjsaoJ1KVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:48:47:dc:76:b7:ef:36:71:50:bd:d0:9d:95:1e:28:ac:de:
70:1c:ce:60:39:00:52:69:da:6a:bb:03:ce:f1:d4:b0:ed:33:
59:a7:43:15:d7:60:06:2c:4f:b3:b4:4f:b9:20:8f:33:bf:48:
f9:b1:fa:fb:3f:09:f4:3b:35:e1:4d:cb:91:a2:9e:85:0e:d4:
06:be:d8:1d:dc:7f:15:96:a5:ce:d2:b2:f3:6d:53:7d:b5:b2:
0b:cd:b1:e1:e9:95:84:b4:51:82:e2:8d:61:91:90:1d:62:bb:
7b:80:da:e0:c2:74:38:e0:65:a0:ff:ce:bc:dd:1d:69:87:4e:
b1:f0:b8:0b:4f:1f:64:fe:6d:78:d8:70:41:02:bc:ec:d1:82:
87:b1:d0:e2:ae:0c:3a:73:be:f8:81:30:90:43:22:48:4b:11:
08:58:c5:a9:00:a0:d8:af:4d:70:18:32:7c:b6:08:9a:39:e5:
04:66:17:17:2b:21:93:4c:c0:5e:b0:66:f9:db:2c:bb:bf:7d:
db:0d:e9:79:43:f4:ba:ce:b9:57:6e:1e:4a:87:70:a3:1a:6a:
7e:b5:e0:16:0b:ff:36:99:cf:24:8c:4e:2a:9c:ab:89:97:5d:
61:c0:f9:3d:19:1e:8c:22:60:ca:67:8c:4d:5d:1e:00:78:58:
18:e8:6a:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY13shZXj6pCznKWJAqf+aXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA1MDUxNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGNlYWUyOTgzNWEyMWUxZjExYjZiOWEzZDA4ZWM2YTgyNzUyOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdNd2bWPdLLPS3N+agsXokmooLnR
l8CgK9t2TWhSegrFrtsc/I0Rh/lzAVqyhFqwWMGH9UJs2tbGK4clqr+CvzHpQCBA
1+Fckf5tjUBkr1AXBjPJ2xW3lH7MdRR32xZC+qB0TKxskh9kLIMXaf+6zGkJe7OS
AUgDRNQz3uTWf2Rza+4hipi1MJed3O3pb2NabkKg4Y7d2kkhNWDOXtHB3bg4pkv+
BCtIxQ4ZNu7SeYBZtYOPgJ92Wg/otum79mIruE11O1OAr0opTqc6uGU8IatM3Xee
mpN9GqNfxCTu3aAvXAjxgLEZ/LftQ/b+O93gE7jNjHoChAbZfBXD0QEDmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB3OrimDWiHh8Rtrmj0I7GqCdSlZMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSGM2dUtZTmFJZUh4RzJ1YVBRanNhb0oxS1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEdIR9x2t+82cVC90J2V
Hiis3nAczmA5AFJp2mq7A87x1LDtM1mnQxXXYAYsT7O0T7kgjzO/SPmx+vs/CfQ7
NeFNy5GinoUO1Aa+2B3cfxWWpc7SsvNtU321sgvNseHplYS0UYLijWGRkB1iu3uA
2uDCdDjgZaD/zrzdHWmHTrHwuAtPH2T+bXjYcEECvOzRgoex0OKuDDpzvviBMJBD
IkhLEQhYxakAoNivTXAYMny2CJo55QRmFxcrIZNMwF6wZvnbLLu/fdsN6XlD9LrO
uVduHkqHcKMaan614BYL/zaZzySMTiqcq4mXXWHA+T0ZHowiYMpnjE1dHgB4WBjo
aoE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:16 2025 by rpki-client