Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WsmP0eDqo2PFvbY00OgL4cvNbOY.roa
File: WsmP0eDqo2PFvbY00OgL4cvNbOY.roa (raw, json)
Hash identifier: 2B9BwEi9+YFhZ1jFtB/DMbBaeav0L4ZIjJeCh24zrXA=
Subject key identifier: 5A:C9:8F:D1:E0:EA:A3:63:C5:BD:B6:34:D0:E8:0B:E1:CB:CD:6C:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D935E6CF3338730AA07DFADE1F5B40DF2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WsmP0eDqo2PFvbY00OgL4cvNbOY.roa
Signing time: Sat 10 Feb 2024 14:14:15 +0000
ROA not before: Sat 10 Feb 2024 14:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:5e:6c:f3:33:87:30:aa:07:df:ad:e1:f5:b4:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 14:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ac98fd1e0eaa363c5bdb634d0e80be1cbcd6ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:4c:d6:15:66:f7:54:7c:24:98:52:a3:01:
a6:d0:38:96:97:42:fb:3d:32:60:33:76:0e:94:dd:
13:11:81:91:ea:e7:d2:53:fe:2a:aa:c8:0a:1f:df:
bb:e8:6d:0d:26:63:d9:f1:f4:89:46:b8:31:35:ba:
11:5f:54:7b:fd:f2:25:a8:43:ed:29:a1:03:e1:07:
7a:72:ff:12:8f:98:0c:bf:a3:a1:40:f4:c2:20:82:
77:86:8e:75:3f:2f:47:d9:28:2a:60:74:a0:8b:85:
d8:5d:57:bf:6d:5c:0f:12:76:e0:b3:8c:ef:c3:4b:
eb:35:d8:24:86:c8:bb:b4:1c:f5:f6:09:18:d2:a7:
3b:73:0e:09:76:1e:64:19:33:a8:51:fb:d3:62:20:
6b:19:2c:98:ea:31:43:97:43:56:74:15:67:47:03:
bb:6b:02:a7:b3:17:79:9a:7c:7f:fc:6e:75:96:2e:
59:81:52:ed:4c:8c:41:7e:53:35:b2:c7:e7:89:da:
80:c1:b8:4e:e4:10:8a:3f:b0:f1:68:8d:93:59:f1:
c0:75:54:0a:f6:01:ff:81:d4:6b:09:fb:57:0f:57:
b6:f7:22:04:cf:b4:1c:28:7d:0c:1d:a3:33:dc:f2:
17:db:1e:aa:37:7b:13:ee:19:01:f5:87:00:8e:a7:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:8F:D1:E0:EA:A3:63:C5:BD:B6:34:D0:E8:0B:E1:CB:CD:6C:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WsmP0eDqo2PFvbY00OgL4cvNbOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:a0:df:5d:ac:13:47:68:11:e5:f5:fd:14:f7:d1:f4:45:e8:
a0:b1:e1:e1:1c:4b:33:6e:1f:59:33:95:87:1d:a5:fe:fa:3e:
20:f1:f5:e0:d1:f8:c6:40:51:5d:f6:ea:58:f2:48:c8:71:56:
aa:b9:de:38:a7:47:3c:9a:4f:8f:b8:37:21:0f:74:05:a5:d3:
c1:8d:82:73:89:fc:7e:8a:be:bd:d6:0d:1a:6b:b6:54:65:8e:
6d:14:c3:80:4d:11:e1:c2:99:5c:5d:b5:60:32:ea:22:2c:15:
f7:47:db:a6:34:b8:7a:53:5a:b3:84:42:90:09:8a:aa:40:fa:
3a:91:62:e9:1f:1b:14:91:41:1c:c0:d7:d2:15:cb:d2:aa:ae:
2f:80:8c:d0:2f:14:65:40:3a:53:bf:75:a2:fe:c4:bf:d0:ec:
37:8c:cf:97:f2:08:20:c3:fe:91:4d:11:f1:e6:07:a2:e9:db:
87:f8:e4:20:b5:e8:3c:74:2f:34:3f:2e:c6:b3:0e:64:cd:1c:
ea:e7:f5:02:74:b4:a9:6c:d9:30:10:66:35:48:cc:ac:e7:c6:
47:4f:ab:38:81:89:09:9f:bd:e9:7b:3f:8e:da:16:b0:e0:6a:
9e:09:5f:e7:24:1d:4f:28:20:b6:a2:7c:b4:ac:97:83:0b:64:
36:da:ac:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2TXmzzM4cwqgffreH1tA3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEwMTQxNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWM5OGZkMWUwZWFhMzYzYzViZGI2MzRkMGU4MGJlMWNiY2Q2Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx19M1hVm91R8JJhSowGm0DiWl0L7
PTJgM3YOlN0TEYGR6ufSU/4qqsgKH9+76G0NJmPZ8fSJRrgxNboRX1R7/fIlqEPt
KaED4Qd6cv8Sj5gMv6OhQPTCIIJ3ho51Py9H2SgqYHSgi4XYXVe/bVwPEnbgs4zv
w0vrNdgkhsi7tBz19gkY0qc7cw4Jdh5kGTOoUfvTYiBrGSyY6jFDl0NWdBVnRwO7
awKnsxd5mnx//G51li5ZgVLtTIxBflM1ssfnidqAwbhO5BCKP7DxaI2TWfHAdVQK
9gH/gdRrCftXD1e29yIEz7QcKH0MHaMz3PIX2x6qN3sT7hkB9YcAjqejSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFrJj9Hg6qNjxb22NNDoC+HLzWzmMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV3NtUDBlRHFvMlBGdmJZMDBPZ0w0Y3ZOYk9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACig312sE0doEeX1/RT3
0fRF6KCx4eEcSzNuH1kzlYcdpf76PiDx9eDR+MZAUV326ljySMhxVqq53jinRzya
T4+4NyEPdAWl08GNgnOJ/H6Kvr3WDRprtlRljm0Uw4BNEeHCmVxdtWAy6iIsFfdH
26Y0uHpTWrOEQpAJiqpA+jqRYukfGxSRQRzA19IVy9Kqri+AjNAvFGVAOlO/daL+
xL/Q7DeMz5fyCCDD/pFNEfHmB6Lp24f45CC16Dx0LzQ/LsazDmTNHOrn9QJ0tKls
2TAQZjVIzKznxkdPqziBiQmfvel7P47aFrDgap4JX+ckHU8oILaifLSsl4MLZDba
rHo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:23 2025 by rpki-client