Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzegskWqYtIhtoQbJXPT_uk7Xas.roa
File: gzegskWqYtIhtoQbJXPT_uk7Xas.roa (raw, json)
Hash identifier: M/8jhNZNGs1g+ZZXWpJlqmXUPPn8901H6aG6G8Xq6oU=
Subject key identifier: 83:37:A0:B2:45:AA:62:D2:21:B6:84:1B:25:73:D3:FE:E9:3B:5D:AB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6C4B1AB0E9D5BA80EE3A45335DFC982F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzegskWqYtIhtoQbJXPT_uk7Xas.roa
Signing time: Sat 23 Mar 2024 17:10:45 +0000
ROA not before: Sat 23 Mar 2024 17:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:4b:1a:b0:e9:d5:ba:80:ee:3a:45:33:5d:fc:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 17:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8337a0b245aa62d221b6841b2573d3fee93b5dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:a9:13:79:f6:3b:07:b2:04:25:5c:88:76:
ae:ac:e6:0d:ce:da:b5:c0:b2:df:81:64:e6:33:3f:
13:2d:ff:7d:e7:fe:65:a6:75:be:79:48:74:47:f8:
4d:b0:c7:60:ea:90:52:85:f6:5b:fb:14:8e:88:95:
39:88:ad:1c:f9:e7:28:71:0a:66:88:39:f9:ba:65:
84:d7:0a:15:36:f9:4f:b5:00:59:50:f9:53:10:f1:
a8:2e:e0:ae:19:c1:73:bd:cf:06:5f:ef:46:5d:ab:
46:94:02:95:87:aa:a5:9b:82:96:ca:10:b6:1f:c0:
df:a0:87:3a:34:89:13:d2:b2:4a:30:fb:1a:0c:94:
f7:c0:6d:71:dc:16:ce:b5:31:31:ab:dd:20:f6:e8:
41:a6:6c:6f:34:e7:c6:8d:e3:74:2a:95:8b:a1:06:
5c:20:3c:44:62:a0:06:c2:f7:9a:29:2e:92:4b:f4:
9b:df:63:00:a5:f1:19:fd:05:e8:ee:f0:13:a4:a3:
d7:b3:df:84:d9:17:a2:9d:2e:6b:77:27:da:5c:c6:
ae:bb:fa:cd:89:1c:0e:e0:a7:1a:e0:7b:86:ca:f6:
06:c2:2d:b5:0a:82:05:d6:7e:70:9d:ce:ed:2a:57:
8f:fe:e5:90:c3:3a:13:16:f5:22:27:b1:6f:41:07:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:A0:B2:45:AA:62:D2:21:B6:84:1B:25:73:D3:FE:E9:3B:5D:AB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzegskWqYtIhtoQbJXPT_uk7Xas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:19:29:66:4d:bc:d1:ce:6f:89:e0:4b:2b:40:0b:a0:7c:71:
2b:f2:a4:ac:dd:8e:aa:24:50:0a:7c:17:7a:b0:3c:2e:93:ef:
32:2c:d6:86:45:e6:03:d3:8b:c3:ac:88:b9:90:1e:78:e4:b9:
b4:a0:fa:ee:ce:59:4c:cd:2d:b9:f3:e2:b3:7b:0c:1f:01:47:
9b:7a:4e:6d:33:25:a7:3c:58:11:8f:91:25:c4:77:85:6a:6c:
6c:35:06:32:1a:e7:65:f4:60:f0:83:b4:ab:b9:dc:78:17:21:
9c:15:93:f4:73:a5:4d:10:af:4c:30:31:b8:a4:6d:42:f2:31:
46:76:73:75:66:24:21:10:0b:de:c3:e0:3c:b7:e9:87:27:13:
7e:36:8b:03:ba:ba:56:cd:c4:50:5e:09:22:5f:7b:4d:58:75:
6f:58:8e:53:62:d0:ae:c3:8c:5d:7e:b5:b0:cd:20:c9:83:02:
65:2e:f5:b3:f2:5b:40:2c:07:45:c5:f6:b3:b6:c1:98:74:59:
cb:e6:ad:40:8e:fa:5d:8f:18:44:af:40:c9:34:66:cf:1c:2b:
06:ea:d5:bc:8f:a0:3e:76:19:c1:97:6b:9c:e5:1f:83:7e:8c:
a1:d1:1c:d5:24:d3:33:66:61:2f:e2:df:ba:6e:fb:83:c4:a9:
de:e2:bf:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5sSxqw6dW6gO46RTNd/JgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIzMTcxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzM3YTBiMjQ1YWE2MmQyMjFiNjg0MWIyNTczZDNmZWU5M2I1ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeCpE3n2OweyBCVciHaurOYNztq1
wLLfgWTmMz8TLf995/5lpnW+eUh0R/hNsMdg6pBShfZb+xSOiJU5iK0c+ecocQpm
iDn5umWE1woVNvlPtQBZUPlTEPGoLuCuGcFzvc8GX+9GXatGlAKVh6qlm4KWyhC2
H8DfoIc6NIkT0rJKMPsaDJT3wG1x3BbOtTExq90g9uhBpmxvNOfGjeN0KpWLoQZc
IDxEYqAGwveaKS6SS/Sb32MApfEZ/QXo7vATpKPXs9+E2ReinS5rdyfaXMauu/rN
iRwO4Kca4HuGyvYGwi21CoIF1n5wnc7tKleP/uWQwzoTFvUiJ7FvQQch5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIM3oLJFqmLSIbaEGyVz0/7pO12rMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZ3plZ3NrV3FZdElodG9RYkpYUFRfdWs3WGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABYZKWZNvNHOb4ngSytA
C6B8cSvypKzdjqokUAp8F3qwPC6T7zIs1oZF5gPTi8OsiLmQHnjkubSg+u7OWUzN
Lbnz4rN7DB8BR5t6Tm0zJac8WBGPkSXEd4VqbGw1BjIa52X0YPCDtKu53HgXIZwV
k/RzpU0Qr0wwMbikbULyMUZ2c3VmJCEQC97D4Dy36YcnE342iwO6ulbNxFBeCSJf
e01YdW9YjlNi0K7DjF1+tbDNIMmDAmUu9bPyW0AsB0XF9rO2wZh0WcvmrUCO+l2P
GESvQMk0Zs8cKwbq1byPoD52GcGXa5zlH4N+jKHRHNUk0zNmYS/i37pu+4PEqd7i
vyo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:42 2025 by rpki-client