Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VzwmqAPrFMKHLbmXXA3j3gMwnkA.roa
File: VzwmqAPrFMKHLbmXXA3j3gMwnkA.roa (raw, json)
Hash identifier: y7ytwjmQAwdANje5sN66qEnTLyY/DI2Oteen6hKxi24=
Subject key identifier: 57:3C:26:A8:03:EB:14:C2:87:2D:B9:97:5C:0D:E3:DE:03:30:9E:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9772205FC79EED94FAC25B1111A8319B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VzwmqAPrFMKHLbmXXA3j3gMwnkA.roa
Signing time: Sun 11 Feb 2024 09:14:15 +0000
ROA not before: Sun 11 Feb 2024 09:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:97:72:20:5f:c7:9e:ed:94:fa:c2:5b:11:11:a8:31:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 09:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573c26a803eb14c2872db9975c0de3de03309e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:3b:b7:00:57:82:73:5e:b1:eb:3e:16:13:
d2:a1:2e:83:0c:fc:71:c5:bb:92:98:76:f9:a1:87:
6c:e6:13:01:5a:78:6d:a4:85:a4:6f:ea:a2:66:15:
f4:a9:b9:29:3b:a0:20:9b:27:11:ad:38:9f:c4:99:
09:c9:2f:57:c1:83:b8:3d:b7:9c:1d:fc:38:4b:9b:
f5:53:d7:68:d8:d5:43:2a:6e:e7:ab:28:de:77:7c:
4c:45:1a:f6:d3:bf:fb:4c:6a:a1:00:04:7c:53:f3:
8f:4c:35:f7:40:ae:a9:57:32:e6:4d:45:09:70:2a:
26:0e:f4:07:82:3d:a9:74:0a:2e:41:ce:19:7f:74:
e1:1b:99:9b:9e:e9:4b:cd:ab:c8:22:6c:6a:4d:db:
75:0c:28:cd:4e:2f:4a:b9:9b:89:18:90:60:bb:2d:
d8:a8:fc:0f:c2:2a:96:9e:b8:67:b4:c5:22:0d:ea:
a0:47:f8:ce:29:30:d6:9c:ca:5d:47:00:ee:93:7c:
7d:7a:91:8c:43:4d:4f:23:d8:c4:6c:45:6e:f3:1d:
ea:f2:c5:61:84:8f:5c:ba:46:8c:33:08:d3:09:93:
91:54:9b:a2:db:88:a4:58:34:54:ac:3f:2f:52:29:
65:da:5c:92:6b:f5:96:f3:bf:64:17:6a:f4:e3:fb:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:26:A8:03:EB:14:C2:87:2D:B9:97:5C:0D:E3:DE:03:30:9E:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VzwmqAPrFMKHLbmXXA3j3gMwnkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:5e:69:13:b1:03:d9:51:b6:72:73:bd:c9:dd:44:e1:79:c4:
d8:04:96:9a:b9:42:6d:d1:05:0d:70:75:13:c9:e8:09:ba:6b:
a3:be:64:d7:d6:7f:57:de:3f:9b:22:9e:01:a5:87:e2:ce:a7:
c2:e1:05:e2:70:c4:30:5e:bc:06:32:84:2a:c7:f8:6c:12:9d:
5f:bb:bf:8e:92:e6:f7:06:cf:1f:ca:1d:97:19:4a:f7:0c:a2:
7e:b9:d0:f9:29:c9:79:74:4c:ca:e5:de:63:02:fa:8a:47:04:
4f:33:e0:96:69:4c:09:91:a3:f6:3b:f7:52:66:c3:55:69:54:
82:4d:b5:86:fe:6e:1f:8c:fe:e8:21:d7:cc:ec:75:fb:e5:da:
ba:21:70:f7:3c:dd:69:cc:db:e8:0c:9c:c3:78:9c:6e:13:eb:
4e:5a:52:33:7d:9f:28:5c:e6:d6:95:7a:95:09:24:09:27:bd:
8c:20:d3:72:e2:1f:23:63:8e:d8:a9:cb:44:4b:77:96:33:94:
ce:a6:bb:3b:34:37:87:74:6d:43:e1:0d:f2:9b:1b:c0:79:f3:
c3:93:c5:fa:7a:88:af:8f:21:3c:25:0c:a8:86:f2:87:bc:5f:
8a:43:a4:4b:02:48:86:78:cd:d8:8f:23:3e:8a:5f:2e:c0:03:
0f:1e:e8:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2XciBfx57tlPrCWxERqDGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjExMDkxNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzNjMjZhODAzZWIxNGMyODcyZGI5OTc1YzBkZTNkZTAzMzA5ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7k7twBXgnNeses+FhPSoS6DDPxx
xbuSmHb5oYds5hMBWnhtpIWkb+qiZhX0qbkpO6AgmycRrTifxJkJyS9XwYO4Pbec
Hfw4S5v1U9do2NVDKm7nqyjed3xMRRr207/7TGqhAAR8U/OPTDX3QK6pVzLmTUUJ
cComDvQHgj2pdAouQc4Zf3ThG5mbnulLzavIImxqTdt1DCjNTi9KuZuJGJBguy3Y
qPwPwiqWnrhntMUiDeqgR/jOKTDWnMpdRwDuk3x9epGMQ01PI9jEbEVu8x3q8sVh
hI9cukaMMwjTCZORVJui24ikWDRUrD8vUill2lySa/WW879kF2r04/tpHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFc8JqgD6xTChy25l1wN494DMJ5AMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVnp3bXFBUHJGTUtITGJtWFhBM2ozZ013bmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAleaROxA9lRtnJzvcnd
ROF5xNgElpq5Qm3RBQ1wdRPJ6Am6a6O+ZNfWf1feP5singGlh+LOp8LhBeJwxDBe
vAYyhCrH+GwSnV+7v46S5vcGzx/KHZcZSvcMon650PkpyXl0TMrl3mMC+opHBE8z
4JZpTAmRo/Y791Jmw1VpVIJNtYb+bh+M/ugh18zsdfvl2rohcPc83WnM2+gMnMN4
nG4T605aUjN9nyhc5taVepUJJAknvYwg03LiHyNjjtipy0RLd5YzlM6muzs0N4d0
bUPhDfKbG8B588OTxfp6iK+PITwlDKiG8oe8X4pDpEsCSIZ4zdiPIz6KXy7AAw8e
6P4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:29:59 2025 by rpki-client