Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Lz4gqVSaBwZ2koXSpYlggwDYrkE.roa
File: Lz4gqVSaBwZ2koXSpYlggwDYrkE.roa (raw, json)
Hash identifier: aoHFD0TNC+f0CqJeJgpqIwnfWXopDhCZ5P+S3vej9Uo=
Subject key identifier: 2F:3E:20:A9:54:9A:07:06:76:92:85:D2:A5:89:60:83:00:D8:AE:41
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E841705E3B6F1FB0566F15F125A760A1B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Lz4gqVSaBwZ2koXSpYlggwDYrkE.roa
Signing time: Thu 28 Mar 2024 08:04:45 +0000
ROA not before: Thu 28 Mar 2024 08:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:8416:ae3b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:17:05:e3:b6:f1:fb:05:66:f1:5f:12:5a:76:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 08:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f3e20a9549a0706769285d2a589608300d8ae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:54:21:b3:15:4c:27:e3:34:a3:6d:5a:a7:
12:ec:80:32:6e:bc:3b:72:64:5b:5e:f3:bc:43:1f:
a6:ff:f9:2a:78:89:e0:63:4b:f2:52:ae:9b:10:8c:
7c:29:38:fa:06:fc:1e:c6:08:33:85:76:b7:68:c9:
22:19:7d:c0:cb:b0:1b:7c:62:e1:a6:47:74:5e:5a:
64:82:f3:24:d6:39:ad:eb:49:40:b2:ca:e8:1d:41:
91:d9:c9:7a:8a:69:46:11:10:cb:40:1a:56:11:aa:
83:aa:da:b0:2c:ed:c2:a9:2f:46:c3:15:c7:a6:84:
04:94:58:f8:54:d2:0a:4e:c7:33:83:80:26:7a:8b:
ae:57:b4:6b:b3:cf:31:2d:54:29:38:f1:54:e0:a5:
b9:b5:3f:e8:21:0c:18:e9:b1:bd:3f:41:80:d8:cb:
91:7a:8c:dc:26:04:d7:ad:cc:c0:34:9a:31:02:a0:
5b:79:57:62:03:c9:34:ba:50:32:6a:c1:26:b7:b6:
e7:43:9d:1f:14:9d:b3:17:16:87:a3:11:e0:83:b6:
d0:ee:d3:d1:11:69:53:33:ff:50:00:5e:c3:fa:cb:
9d:3f:cb:bb:76:f8:7b:87:4a:5f:0d:88:58:ec:e0:
a6:4a:c6:d4:9e:25:83:3c:a7:ea:60:25:ba:22:3a:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:20:A9:54:9A:07:06:76:92:85:D2:A5:89:60:83:00:D8:AE:41
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Lz4gqVSaBwZ2koXSpYlggwDYrkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:71:e7:d1:a4:27:c2:b7:9c:3c:78:2e:6c:f5:23:cd:c0:03:
50:d7:0b:7e:ed:43:01:95:04:f7:4d:fb:4b:11:c5:6f:43:0d:
23:3e:2b:76:33:2e:30:57:8d:1b:d4:da:52:59:22:33:85:ce:
24:9e:8e:53:77:27:0f:4a:5c:0d:4b:dc:ee:7c:ae:3f:94:19:
40:ee:f4:89:71:63:47:56:f9:f6:ac:e9:35:7b:93:f9:0a:eb:
6f:67:e6:bb:94:95:c1:21:8d:97:8f:77:78:bf:05:ef:c2:54:
10:1d:39:8f:18:23:c0:a2:da:1b:b4:2a:40:da:6c:96:9e:8f:
3a:aa:6b:e1:f4:b2:2e:1c:d9:8b:17:ce:92:c5:3d:a8:ab:e9:
de:91:b9:92:14:dd:5b:c3:35:43:6b:18:92:af:af:cd:f3:f4:
6f:c7:c2:25:a3:38:2f:01:be:2a:12:06:5f:80:53:55:0f:f9:
a8:ff:3e:63:21:fa:92:9b:87:7e:26:8e:3c:4d:5e:1d:14:59:
e7:49:bf:0d:d8:2c:a0:2b:ab:4f:75:7f:f6:1d:50:f7:d0:fa:
f2:78:f4:6a:74:bf:32:cd:d2:40:0a:40:8a:1f:db:6a:aa:ac:
ed:16:4c:1d:66:63:f2:f7:d1:b9:23:85:46:ca:52:a9:d6:39:
93:0e:4e:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6EFwXjtvH7BWbxXxJadgobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI4MDgwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjNlMjBhOTU0OWEwNzA2NzY5Mjg1ZDJhNTg5NjA4MzAwZDhhZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7RUIbMVTCfjNKNtWqcS7IAybrw7
cmRbXvO8Qx+m//kqeIngY0vyUq6bEIx8KTj6BvwexggzhXa3aMkiGX3Ay7AbfGLh
pkd0XlpkgvMk1jmt60lAssroHUGR2cl6imlGERDLQBpWEaqDqtqwLO3CqS9GwxXH
poQElFj4VNIKTsczg4AmeouuV7Rrs88xLVQpOPFU4KW5tT/oIQwY6bG9P0GA2MuR
eozcJgTXrczANJoxAqBbeVdiA8k0ulAyasEmt7bnQ50fFJ2zFxaHoxHgg7bQ7tPR
EWlTM/9QAF7D+sudP8u7dvh7h0pfDYhY7OCmSsbUniWDPKfqYCW6IjpCXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC8+IKlUmgcGdpKF0qWJYIMA2K5BMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTHo0Z3FWU2FCd1oya29YU3BZbGdnd0RZcmtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADNx59GkJ8K3nDx4Lmz1
I83AA1DXC37tQwGVBPdN+0sRxW9DDSM+K3YzLjBXjRvU2lJZIjOFziSejlN3Jw9K
XA1L3O58rj+UGUDu9IlxY0dW+fas6TV7k/kK629n5ruUlcEhjZePd3i/Be/CVBAd
OY8YI8Ci2hu0KkDabJaejzqqa+H0si4c2YsXzpLFPair6d6RuZIU3VvDNUNrGJKv
r83z9G/HwiWjOC8BvioSBl+AU1UP+aj/PmMh+pKbh34mjjxNXh0UWedJvw3YLKAr
q091f/YdUPfQ+vJ49Gp0vzLN0kAKQIof22qqrO0WTB1mY/L30bkjhUbKUqnWOZMO
Tm8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:15 2025 by rpki-client