Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LZ6DNWeEe9INHxqCovNWb6vhhIY.roa
File: LZ6DNWeEe9INHxqCovNWb6vhhIY.roa (raw, json)
Hash identifier: My3I/eS4iMLpsdNV6LMfZ0FmViD3O8FUlMSo6kxwscc=
Subject key identifier: 2D:9E:83:35:67:84:7B:D2:0D:1F:1A:82:A2:F3:56:6F:AB:E1:84:86
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC03A8CA26D8477B2EE1C831226FD4410
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LZ6DNWeEe9INHxqCovNWb6vhhIY.roa
Signing time: Mon 19 Feb 2024 07:17:58 +0000
ROA not before: Mon 19 Feb 2024 07:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:3a:8c:a2:6d:84:77:b2:ee:1c:83:12:26:fd:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 19 07:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9e833567847bd20d1f1a82a2f3566fabe18486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:28:c9:fb:68:b9:b7:3b:d4:0c:a0:33:95:
25:b2:29:d4:35:af:c7:75:65:7e:7c:d1:82:bc:a5:
15:37:3c:2b:a2:c5:37:10:a6:9a:af:0c:40:ed:37:
db:94:ea:df:f0:e2:dc:41:8c:91:81:01:2f:a9:e0:
92:11:b0:b6:bf:eb:bd:45:01:e6:93:69:f8:05:f5:
2d:24:94:a7:8e:f1:1b:dd:e9:0c:90:3b:66:09:06:
38:44:a2:95:0c:39:c6:a0:87:73:7e:75:a2:82:03:
45:2a:fc:31:59:33:b8:6b:d2:3a:e7:21:93:40:88:
0c:a2:07:25:ac:cf:ce:0f:74:0c:96:e7:a1:cd:b5:
d8:d3:7d:84:39:c4:2b:5c:46:93:d9:f3:46:43:fb:
05:03:0c:35:3c:1f:56:dc:bc:f6:79:ee:c1:56:5b:
5a:0e:37:23:3a:9d:c4:eb:3f:29:8e:d5:0f:75:a8:
aa:12:5f:69:20:f9:9f:6e:e6:95:00:e3:67:25:cd:
ee:ba:67:d6:87:7f:92:c3:fc:e7:df:c0:0e:43:01:
40:e2:c1:78:e9:18:f0:12:aa:77:e5:5c:64:10:76:
60:e7:db:71:99:68:54:df:e8:cf:ce:1f:e7:d0:a5:
bf:ec:38:d3:47:40:ce:6f:bc:5a:1b:e7:de:55:a6:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9E:83:35:67:84:7B:D2:0D:1F:1A:82:A2:F3:56:6F:AB:E1:84:86
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LZ6DNWeEe9INHxqCovNWb6vhhIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:76:06:e5:34:1d:38:40:fd:04:b4:98:6d:0a:b7:01:e0:24:
02:55:60:60:a3:f7:77:f1:35:1c:6f:cb:e4:ee:49:ee:85:93:
4a:b9:00:5d:41:c6:ee:48:45:a9:89:8a:61:33:8e:8a:31:7b:
83:3e:76:55:45:28:f1:1d:fd:d0:80:75:9d:59:e7:ce:48:14:
0f:45:78:9c:b5:71:cf:74:18:15:81:e7:fc:19:a4:2f:be:47:
d9:88:9d:b4:be:1b:d8:5f:f4:f6:d4:28:92:f0:42:f4:f2:e8:
30:c5:77:40:6f:cd:9d:7e:78:95:3a:64:e7:5f:40:02:87:4a:
f0:99:24:f1:f2:71:a4:fb:c9:cc:13:cd:18:31:1b:51:09:22:
29:0b:d1:0b:c7:c7:f6:59:a1:90:c4:79:bb:92:5d:8b:e6:37:
95:87:f9:ca:f9:f3:8f:5e:1c:ca:cc:81:0d:08:01:4b:f1:f0:
b2:a6:bd:df:4a:a6:08:95:9d:ce:d0:4e:9d:8d:6c:1a:4a:2e:
ca:83:d2:69:54:6d:80:9b:58:d5:36:f5:89:78:7d:0f:cf:ff:
dd:42:84:8b:ab:01:52:9c:a8:03:7f:c9:bc:b2:c1:11:9f:a6:
fc:cf:7b:47:ce:7b:05:f2:9a:6e:31:42:1e:23:20:76:98:7c:
9e:15:a3:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3AOoyibYR3su4cgxIm/UQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE5MDcxNzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDllODMzNTY3ODQ3YmQyMGQxZjFhODJhMmYzNTY2ZmFiZTE4NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUoyftoubc71AygM5UlsinUNa/H
dWV+fNGCvKUVNzwrosU3EKaarwxA7TfblOrf8OLcQYyRgQEvqeCSEbC2v+u9RQHm
k2n4BfUtJJSnjvEb3ekMkDtmCQY4RKKVDDnGoIdzfnWiggNFKvwxWTO4a9I65yGT
QIgMogclrM/OD3QMluehzbXY032EOcQrXEaT2fNGQ/sFAww1PB9W3Lz2ee7BVlta
DjcjOp3E6z8pjtUPdaiqEl9pIPmfbuaVAONnJc3uumfWh3+Sw/zn38AOQwFA4sF4
6RjwEqp35VxkEHZg59txmWhU3+jPzh/n0KW/7DjTR0DOb7xaG+feVab9WwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC2egzVnhHvSDR8agqLzVm+r4YSGMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTFo2RE5XZUVlOUlOSHhxQ292TldiNnZoaElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHp2BuU0HThA/QS0mG0K
twHgJAJVYGCj93fxNRxvy+TuSe6Fk0q5AF1Bxu5IRamJimEzjooxe4M+dlVFKPEd
/dCAdZ1Z585IFA9FeJy1cc90GBWB5/wZpC++R9mInbS+G9hf9PbUKJLwQvTy6DDF
d0BvzZ1+eJU6ZOdfQAKHSvCZJPHycaT7ycwTzRgxG1EJIikL0QvHx/ZZoZDEebuS
XYvmN5WH+cr5849eHMrMgQ0IAUvx8LKmvd9KpgiVnc7QTp2NbBpKLsqD0mlUbYCb
WNU29Yl4fQ/P/91ChIurAVKcqAN/ybyywRGfpvzPe0fOewXymm4xQh4jIHaYfJ4V
o0E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:11 2025 by rpki-client