Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SnCkonWSxCrSHaqFrJQ_2MXdl0g.roa
File: SnCkonWSxCrSHaqFrJQ_2MXdl0g.roa (raw, json)
Hash identifier: x0BgwwEd4z8VBVoXSj4ebIgCcgXocirmkCHWKxnmBpI=
Subject key identifier: 4A:70:A4:A2:75:92:C4:2A:D2:1D:AA:85:AC:94:3F:D8:C5:DD:97:48
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEBC8980FE0D539221C0997DD27575AA7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SnCkonWSxCrSHaqFrJQ_2MXdl0g.roa
Signing time: Tue 27 Feb 2024 18:16:48 +0000
ROA not before: Tue 27 Feb 2024 18:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:c8:98:0f:e0:d5:39:22:1c:09:97:dd:27:57:5a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 18:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a70a4a27592c42ad21daa85ac943fd8c5dd9748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:af:6c:dd:70:6a:12:a1:16:b3:ca:81:f4:
5a:13:2c:b2:c4:e9:e4:69:51:85:34:11:54:c4:d4:
7e:53:df:d3:20:19:f7:c4:c0:4b:fd:68:c7:5f:0a:
83:38:62:24:fd:9f:fe:6c:65:58:73:75:5c:0d:c9:
4a:2f:2e:57:f7:46:b0:06:3a:18:d1:09:d2:6c:d8:
05:63:87:4c:df:b3:c4:87:2f:f7:5c:84:f2:b5:59:
ab:2c:32:8b:bf:81:e8:9d:b4:a5:f3:87:d1:1e:b8:
7d:49:fc:d8:3a:db:59:71:e4:00:2e:dc:5e:11:52:
fa:e8:3f:cc:03:ca:a1:9f:ba:a9:7e:55:f5:8b:24:
47:ca:fd:d9:15:8f:7a:9d:a8:0a:fe:d4:be:10:9a:
ee:cd:70:14:ac:72:15:af:89:7a:95:e2:2b:e0:e6:
b0:bd:16:16:91:22:e1:5d:b9:39:fd:02:c7:b1:84:
1e:18:7e:0f:ce:af:a7:56:59:31:98:dd:09:58:b2:
8c:5c:66:41:5b:cf:07:12:b8:8d:23:f6:e0:f7:f5:
6d:8e:09:f9:f2:f1:7c:68:70:b6:3d:a7:3f:00:24:
58:82:fa:50:90:89:9f:80:ae:35:47:71:1c:29:fb:
b0:ac:f9:c5:f8:c8:4b:1c:30:a3:34:92:ac:6d:49:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:A4:A2:75:92:C4:2A:D2:1D:AA:85:AC:94:3F:D8:C5:DD:97:48
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SnCkonWSxCrSHaqFrJQ_2MXdl0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:d9:ad:1c:33:82:8f:7a:53:a8:27:b6:be:71:dc:51:8d:4a:
c0:5b:3e:ca:09:5f:e8:eb:73:36:af:c4:8f:48:29:96:d5:ce:
82:67:a2:b1:5f:3c:5d:3c:fc:b7:da:22:1b:f8:3e:03:66:9f:
1f:9e:48:93:08:ab:61:0b:a3:b3:19:4a:b9:d9:56:ec:2a:36:
7e:51:e0:e8:a1:a5:69:ed:fb:da:1f:52:e9:42:b2:00:a2:a7:
28:58:6a:f1:71:91:bc:36:f1:ce:e6:a1:71:78:4b:36:27:51:
1b:b5:32:e3:72:b9:82:37:d5:be:be:06:a3:53:2b:bb:5b:b0:
f0:be:79:69:8b:cd:60:1a:90:7d:29:51:92:3b:87:2f:d0:81:
db:a3:98:fc:25:69:e6:0d:2c:31:45:eb:f6:3e:4d:c2:10:0d:
90:08:54:8f:6b:8e:85:8b:98:4e:b6:f9:53:40:ee:80:f7:f4:
84:08:cf:d8:7e:6c:0e:a9:ec:99:85:38:df:39:d1:09:06:d3:
9a:da:f3:25:cb:00:3e:97:74:46:e4:95:03:40:25:1e:0c:b4:
0b:ec:52:f9:0e:bb:9c:c5:83:ea:fd:88:f1:55:37:69:51:04:
6e:b6:8c:8d:12:7f:a9:42:db:ea:03:2b:66:1e:28:ef:6b:8e:
63:ba:07:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3ryJgP4NU5IhwJl90nV1qnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI3MTgxNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTcwYTRhMjc1OTJjNDJhZDIxZGFhODVhYzk0M2ZkOGM1ZGQ5NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMyvbN1wahKhFrPKgfRaEyyyxOnk
aVGFNBFUxNR+U9/TIBn3xMBL/WjHXwqDOGIk/Z/+bGVYc3VcDclKLy5X90awBjoY
0QnSbNgFY4dM37PEhy/3XITytVmrLDKLv4HonbSl84fRHrh9SfzYOttZceQALtxe
EVL66D/MA8qhn7qpflX1iyRHyv3ZFY96nagK/tS+EJruzXAUrHIVr4l6leIr4Oaw
vRYWkSLhXbk5/QLHsYQeGH4Pzq+nVlkxmN0JWLKMXGZBW88HEriNI/bg9/Vtjgn5
8vF8aHC2Pac/ACRYgvpQkImfgK41R3EcKfuwrPnF+MhLHDCjNJKsbUmZRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEpwpKJ1ksQq0h2qhayUP9jF3ZdIMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvU25Da29uV1N4Q3JTSGFxRnJKUV8yTVhkbDBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHDZrRwzgo96U6gntr5x
3FGNSsBbPsoJX+jrczavxI9IKZbVzoJnorFfPF08/LfaIhv4PgNmnx+eSJMIq2EL
o7MZSrnZVuwqNn5R4OihpWnt+9ofUulCsgCipyhYavFxkbw28c7moXF4SzYnURu1
MuNyuYI31b6+BqNTK7tbsPC+eWmLzWAakH0pUZI7hy/QgdujmPwlaeYNLDFF6/Y+
TcIQDZAIVI9rjoWLmE62+VNA7oD39IQIz9h+bA6p7JmFON850QkG05ra8yXLAD6X
dEbklQNAJR4MtAvsUvkOu5zFg+r9iPFVN2lRBG62jI0Sf6lC2+oDK2YeKO9rjmO6
B1M=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:06 2025 by rpki-client