Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WbEo2ob4cYKa_sWn6bOh93O5KBM.roa
File: WbEo2ob4cYKa_sWn6bOh93O5KBM.roa (raw, json)
Hash identifier: OnyIVZdXjuiBXL7cSZLGYncBB5PDwbq6Qm/SKeSHwq4=
Subject key identifier: 59:B1:28:DA:86:F8:71:82:9A:FE:C5:A7:E9:B3:A1:F7:73:B9:28:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D73D37C3627CD7B73DBA8E1BAB55AAA88
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WbEo2ob4cYKa_sWn6bOh93O5KBM.roa
Signing time: Sun 04 Feb 2024 11:14:16 +0000
ROA not before: Sun 04 Feb 2024 11:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:d3:7c:36:27:cd:7b:73:db:a8:e1:ba:b5:5a:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 11:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b128da86f871829afec5a7e9b3a1f773b92813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:31:3c:83:23:d6:11:ad:68:63:7d:e3:61:
f0:58:f8:26:11:40:bf:0b:91:ca:f7:ba:7d:9b:69:
1f:67:e8:0a:7e:03:d9:61:90:04:cf:42:1e:b8:af:
03:2a:2c:82:9c:3b:80:d3:7f:f8:45:03:0f:09:34:
11:f5:62:03:af:8a:1b:51:d1:8b:ac:ba:9b:98:d6:
e4:57:48:3c:74:34:53:e4:3d:83:f8:bc:80:48:ca:
91:25:64:ec:31:70:59:36:92:58:81:2d:b4:4b:83:
23:2b:88:2c:5d:2c:92:9d:cd:10:72:46:16:a4:eb:
03:7b:1d:9d:e8:72:e2:2b:be:e3:0e:ea:b9:05:f1:
31:18:e0:c2:f9:75:bb:c3:48:c0:ff:ce:2c:c4:2d:
96:66:30:d1:72:0b:f0:6a:96:82:cb:f4:d3:48:7b:
4d:96:cf:66:24:ad:2e:80:5e:97:ad:4f:8e:22:15:
97:1c:0d:f6:be:b0:89:60:1f:17:e4:10:7f:c0:c7:
9b:9f:1a:21:46:05:49:3f:dd:fb:bb:e2:d7:2f:18:
8b:90:93:49:ca:e2:4e:d4:6f:40:d1:5b:bc:48:a5:
1e:d3:e7:4b:a1:b2:d2:a2:23:82:72:74:cc:44:91:
fc:28:03:72:29:04:5b:76:46:74:c8:6c:11:6b:b3:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:28:DA:86:F8:71:82:9A:FE:C5:A7:E9:B3:A1:F7:73:B9:28:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WbEo2ob4cYKa_sWn6bOh93O5KBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:5d:9e:55:51:cc:a9:87:68:43:69:95:db:c0:a1:1a:7f:3f:
0d:bb:ed:47:dd:d8:46:74:06:43:f0:3d:f1:7f:ba:88:a0:ea:
5c:d8:19:07:45:df:69:f3:4a:56:5c:01:06:ae:e8:9b:09:12:
a2:d7:db:60:6c:55:b9:14:49:95:e9:32:ec:59:86:25:27:15:
f1:1a:c7:78:3f:5b:89:56:0c:0b:2a:be:17:c2:19:46:b4:55:
85:99:2f:28:bd:6b:e5:52:61:99:53:75:39:8b:02:4c:d3:95:
89:5c:a4:ed:5f:2f:d6:d7:c5:cc:cf:e7:17:7b:cb:6d:a9:c4:
79:5b:f6:5c:d1:e0:33:7f:e3:e3:93:97:b6:54:4a:4f:22:e1:
88:fc:3f:fd:95:cf:c7:06:b0:1f:ed:37:21:94:c6:a1:03:3a:
f6:f6:15:3b:78:07:4f:a3:32:5e:6c:1a:6b:07:10:16:95:e6:
fb:4a:4f:0d:eb:03:4f:a2:54:fe:9e:2d:ca:35:9b:91:b4:6f:
5f:c8:1a:38:2f:f3:70:4e:8a:76:2c:13:82:be:64:a5:b1:fa:
5e:9d:8a:85:9c:61:92:01:26:36:79:8d:f0:c3:4b:de:13:47:
b3:bc:c5:ee:8b:25:6d:f7:ad:be:ba:44:20:95:b8:df:42:02:
21:8c:2c:6b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1z03w2J817c9uo4bq1WqqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA0MTExNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWIxMjhkYTg2Zjg3MTgyOWFmZWM1YTdlOWIzYTFmNzczYjkyODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUAxPIMj1hGtaGN942HwWPgmEUC/
C5HK97p9m2kfZ+gKfgPZYZAEz0IeuK8DKiyCnDuA03/4RQMPCTQR9WIDr4obUdGL
rLqbmNbkV0g8dDRT5D2D+LyASMqRJWTsMXBZNpJYgS20S4MjK4gsXSySnc0QckYW
pOsDex2d6HLiK77jDuq5BfExGODC+XW7w0jA/84sxC2WZjDRcgvwapaCy/TTSHtN
ls9mJK0ugF6XrU+OIhWXHA32vrCJYB8X5BB/wMebnxohRgVJP937u+LXLxiLkJNJ
yuJO1G9A0Vu8SKUe0+dLobLSoiOCcnTMRJH8KANyKQRbdkZ0yGwRa7ORLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFmxKNqG+HGCmv7Fp+mzofdzuSgTMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV2JFbzJvYjRjWUthX3NXbjZiT2g5M081S0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJldnlVRzKmHaENpldvA
oRp/Pw277Ufd2EZ0BkPwPfF/uoig6lzYGQdF32nzSlZcAQau6JsJEqLX22BsVbkU
SZXpMuxZhiUnFfEax3g/W4lWDAsqvhfCGUa0VYWZLyi9a+VSYZlTdTmLAkzTlYlc
pO1fL9bXxczP5xd7y22pxHlb9lzR4DN/4+OTl7ZUSk8i4Yj8P/2Vz8cGsB/tNyGU
xqEDOvb2FTt4B0+jMl5sGmsHEBaV5vtKTw3rA0+iVP6eLco1m5G0b1/IGjgv83BO
inYsE4K+ZKWx+l6dioWcYZIBJjZ5jfDDS94TR7O8xe6LJW33rb66RCCVuN9CAiGM
LGs=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:37 2025 by rpki-client