Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aLVxynDPWh6WAKP-xGzqPEyFUeA.roa
File: aLVxynDPWh6WAKP-xGzqPEyFUeA.roa (raw, json)
Hash identifier: ExN6AzqsxWpoydUXLU1vNcx/88TCjBOMfbjdax3t5bo=
Subject key identifier: 68:B5:71:CA:70:CF:5A:1E:96:00:A3:FE:C4:6C:EA:3C:4C:85:51:E0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4654811DE67CAFE649840C4A70D69BF3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aLVxynDPWh6WAKP-xGzqPEyFUeA.roa
Signing time: Fri 26 Jan 2024 15:12:39 +0000
ROA not before: Fri 26 Jan 2024 15:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:54:81:1d:e6:7c:af:e6:49:84:0c:4a:70:d6:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 15:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b571ca70cf5a1e9600a3fec46cea3c4c8551e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:18:4d:11:9e:68:eb:a4:60:b0:c0:94:76:
e2:b8:3a:c2:2d:d6:0d:91:40:42:4a:35:99:74:2a:
f9:ef:76:d0:03:4d:87:76:85:e0:3e:f6:8c:10:f0:
a4:96:ec:6a:e5:41:62:a9:70:a7:02:40:97:31:1a:
4a:96:be:dc:c2:c5:18:d6:c8:65:d9:46:92:ee:82:
ba:97:65:f4:69:75:1e:52:2b:5f:b7:37:01:4d:7f:
cf:eb:b1:b6:bc:fa:2c:6c:49:51:cf:ac:f9:f0:71:
6c:3a:59:01:eb:d4:78:c2:bf:69:7a:d6:80:4c:65:
40:31:de:c7:5b:6a:50:b3:4b:87:c4:cb:19:b4:aa:
84:1d:1e:99:54:a5:9d:12:6f:62:74:7c:95:6c:e4:
8e:20:e5:0d:71:2f:37:e0:bf:8f:54:2d:44:64:23:
3f:cb:50:62:83:be:08:c8:90:71:9f:2f:c8:4e:87:
0a:48:e9:65:64:0c:1d:3a:4a:83:cb:dc:84:3b:0c:
39:60:39:71:f7:cb:0b:fe:62:ac:41:0e:6a:b2:f2:
52:f1:28:72:d1:54:25:73:58:3f:5e:50:65:bc:b6:
a9:21:6c:a7:43:a8:5e:13:a2:26:d1:34:f3:38:09:
c4:b7:33:f5:a0:a7:2e:c0:ea:6a:ae:0a:b5:99:7d:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:71:CA:70:CF:5A:1E:96:00:A3:FE:C4:6C:EA:3C:4C:85:51:E0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aLVxynDPWh6WAKP-xGzqPEyFUeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:c9:62:e6:96:7a:bf:66:50:16:01:54:ec:c3:05:ac:cd:93:
3a:0c:4c:8c:fb:17:50:50:ae:b5:a0:c2:b6:63:38:ae:ea:fb:
1d:33:8e:91:10:cc:a7:7d:5b:1b:77:99:47:42:dc:c8:52:c1:
df:46:48:c2:fe:3a:a6:11:64:0a:1f:31:ff:04:ec:d0:a1:39:
a7:02:d0:8e:22:50:31:a9:fd:e6:5b:b1:e7:27:9d:88:0a:9a:
f7:e1:df:40:a7:68:fc:30:22:8c:3d:2d:21:39:31:7c:b1:f1:
91:1f:2c:8b:2c:1a:94:76:bb:11:23:fb:25:eb:04:85:e9:64:
44:e4:78:58:b5:19:09:a4:90:9b:b8:9f:e3:f3:f5:68:92:54:
70:91:dd:72:59:a5:c8:4a:0c:72:ca:bb:96:4c:f4:05:dd:f2:
67:52:0a:a8:50:7a:b4:8f:a7:67:89:f4:c7:bb:3b:6b:2c:9f:
25:fd:dd:0b:1e:f6:5a:4a:44:ed:bc:23:21:46:7f:e6:c1:93:
f9:08:37:69:72:15:39:9c:2a:7e:c3:20:c6:b5:2e:7c:88:9a:
3c:0a:a6:c0:41:4d:c2:3f:30:8c:31:f0:be:e0:8f:3a:a8:89:
06:1d:29:0f:c5:63:04:d5:ef:ed:bb:e1:8f:43:49:7b:0b:82:
a2:5f:f2:ed
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1GVIEd5nyv5kmEDEpw1pvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI2MTUxMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGI1NzFjYTcwY2Y1YTFlOTYwMGEzZmVjNDZjZWEzYzRjODU1MWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTkYTRGeaOukYLDAlHbiuDrCLdYN
kUBCSjWZdCr573bQA02HdoXgPvaMEPCkluxq5UFiqXCnAkCXMRpKlr7cwsUY1shl
2UaS7oK6l2X0aXUeUitftzcBTX/P67G2vPosbElRz6z58HFsOlkB69R4wr9petaA
TGVAMd7HW2pQs0uHxMsZtKqEHR6ZVKWdEm9idHyVbOSOIOUNcS834L+PVC1EZCM/
y1Big74IyJBxny/ITocKSOllZAwdOkqDy9yEOww5YDlx98sL/mKsQQ5qsvJS8Shy
0VQlc1g/XlBlvLapIWynQ6heE6Im0TTzOAnEtzP1oKcuwOpqrgq1mX2fyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGi1ccpwz1oelgCj/sRs6jxMhVHgMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYUxWeHluRFBXaDZXQUtQLXhHenFQRXlGVWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJbJYuaWer9mUBYBVOzD
BazNkzoMTIz7F1BQrrWgwrZjOK7q+x0zjpEQzKd9Wxt3mUdC3MhSwd9GSML+OqYR
ZAofMf8E7NChOacC0I4iUDGp/eZbsecnnYgKmvfh30CnaPwwIow9LSE5MXyx8ZEf
LIssGpR2uxEj+yXrBIXpZETkeFi1GQmkkJu4n+Pz9WiSVHCR3XJZpchKDHLKu5ZM
9AXd8mdSCqhQerSPp2eJ9Me7O2ssnyX93Qse9lpKRO28IyFGf+bBk/kIN2lyFTmc
Kn7DIMa1LnyImjwKpsBBTcI/MIwx8L7gjzqoiQYdKQ/FYwTV7+274Y9DSXsLgqJf
8u0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:16 2025 by rpki-client