Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RZMM7icAbGqXMllmXBl11ttUwhE.roa
File: RZMM7icAbGqXMllmXBl11ttUwhE.roa (raw, json)
Hash identifier: 1qFz1l4SV1ANo/eDitZuJR2Fj5j3nudPP52Bfv4sJEw=
Subject key identifier: 45:93:0C:EE:27:00:6C:6A:97:32:59:66:5C:19:75:D6:DB:54:C2:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E389A12EA1A0C97A781A751888161C9E4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RZMM7icAbGqXMllmXBl11ttUwhE.roa
Signing time: Wed 13 Mar 2024 16:16:45 +0000
ROA not before: Wed 13 Mar 2024 16:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:9a:12:ea:1a:0c:97:a7:81:a7:51:88:81:61:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 13 16:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45930cee27006c6a973259665c1975d6db54c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:bb:0c:41:97:d8:4d:36:b4:fa:d8:6f:20:
8e:c7:dc:12:ec:85:ba:60:7c:2b:5d:f2:43:8f:87:
89:7b:76:8d:17:07:bd:74:e5:c0:fe:72:64:e5:5e:
74:9d:7c:48:d9:62:ac:7a:aa:c1:03:c0:2a:f4:ea:
80:0b:45:ce:df:6e:f8:1c:3f:eb:4e:b1:da:94:c0:
30:92:0a:47:33:78:9f:6e:67:74:00:4e:69:d0:be:
b5:01:53:0e:4a:49:11:97:65:e5:b0:4f:56:98:35:
b5:a0:87:96:c2:7a:8a:23:b9:e6:5b:1b:87:21:d5:
c9:cf:a5:f3:0e:32:59:b6:7e:27:e2:02:98:da:53:
dd:a8:48:58:6d:97:aa:53:a2:d1:bd:b7:74:90:ee:
68:a6:ef:71:1e:8e:6f:3b:aa:ae:ef:4b:7e:33:f8:
e0:b4:00:a5:58:a6:39:0c:6d:db:36:86:3e:43:c4:
54:37:39:99:45:dd:6d:c9:4c:6b:1f:b5:1f:c6:9f:
69:b7:df:d6:ee:46:96:bf:c8:58:df:ea:0a:8a:dc:
97:8c:02:5c:c0:07:c6:2c:5f:f3:ee:14:68:7b:3f:
18:90:e4:b0:ce:a2:92:65:49:67:46:ea:75:a3:2f:
a8:9b:fa:3c:eb:9e:e9:93:25:9d:9f:39:55:1a:9c:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:0C:EE:27:00:6C:6A:97:32:59:66:5C:19:75:D6:DB:54:C2:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RZMM7icAbGqXMllmXBl11ttUwhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:f6:35:d6:52:89:36:38:12:6f:61:d2:24:dd:5b:b9:07:69:
0e:b5:87:ca:b3:42:cc:72:7d:11:05:49:8c:d8:fb:8c:b9:fc:
4d:6f:24:95:67:16:cd:a7:9e:66:39:29:fa:b2:08:60:73:08:
31:85:a6:49:9b:8e:cb:b1:a0:81:ef:a9:d5:53:40:55:c8:4f:
7f:38:91:60:49:83:9a:60:0d:a9:58:1a:df:63:2e:01:43:a9:
ef:aa:dc:da:56:ea:9a:c5:64:1c:4a:d3:c9:49:ee:0e:4a:d1:
12:49:fc:bf:b2:a9:94:a8:e6:12:cc:04:ca:59:65:67:2f:d7:
b3:86:d6:6c:29:4a:a5:c4:0f:9b:50:79:b4:d2:66:7c:0a:84:
9b:45:40:0b:10:24:ac:cb:b0:00:f5:37:8b:95:6a:0b:0e:30:
10:21:c7:6c:c8:10:e4:ae:99:e2:67:2b:81:e6:62:ac:d1:98:
d5:18:12:25:c7:34:38:25:ad:53:11:a1:15:57:ae:fa:72:1d:
47:db:6e:91:2c:d7:14:f4:e5:b8:5d:98:0a:60:62:03:e4:c3:
13:e7:c0:2d:0d:09:a5:99:1a:55:7a:44:5e:1f:6d:59:19:2f:
d3:d8:7a:55:ce:98:81:99:30:83:d1:f9:d1:f6:90:ae:cf:12:
b2:f5:0e:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY44mhLqGgyXp4GnUYiBYcnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzEzMTYxNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkzMGNlZTI3MDA2YzZhOTczMjU5NjY1YzE5NzVkNmRiNTRjMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDG7DEGX2E02tPrYbyCOx9wS7IW6
YHwrXfJDj4eJe3aNFwe9dOXA/nJk5V50nXxI2WKseqrBA8Aq9OqAC0XO3274HD/r
TrHalMAwkgpHM3ifbmd0AE5p0L61AVMOSkkRl2XlsE9WmDW1oIeWwnqKI7nmWxuH
IdXJz6XzDjJZtn4n4gKY2lPdqEhYbZeqU6LRvbd0kO5opu9xHo5vO6qu70t+M/jg
tAClWKY5DG3bNoY+Q8RUNzmZRd1tyUxrH7Ufxp9pt9/W7kaWv8hY3+oKityXjAJc
wAfGLF/z7hRoez8YkOSwzqKSZUlnRup1oy+om/o8657pkyWdnzlVGpzkwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEWTDO4nAGxqlzJZZlwZddbbVMIRMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUlpNTTdpY0FiR3FYTWxsbVhCbDExdHRVd2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHP2NdZSiTY4Em9h0iTd
W7kHaQ61h8qzQsxyfREFSYzY+4y5/E1vJJVnFs2nnmY5KfqyCGBzCDGFpkmbjsux
oIHvqdVTQFXIT384kWBJg5pgDalYGt9jLgFDqe+q3NpW6prFZBxK08lJ7g5K0RJJ
/L+yqZSo5hLMBMpZZWcv17OG1mwpSqXED5tQebTSZnwKhJtFQAsQJKzLsAD1N4uV
agsOMBAhx2zIEOSumeJnK4HmYqzRmNUYEiXHNDglrVMRoRVXrvpyHUfbbpEs1xT0
5bhdmApgYgPkwxPnwC0NCaWZGlV6RF4fbVkZL9PYelXOmIGZMIPR+dH2kK7PErL1
DjI=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:55 2025 by rpki-client