Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_7R9BY84T0ilM0z4JAgjiSZ9l8Q.roa
File: _7R9BY84T0ilM0z4JAgjiSZ9l8Q.roa (raw, json)
Hash identifier: UOrr7GnyzZMhNsmt4Hv6sUFSi2vTCP3TKHW5ysAP7uY=
Subject key identifier: FF:B4:7D:05:8F:38:4F:48:A5:33:4C:F8:24:08:23:89:26:7D:97:C4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D20FFCE3F7362B978B3F3400656131525
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_7R9BY84T0ilM0z4JAgjiSZ9l8Q.roa
Signing time: Fri 19 Jan 2024 09:14:11 +0000
ROA not before: Fri 19 Jan 2024 09:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:ff:ce:3f:73:62:b9:78:b3:f3:40:06:56:13:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 09:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffb47d058f384f48a5334cf824082389267d97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:cb:b7:a0:25:4c:10:28:ca:97:b0:fd:38:
fc:f3:e8:63:63:f6:84:4e:40:b2:4e:1f:25:83:4d:
6c:f2:32:89:7c:7b:36:bb:a8:b9:72:2e:5d:9e:40:
7f:3b:1b:00:ba:a0:64:ff:6b:8c:87:d6:7b:4e:25:
4a:f2:c7:54:e2:8b:ff:2d:fb:44:d4:a3:00:26:dd:
90:4e:0f:9f:02:3b:f6:7a:3a:a2:39:c6:8c:b5:42:
a5:b1:af:eb:9f:9c:8e:57:cf:70:ef:9d:cb:e8:26:
15:c2:96:b8:40:90:e3:c7:6c:3f:b3:cb:25:15:ec:
e0:ad:62:c3:25:34:51:8c:87:35:8a:d9:08:26:1c:
fe:3b:95:71:99:1d:f5:ea:ec:1a:e8:66:3c:4c:a0:
ef:18:62:60:1f:83:f8:40:ad:e4:3e:cc:e9:39:46:
6a:c8:3e:b6:aa:bb:de:34:13:26:9d:69:10:53:91:
15:bc:60:ab:e1:f1:ae:4b:b4:e7:02:fa:d9:19:6e:
5a:33:37:a2:c9:de:b4:5f:91:21:2a:0f:0d:6c:6c:
a4:d5:e7:7a:ce:4e:59:19:f5:a9:f8:04:d9:40:2d:
73:ba:da:9f:aa:d1:c7:3b:39:da:07:be:80:c9:40:
79:b2:64:b1:d6:f1:50:a3:04:70:7b:8b:e5:02:40:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:7D:05:8F:38:4F:48:A5:33:4C:F8:24:08:23:89:26:7D:97:C4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_7R9BY84T0ilM0z4JAgjiSZ9l8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:02:cd:25:6c:82:07:69:aa:f5:e6:6d:a9:82:2f:3d:ba:a7:
d4:4c:71:1f:fc:69:f1:43:87:15:1a:9e:11:1b:9f:c1:63:87:
49:f4:da:31:8f:95:8d:8f:68:b4:ca:b2:da:5e:69:a6:26:d9:
ad:e8:2d:b3:e5:97:d7:ab:fb:88:db:68:51:78:f4:bf:e8:2c:
9d:56:9c:a1:87:70:ad:88:9a:dc:6b:e9:f1:fc:3c:1c:97:4c:
bf:b8:83:7c:9d:5a:3f:8f:d5:58:af:9e:90:c0:9a:1a:11:e0:
01:e5:25:5e:9f:27:06:df:10:28:f2:ff:c5:21:10:e4:98:14:
49:3a:dd:3f:fa:15:09:bc:a1:3b:2f:38:68:cd:e9:3d:a4:18:
61:70:38:59:ce:25:a1:f1:91:b8:04:d2:a2:bf:4e:2c:d2:8c:
6a:1a:21:f6:be:85:40:3f:1d:6b:6e:7b:58:92:28:9e:95:cc:
75:89:1d:78:4c:cf:78:73:ca:5f:38:48:93:ed:60:f8:0d:45:
23:57:b9:df:a1:0b:25:ec:85:2b:c4:3a:10:b5:c8:48:2e:f1:
62:89:6c:7a:e3:8b:89:bf:32:0f:66:30:23:b2:a8:67:c5:b1:
53:af:37:49:d7:99:8f:c3:ac:dd:de:bb:85:5a:74:54:15:70:
fd:63:1e:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0g/84/c2K5eLPzQAZWExUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE5MDkxNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmI0N2QwNThmMzg0ZjQ4YTUzMzRjZjgyNDA4MjM4OTI2N2Q5N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPfLt6AlTBAoypew/Tj88+hjY/aE
TkCyTh8lg01s8jKJfHs2u6i5ci5dnkB/OxsAuqBk/2uMh9Z7TiVK8sdU4ov/LftE
1KMAJt2QTg+fAjv2ejqiOcaMtUKlsa/rn5yOV89w753L6CYVwpa4QJDjx2w/s8sl
FezgrWLDJTRRjIc1itkIJhz+O5VxmR316uwa6GY8TKDvGGJgH4P4QK3kPszpOUZq
yD62qrveNBMmnWkQU5EVvGCr4fGuS7TnAvrZGW5aMzeiyd60X5EhKg8NbGyk1ed6
zk5ZGfWp+ATZQC1zutqfqtHHOznaB76AyUB5smSx1vFQowRwe4vlAkAfpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP+0fQWPOE9IpTNM+CQII4kmfZfEMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvXzdSOUJZODRUMGlsTTB6NEpBZ2ppU1o5bDhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABICzSVsggdpqvXmbamC
Lz26p9RMcR/8afFDhxUanhEbn8Fjh0n02jGPlY2PaLTKstpeaaYm2a3oLbPll9er
+4jbaFF49L/oLJ1WnKGHcK2Imtxr6fH8PByXTL+4g3ydWj+P1VivnpDAmhoR4AHl
JV6fJwbfECjy/8UhEOSYFEk63T/6FQm8oTsvOGjN6T2kGGFwOFnOJaHxkbgE0qK/
TizSjGoaIfa+hUA/HWtue1iSKJ6VzHWJHXhMz3hzyl84SJPtYPgNRSNXud+hCyXs
hSvEOhC1yEgu8WKJbHrji4m/Mg9mMCOyqGfFsVOvN0nXmY/DrN3eu4VadFQVcP1j
Hpg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:02 2025 by rpki-client