Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gS2qZtXNxepgV9A-c4ZrUkzxt1w.roa
File: gS2qZtXNxepgV9A-c4ZrUkzxt1w.roa (raw, json)
Hash identifier: uKfC6Kjkm81bh9X3uU8kHUvY4Zv8wMrRkaVgeb12BF0=
Subject key identifier: 81:2D:AA:66:D5:CD:C5:EA:60:57:D0:3E:73:86:6B:52:4C:F1:B7:5C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDA97366A3683F0508B4B50EFAC7E7182
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gS2qZtXNxepgV9A-c4ZrUkzxt1w.roa
Signing time: Sun 14 Apr 2024 03:12:06 +0000
ROA not before: Sun 14 Apr 2024 03:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:da:97:36:6a:36:83:f0:50:8b:4b:50:ef:ac:7e:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 03:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=812daa66d5cdc5ea6057d03e73866b524cf1b75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:2e:0b:7c:c6:18:05:72:87:53:8d:2b:9b:
80:a7:b7:e1:12:8d:2e:e9:1d:35:e4:f9:75:e8:7b:
8a:09:2d:2a:16:3b:f8:b0:6f:1a:cf:66:76:74:b2:
69:50:79:8f:d9:67:9d:f5:01:1b:cf:57:ba:9a:fc:
f1:98:18:79:f2:34:14:ee:06:c0:a6:f6:d8:83:b2:
4f:a9:e6:72:03:96:88:47:6c:10:bc:92:06:68:a2:
5c:d5:3a:73:58:1f:4e:5c:77:54:ca:7e:18:75:03:
80:ee:97:25:2c:dd:1a:eb:5e:c4:fd:37:37:03:41:
ef:31:fe:d2:78:bd:9f:dc:ed:ee:50:24:9a:fe:4a:
44:f5:17:3d:48:09:8b:eb:74:42:f9:e1:27:5b:12:
85:02:44:cf:1e:4c:0f:bf:08:20:a4:a0:25:18:ab:
a1:a4:fa:ba:cd:07:59:8e:90:84:b1:2d:f2:84:4b:
07:03:d1:18:c9:dc:1e:6e:fc:21:05:1d:e4:0f:cb:
3a:35:a8:a4:e4:97:fb:8c:06:98:f4:da:32:bd:7c:
ae:a6:29:41:5c:c9:4b:2d:7c:42:38:96:19:25:cd:
5a:d8:2c:01:e1:a8:dd:d0:f9:22:cf:fb:15:d7:a3:
32:12:67:c1:b6:f1:8a:ed:b2:be:83:3a:95:7a:56:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:AA:66:D5:CD:C5:EA:60:57:D0:3E:73:86:6B:52:4C:F1:B7:5C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gS2qZtXNxepgV9A-c4ZrUkzxt1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:aa:e3:f5:a9:e5:4c:bf:7e:5e:1d:d5:4f:5c:b6:a2:48:38:
1c:98:e9:90:8d:9b:88:e4:05:9a:0d:90:9a:09:2e:a4:2b:2b:
78:4c:38:72:79:c2:9b:7b:e8:52:4f:ae:1a:66:47:c5:3d:45:
55:f0:32:82:c5:93:ff:71:b9:c2:28:f0:d2:96:6e:47:27:ba:
86:56:81:37:62:7c:e3:96:15:c5:86:59:0b:d3:d0:2d:22:ce:
82:ec:e2:e2:bb:48:59:fe:5f:80:04:3c:8c:73:d9:bd:0a:e8:
4d:46:cf:69:90:81:36:f5:38:f5:24:1a:83:87:97:38:56:3e:
58:55:23:23:67:91:31:66:5a:bb:2e:3d:fb:27:1b:a2:1b:8a:
62:98:ec:a1:50:14:9d:1e:6e:fa:fe:e2:1e:af:ff:49:d7:c4:
2f:a5:22:74:f4:74:df:ad:3f:f7:d9:89:00:d2:02:59:7c:16:
06:46:25:96:9f:7e:77:d9:2c:28:34:f2:ff:5f:53:82:3b:79:
8a:43:ff:d2:a8:40:a7:ce:2a:f3:15:7e:87:66:bd:fc:11:2a:
8a:f4:f0:71:c5:4d:78:f1:76:2c:4b:09:93:bb:c3:2c:c1:ef:
ad:2c:e0:2f:73:21:0a:cc:7c:5d:ce:f4:fd:59:c9:93:b2:ab:
d8:bf:bf:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7alzZqNoPwUItLUO+sfnGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDE0MDMxMjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJkYWE2NmQ1Y2RjNWVhNjA1N2QwM2U3Mzg2NmI1MjRjZjFiNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcAuC3zGGAVyh1ONK5uAp7fhEo0u
6R015Pl16HuKCS0qFjv4sG8az2Z2dLJpUHmP2Wed9QEbz1e6mvzxmBh58jQU7gbA
pvbYg7JPqeZyA5aIR2wQvJIGaKJc1TpzWB9OXHdUyn4YdQOA7pclLN0a617E/Tc3
A0HvMf7SeL2f3O3uUCSa/kpE9Rc9SAmL63RC+eEnWxKFAkTPHkwPvwggpKAlGKuh
pPq6zQdZjpCEsS3yhEsHA9EYydwebvwhBR3kD8s6Naik5Jf7jAaY9NoyvXyupilB
XMlLLXxCOJYZJc1a2CwB4ajd0Pkiz/sV16MyEmfBtvGK7bK+gzqVelYXiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIEtqmbVzcXqYFfQPnOGa1JM8bdcMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZ1MycVp0WE54ZXBnVjlBLWM0WnJVa3p4dDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEqq4/Wp5Uy/fl4d1U9c
tqJIOByY6ZCNm4jkBZoNkJoJLqQrK3hMOHJ5wpt76FJPrhpmR8U9RVXwMoLFk/9x
ucIo8NKWbkcnuoZWgTdifOOWFcWGWQvT0C0izoLs4uK7SFn+X4AEPIxz2b0K6E1G
z2mQgTb1OPUkGoOHlzhWPlhVIyNnkTFmWrsuPfsnG6IbimKY7KFQFJ0ebvr+4h6v
/0nXxC+lInT0dN+tP/fZiQDSAll8FgZGJZaffnfZLCg08v9fU4I7eYpD/9KoQKfO
KvMVfodmvfwRKor08HHFTXjxdixLCZO7wyzB760s4C9zIQrMfF3O9P1ZyZOyq9i/
v4E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:44 2025 by rpki-client