Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5MUZHex5S6pxiVLOOgA4rRbXm0.roa
File: P5MUZHex5S6pxiVLOOgA4rRbXm0.roa (raw, json)
Hash identifier: 64WGG+c65LE1HkB9WaMmKG2OGXoiRFKxjjtglSHYiHY=
Subject key identifier: 3F:93:14:64:77:B1:E5:2E:A9:C6:25:4B:38:E8:00:E2:B4:5B:5E:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE666BA5F2A0A1CC117601B8890A4ADB1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5MUZHex5S6pxiVLOOgA4rRbXm0.roa
Signing time: Mon 26 Feb 2024 17:11:48 +0000
ROA not before: Mon 26 Feb 2024 17:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:66:ba:5f:2a:0a:1c:c1:17:60:1b:88:90:a4:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 17:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f93146477b1e52ea9c6254b38e800e2b45b5e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:42:8e:84:10:a8:32:15:32:ba:ad:53:43:
b9:4d:a7:84:c9:3b:21:b8:4c:6e:66:29:5d:bb:de:
ef:7c:41:6b:23:de:e3:d3:98:43:7b:6e:87:ed:2c:
b2:b3:ce:7b:52:52:23:0d:9a:1b:31:07:58:be:c7:
a5:f6:3a:23:4a:b4:7d:3e:8c:cf:5a:07:91:d5:48:
2b:51:e9:99:77:91:78:8b:88:e1:e1:e0:17:06:9b:
94:ae:83:bf:6b:48:1c:cc:4a:f0:cc:8d:d5:c5:bc:
f7:b0:97:07:7d:61:ea:b5:f3:f1:38:c6:50:45:0f:
54:6e:d0:6c:a9:a5:76:b1:2d:1c:bf:02:45:d2:c9:
03:94:b2:87:5e:2a:ac:39:d3:a0:80:d3:45:3a:17:
ce:bc:b2:b6:a4:cc:ee:8c:57:9f:ab:bc:0a:95:83:
bc:70:28:fa:cd:b2:be:51:31:42:cf:8d:c5:a5:4a:
35:1a:ee:51:7e:c4:a5:79:40:ff:8a:8e:bb:d1:3f:
63:bf:e8:f8:08:b1:af:d7:06:c6:8d:76:60:4c:b2:
5f:9d:e4:cd:ae:a9:2a:c5:1f:ce:59:6b:cc:f0:0e:
4e:ea:0a:67:f5:da:3d:7a:5d:87:d5:3e:6d:99:3d:
8a:f5:f7:3c:45:81:6a:7d:d0:33:7f:86:1c:a4:4d:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:93:14:64:77:B1:E5:2E:A9:C6:25:4B:38:E8:00:E2:B4:5B:5E:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5MUZHex5S6pxiVLOOgA4rRbXm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:20:14:db:f9:fa:f1:bd:16:dc:7b:fe:c7:c1:99:c5:27:22:
cd:8f:c7:42:49:68:66:f3:9c:40:88:65:29:3c:4e:72:a0:a0:
93:41:7a:93:bb:15:3b:6b:18:49:f4:0d:3d:10:31:68:32:1a:
cf:8e:a7:c8:41:4d:53:db:be:18:a0:07:57:bb:a7:81:f1:5c:
96:2a:50:f0:3b:63:e0:77:29:52:e0:52:aa:af:3d:99:81:7c:
b2:7f:f6:7e:9b:b3:db:14:9d:4a:54:d7:cc:4a:94:1b:b9:14:
a3:a7:82:f2:95:24:eb:e5:91:36:46:5f:99:85:8a:f1:a4:4f:
b0:35:6a:35:c0:56:23:8c:15:8f:0c:8f:2f:a3:ca:8d:5f:9a:
a0:d4:e7:5b:dc:e6:a6:b9:a3:ed:bd:0a:e7:2c:54:6d:46:50:
7e:8c:c2:f3:08:0e:73:96:28:34:1a:8c:ff:4f:32:6e:22:1e:
c7:08:8e:c2:9d:80:5c:6c:a0:f4:ae:46:a2:4a:85:bc:7f:ef:
0e:1e:bb:e6:b8:4a:7b:27:4f:9e:79:36:e3:a2:5e:b1:f1:e4:
39:d0:33:dc:7e:57:af:df:bb:86:ad:b1:d2:d8:36:2d:03:f4:
14:70:4b:9b:d2:dd:ce:6e:d2:c0:1c:d2:d6:7c:a7:9f:c0:10:
15:7e:a6:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3mZrpfKgocwRdgG4iQpK2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI2MTcxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjkzMTQ2NDc3YjFlNTJlYTljNjI1NGIzOGU4MDBlMmI0NWI1ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZCjoQQqDIVMrqtU0O5TaeEyTsh
uExuZildu97vfEFrI97j05hDe26H7Syys857UlIjDZobMQdYvsel9jojSrR9PozP
WgeR1UgrUemZd5F4i4jh4eAXBpuUroO/a0gczErwzI3Vxbz3sJcHfWHqtfPxOMZQ
RQ9UbtBsqaV2sS0cvwJF0skDlLKHXiqsOdOggNNFOhfOvLK2pMzujFefq7wKlYO8
cCj6zbK+UTFCz43FpUo1Gu5RfsSleUD/io670T9jv+j4CLGv1wbGjXZgTLJfneTN
rqkqxR/OWWvM8A5O6gpn9do9el2H1T5tmT2K9fc8RYFqfdAzf4YcpE0gZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD+TFGR3seUuqcYlSzjoAOK0W15tMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUDVNVVpIZXg1UzZweGlWTE9PZ0E0clJiWG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFogFNv5+vG9Ftx7/sfB
mcUnIs2Px0JJaGbznECIZSk8TnKgoJNBepO7FTtrGEn0DT0QMWgyGs+Op8hBTVPb
vhigB1e7p4HxXJYqUPA7Y+B3KVLgUqqvPZmBfLJ/9n6bs9sUnUpU18xKlBu5FKOn
gvKVJOvlkTZGX5mFivGkT7A1ajXAViOMFY8Mjy+jyo1fmqDU51vc5qa5o+29Cucs
VG1GUH6MwvMIDnOWKDQajP9PMm4iHscIjsKdgFxsoPSuRqJKhbx/7w4eu+a4Snsn
T555NuOiXrHx5DnQM9x+V6/fu4atsdLYNi0D9BRwS5vS3c5u0sAc0tZ8p5/AEBV+
pnA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:13 2025 by rpki-client