Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f8LFh5631m35mlLcv8Srx1eogQw.roa
File: f8LFh5631m35mlLcv8Srx1eogQw.roa (raw, json)
Hash identifier: GdT5oW+i4jBQeFOAVyHihpTTsVoY1hwG6d/bDY96Hoc=
Subject key identifier: 7F:C2:C5:87:9E:B7:D6:6D:F9:9A:52:DC:BF:C4:AB:C7:57:A8:81:0C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC1076AF986FE698B47F39CF30849C91A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f8LFh5631m35mlLcv8Srx1eogQw.roa
Signing time: Tue 09 Apr 2024 04:04:32 +0000
ROA not before: Tue 09 Apr 2024 04:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:c107:2f45/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:07:6a:f9:86:fe:69:8b:47:f3:9c:f3:08:49:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 04:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fc2c5879eb7d66df99a52dcbfc4abc757a8810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:52:10:38:6f:9f:e5:cf:d4:59:26:bc:eb:
7b:3c:1b:00:12:ad:8a:90:c7:44:88:7e:f5:52:f3:
22:29:79:22:2c:eb:67:f0:a8:f4:a4:eb:4d:c6:76:
19:3b:9e:d2:d7:31:b5:95:d5:14:91:f0:e2:f0:48:
d7:e5:03:fe:41:11:71:15:de:e7:f8:24:e3:ac:21:
c6:5f:c7:d3:78:a6:c5:b4:be:8e:37:b2:58:db:6d:
ce:b6:49:4a:54:5c:33:9b:49:21:75:9f:70:29:3d:
a7:dd:62:39:3a:a7:15:a0:fc:54:ac:bc:05:fa:23:
6e:ad:e5:04:7c:2f:c2:6e:8e:1e:1e:70:7d:2e:f1:
07:bb:e5:26:5d:2d:59:79:38:17:99:c2:83:ab:31:
e1:4d:6d:32:6f:af:83:a5:00:d9:ca:a1:81:f4:fd:
fe:d0:61:4f:27:7f:f7:c2:de:37:03:0f:53:e6:26:
f3:bf:9a:2a:55:00:dd:50:12:68:bf:ac:b8:21:fc:
d7:f5:03:66:04:3e:5f:4a:03:7a:50:e0:25:3a:f8:
03:f4:9b:0e:87:bb:e1:a5:0e:0c:cd:ca:36:0c:76:
64:e1:cf:e9:36:68:c7:e4:d4:15:d6:29:51:73:8c:
25:a4:16:d5:7c:95:d6:40:5b:f0:f5:67:ae:20:b4:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:C5:87:9E:B7:D6:6D:F9:9A:52:DC:BF:C4:AB:C7:57:A8:81:0C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f8LFh5631m35mlLcv8Srx1eogQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:55:0e:3b:88:43:81:8c:ed:3e:86:4b:56:e7:36:e6:fd:72:
da:23:38:12:b5:a9:02:f5:f8:f3:85:88:52:90:eb:61:ee:c7:
95:9f:11:bf:a4:bb:74:0c:56:38:26:1d:ec:90:ec:83:44:6e:
4d:26:06:13:ee:49:f6:89:20:72:79:f1:cc:30:20:92:f9:3a:
74:d0:f0:9b:7f:c7:a9:9f:6a:3f:2e:a4:e4:8b:72:b4:f6:f5:
ca:76:de:44:fb:4b:f6:6f:16:f3:3a:cf:32:1c:c5:eb:e5:e9:
76:3d:00:bb:6e:6a:61:d2:14:81:b5:29:b5:36:69:2e:ad:46:
d4:01:3a:bf:9c:55:93:de:aa:cc:28:dd:82:67:ee:02:a0:33:
5a:e6:4a:09:62:6e:b4:1b:9d:ac:76:15:5e:ca:94:eb:29:e8:
bd:d0:c9:67:b8:b8:7e:f4:15:6b:e1:e0:49:18:8c:51:23:fa:
83:df:1e:43:c9:79:2e:3b:cf:bc:48:16:ff:34:1e:3f:73:7b:
ec:f4:fc:76:fd:5c:23:53:38:0f:6a:37:8d:1c:32:c3:20:2a:
62:92:03:52:0e:05:38:1a:19:04:a2:c9:04:2a:82:1e:80:a9:
52:ea:d6:d2:7d:ab:30:a7:f6:50:43:ea:56:aa:12:3c:2d:6c:
b3:14:9e:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7BB2r5hv5pi0fznPMISckaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA5MDQwNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmMyYzU4NzllYjdkNjZkZjk5YTUyZGNiZmM0YWJjNzU3YTg4MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLFSEDhvn+XP1FkmvOt7PBsAEq2K
kMdEiH71UvMiKXkiLOtn8Kj0pOtNxnYZO57S1zG1ldUUkfDi8EjX5QP+QRFxFd7n
+CTjrCHGX8fTeKbFtL6ON7JY223OtklKVFwzm0khdZ9wKT2n3WI5OqcVoPxUrLwF
+iNureUEfC/Cbo4eHnB9LvEHu+UmXS1ZeTgXmcKDqzHhTW0yb6+DpQDZyqGB9P3+
0GFPJ3/3wt43Aw9T5ibzv5oqVQDdUBJov6y4IfzX9QNmBD5fSgN6UOAlOvgD9JsO
h7vhpQ4Mzco2DHZk4c/pNmjH5NQV1ilRc4wlpBbVfJXWQFvw9WeuILRLoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH/CxYeet9Zt+ZpS3L/Eq8dXqIEMMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZjhMRmg1NjMxbTM1bWxMY3Y4U3J4MWVvZ1F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADlVDjuIQ4GM7T6GS1bn
Nub9ctojOBK1qQL1+POFiFKQ62Hux5WfEb+ku3QMVjgmHeyQ7INEbk0mBhPuSfaJ
IHJ58cwwIJL5OnTQ8Jt/x6mfaj8upOSLcrT29cp23kT7S/ZvFvM6zzIcxevl6XY9
ALtuamHSFIG1KbU2aS6tRtQBOr+cVZPeqswo3YJn7gKgM1rmSglibrQbnax2FV7K
lOsp6L3QyWe4uH70FWvh4EkYjFEj+oPfHkPJeS47z7xIFv80Hj9ze+z0/Hb9XCNT
OA9qN40cMsMgKmKSA1IOBTgaGQSiyQQqgh6AqVLq1tJ9qzCn9lBD6laqEjwtbLMU
niE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:39 2025 by rpki-client