Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Io6Ad8GxxLBtUnAHHMn86-1N8WM.roa
File: Io6Ad8GxxLBtUnAHHMn86-1N8WM.roa (raw, json)
Hash identifier: AZAVKXiq/t1hpXQt2120l64FpQNwyphzt/21oDYpPrg=
Subject key identifier: 22:8E:80:77:C1:B1:C4:B0:6D:52:70:07:1C:C9:FC:EB:ED:4D:F1:63
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDDCB0CEEAB8B91787065999FAC546340
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Io6Ad8GxxLBtUnAHHMn86-1N8WM.roa
Signing time: Sun 25 Feb 2024 01:04:48 +0000
ROA not before: Sun 25 Feb 2024 01:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:ddca:a724/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dd:cb:0c:ee:ab:8b:91:78:70:65:99:9f:ac:54:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 01:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228e8077c1b1c4b06d5270071cc9fcebed4df163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:4e:d9:7a:1f:bf:35:27:46:f6:d1:96:ea:
cc:6f:20:d2:47:fa:e4:1f:bf:17:ee:3a:3f:dd:34:
3c:13:12:40:18:b0:d8:9a:c0:a0:ff:a2:c5:14:13:
48:51:d6:73:58:ff:89:35:45:5e:ba:bf:99:e9:3b:
35:83:0c:7c:f4:7f:54:96:ee:74:0d:6d:e3:a8:23:
17:94:73:4a:0b:19:6c:2b:62:2c:6e:65:27:09:6f:
10:82:a9:bd:0e:e8:b8:5a:5e:12:c6:60:63:19:e8:
c1:cf:1c:ff:b6:0d:ac:28:9d:1c:86:c7:ea:1e:9d:
c1:97:c8:fa:a2:ca:fc:1f:0d:40:16:0f:a0:b1:10:
73:ba:b2:d5:e9:28:18:9b:35:ca:39:7f:d4:ad:b5:
6e:69:ea:46:ed:ef:4a:bf:e4:c4:f9:00:4e:ea:85:
93:d6:7e:93:64:18:6c:d6:da:79:8c:72:22:06:ed:
f4:fd:32:3d:d9:ac:06:1c:18:2b:46:78:77:ea:9e:
af:60:c6:5d:a1:61:ad:49:6b:0e:95:2d:df:c7:97:
ae:82:23:d6:61:5d:01:e2:3d:01:24:4e:4b:36:50:
98:75:89:cf:85:47:a4:93:20:49:f8:a7:9c:9a:fc:
0d:e5:f7:31:35:1f:01:ae:60:ed:5f:1e:b9:80:2f:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:80:77:C1:B1:C4:B0:6D:52:70:07:1C:C9:FC:EB:ED:4D:F1:63
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Io6Ad8GxxLBtUnAHHMn86-1N8WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:80:04:5e:8c:63:0c:83:a8:86:e1:e9:2c:79:c6:e8:11:41:
b4:cc:15:24:f6:8c:1c:f2:96:33:7f:0b:e2:af:56:40:e7:dd:
63:63:a0:de:b1:f3:eb:1e:6c:84:44:95:7d:49:e2:b2:52:93:
36:2e:09:a6:2f:b7:31:77:bb:0a:6b:1d:73:5c:c9:8e:82:dd:
9d:35:c4:67:b8:e4:19:05:db:ae:27:cf:d2:7d:af:e3:e2:95:
c7:12:f3:1e:de:ef:b2:80:97:29:74:af:b8:d9:5b:22:97:c2:
65:5a:3e:95:df:31:dd:bd:ff:d2:ce:c5:4c:36:f2:92:b8:7d:
1d:0d:c2:f9:6a:e7:be:3c:c1:1c:7d:45:40:d3:12:5c:b2:37:
a5:e1:14:bc:80:88:89:a4:6c:ac:33:0e:ee:f2:38:8f:a0:ec:
0e:ba:01:58:8b:62:ab:1a:78:cd:ec:1f:9e:f9:17:a5:24:ce:
39:fd:96:7d:f8:d9:01:a8:e8:eb:1d:14:bd:e3:71:8e:7a:a8:
0f:b1:e3:a3:56:98:1c:88:bb:0c:00:a4:06:18:e1:05:f5:29:
0a:5c:1a:9e:e4:58:88:7e:2e:a8:7b:48:77:a5:f8:53:68:1a:
72:09:f8:65:47:4f:84:f3:db:10:f7:5c:e9:0c:37:ec:d2:b9:
5b:99:cb:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3dywzuq4uReHBlmZ+sVGNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI1MDEwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjhlODA3N2MxYjFjNGIwNmQ1MjcwMDcxY2M5ZmNlYmVkNGRmMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9O2XofvzUnRvbRlurMbyDSR/rk
H78X7jo/3TQ8ExJAGLDYmsCg/6LFFBNIUdZzWP+JNUVeur+Z6Ts1gwx89H9Ulu50
DW3jqCMXlHNKCxlsK2IsbmUnCW8Qgqm9Dui4Wl4SxmBjGejBzxz/tg2sKJ0chsfq
Hp3Bl8j6osr8Hw1AFg+gsRBzurLV6SgYmzXKOX/UrbVuaepG7e9Kv+TE+QBO6oWT
1n6TZBhs1tp5jHIiBu30/TI92awGHBgrRnh36p6vYMZdoWGtSWsOlS3fx5eugiPW
YV0B4j0BJE5LNlCYdYnPhUekkyBJ+KecmvwN5fcxNR8BrmDtXx65gC+0fQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCKOgHfBscSwbVJwBxzJ/OvtTfFjMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSW82QWQ4R3h4TEJ0VW5BSEhNbjg2LTFOOFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFuABF6MYwyDqIbh6Sx5
xugRQbTMFST2jBzyljN/C+KvVkDn3WNjoN6x8+sebIRElX1J4rJSkzYuCaYvtzF3
uwprHXNcyY6C3Z01xGe45BkF264nz9J9r+PilccS8x7e77KAlyl0r7jZWyKXwmVa
PpXfMd29/9LOxUw28pK4fR0Nwvlq5748wRx9RUDTElyyN6XhFLyAiImkbKwzDu7y
OI+g7A66AViLYqsaeM3sH575F6Ukzjn9ln342QGo6OsdFL3jcY56qA+x46NWmByI
uwwApAYY4QX1KQpcGp7kWIh+Lqh7SHel+FNoGnIJ+GVHT4Tz2xD3XOkMN+zSuVuZ
y9U=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:22 2025 by rpki-client