Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lLp3Jkptp6f9lRlJfbXuY-6FT44.roa
File: lLp3Jkptp6f9lRlJfbXuY-6FT44.roa (raw, json)
Hash identifier: wsArcVON1zTMqggIPpd23Fr+mXfNoCip252t8qN3yzY=
Subject key identifier: 94:BA:77:26:4A:6D:A7:A7:FD:95:19:49:7D:B5:EE:63:EE:85:4F:8E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8AFA2413189DD6415441749293182FD2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lLp3Jkptp6f9lRlJfbXuY-6FT44.roa
Signing time: Thu 21 Dec 2023 06:04:58 +0000
ROA not before: Thu 21 Dec 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8af9:79a5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:fa:24:13:18:9d:d6:41:54:41:74:92:93:18:2f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ba77264a6da7a7fd9519497db5ee63ee854f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:03:ae:09:7f:0f:19:7e:1d:85:42:fc:f8:
f1:b9:7a:3e:5b:96:cb:4b:b0:ad:65:1c:8f:1b:3f:
85:a5:b3:48:f8:64:17:b0:ed:89:4e:8a:fb:e4:bd:
84:f2:ec:6d:05:2b:a3:5b:79:39:08:ae:32:c5:21:
e3:8d:40:b7:f7:52:e2:b2:9b:87:5c:4a:f4:ef:0a:
1a:57:63:0c:a2:92:c1:e0:93:26:17:1b:a8:96:ce:
5b:f0:ab:d9:f4:9e:a2:33:3e:e3:f7:22:9b:cf:23:
1e:b3:bb:1f:1d:74:0b:b6:f4:4a:fc:e9:3d:a1:5a:
72:6f:c3:81:e6:5f:ef:49:28:66:33:37:78:5b:c6:
98:2b:02:ac:69:08:f9:a2:d0:58:fe:37:08:7f:63:
cb:9d:02:ef:e9:82:f8:36:90:c8:71:b4:2a:e6:22:
bd:79:ca:80:a6:94:1c:01:1c:b8:70:1c:ad:4b:2f:
ef:33:cd:f8:b5:9f:43:e5:c5:ed:a3:5f:47:dd:c8:
fa:3d:34:f3:b1:0e:50:8e:64:59:48:07:c4:10:cb:
55:85:bc:da:d7:b4:d9:da:8b:33:c4:ba:09:92:94:
ea:5b:89:0d:11:1d:bf:7f:79:17:ed:d4:f0:83:65:
ff:00:10:e3:fa:8f:0f:4b:a1:b1:55:1d:db:9c:b1:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:77:26:4A:6D:A7:A7:FD:95:19:49:7D:B5:EE:63:EE:85:4F:8E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lLp3Jkptp6f9lRlJfbXuY-6FT44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ca:b5:53:21:df:f6:15:5e:21:c5:0d:9a:51:0b:de:d2:e2:
e4:9c:88:cc:c2:25:4a:e4:91:e7:fa:91:30:2c:af:38:e8:b5:
0e:14:34:f7:2f:51:f5:f9:92:c1:ce:13:8f:dc:b4:dd:b4:1c:
47:a0:77:bd:ba:bb:b2:04:df:27:53:9c:c7:a3:1d:7e:a7:fd:
a7:86:3e:6e:4f:f7:13:af:d6:b5:a5:09:67:22:5b:8d:ce:39:
ed:b7:c3:29:c0:dd:bd:bc:e3:c9:c8:76:18:32:25:5d:bc:32:
ab:48:ec:26:b5:a3:f9:3e:04:7e:d4:a5:d5:9a:ea:d0:22:58:
a9:47:f7:c5:fc:af:3a:34:c1:c1:0c:b7:93:ce:62:d2:ff:54:
34:5d:cb:2f:b1:55:c7:26:85:8b:ce:2d:87:fd:db:c3:fa:d2:
a1:f5:16:82:98:ce:32:78:83:21:32:82:bc:09:5d:28:7e:28:
9e:87:ca:0b:11:13:e3:de:e1:f0:fb:9f:e9:f6:c1:1e:34:82:
18:8b:14:9c:3f:ad:9f:55:aa:8a:5b:9f:10:2c:3f:6b:3e:57:
b2:21:67:24:e8:3b:bf:0d:ac:d8:09:55:8d:b5:99:ac:e3:d1:
4d:b3:ab:3e:99:25:a8:63:3a:3f:46:7d:73:08:f0:4d:6e:8e:
43:44:87:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyK+iQTGJ3WQVRBdJKTGC/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGJhNzcyNjRhNmRhN2E3ZmQ5NTE5NDk3ZGI1ZWU2M2VlODU0ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYMDrgl/Dxl+HYVC/PjxuXo+W5bL
S7CtZRyPGz+FpbNI+GQXsO2JTor75L2E8uxtBSujW3k5CK4yxSHjjUC391LispuH
XEr07woaV2MMopLB4JMmFxuols5b8KvZ9J6iMz7j9yKbzyMes7sfHXQLtvRK/Ok9
oVpyb8OB5l/vSShmMzd4W8aYKwKsaQj5otBY/jcIf2PLnQLv6YL4NpDIcbQq5iK9
ecqAppQcARy4cBytSy/vM834tZ9D5cXto19H3cj6PTTzsQ5QjmRZSAfEEMtVhbza
17TZ2oszxLoJkpTqW4kNER2/f3kX7dTwg2X/ABDj+o8PS6GxVR3bnLHMGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJS6dyZKbaen/ZUZSX217mPuhU+OMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbExwM0prcHRwNmY5bFJsSmZiWHVZLTZGVDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADPKtVMh3/YVXiHFDZpR
C97S4uSciMzCJUrkkef6kTAsrzjotQ4UNPcvUfX5ksHOE4/ctN20HEegd726u7IE
3ydTnMejHX6n/aeGPm5P9xOv1rWlCWciW43OOe23wynA3b2848nIdhgyJV28MqtI
7Ca1o/k+BH7UpdWa6tAiWKlH98X8rzo0wcEMt5POYtL/VDRdyy+xVccmhYvOLYf9
28P60qH1FoKYzjJ4gyEygrwJXSh+KJ6HygsRE+Pe4fD7n+n2wR40ghiLFJw/rZ9V
qopbnxAsP2s+V7IhZyToO78NrNgJVY21mazj0U2zqz6ZJahjOj9GfXMI8E1ujkNE
hyU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:33 2025 by rpki-client