Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYtrn4-aVjuXimakPZ1PFBG11gQ.roa
File: lYtrn4-aVjuXimakPZ1PFBG11gQ.roa (raw, json)
Hash identifier: hZ2hismLibkkzhzAi5B9Cb6FOc87bFmY0gKqQFeHCss=
Subject key identifier: 95:8B:6B:9F:8F:9A:56:3B:97:8A:66:A4:3D:9D:4F:14:11:B5:D6:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E93F7F6794E84BB3393BBE27293E86A3A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYtrn4-aVjuXimakPZ1PFBG11gQ.roa
Signing time: Sun 31 Mar 2024 10:04:45 +0000
ROA not before: Sun 31 Mar 2024 10:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:93f7:856c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:f7:f6:79:4e:84:bb:33:93:bb:e2:72:93:e8:6a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 10:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958b6b9f8f9a563b978a66a43d9d4f1411b5d604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:67:a3:81:bd:f7:95:fc:3a:17:9a:e2:2d:
73:80:f0:27:88:c9:c6:08:38:e4:8e:ec:6e:40:bd:
8a:18:b3:23:7e:8d:85:6a:88:67:57:9d:6f:60:8f:
35:36:4c:42:40:b0:eb:ba:8d:e3:1c:74:4f:48:1a:
b7:a8:ce:a5:06:02:78:9a:6d:d3:62:c4:82:7c:27:
00:f3:f9:40:72:29:fa:cc:28:a1:fb:96:c1:f9:54:
b3:fc:29:27:51:56:6b:db:e2:3f:34:8c:51:cd:98:
cb:91:d4:13:57:bf:d6:3d:b0:07:7b:e8:67:ba:cb:
d2:5c:e6:e8:bc:b7:80:54:31:86:65:46:00:ee:26:
c6:f1:9d:41:71:71:58:27:ad:d2:52:66:1f:b2:dc:
fd:ec:24:58:85:aa:a1:20:f2:41:40:86:cf:c8:18:
f3:a5:eb:49:52:91:05:f7:9d:cd:48:fc:a2:32:02:
d4:67:20:41:68:0a:dc:77:fb:db:9d:d9:10:5b:91:
c6:1d:c5:19:c9:0a:23:73:b4:9c:a7:0f:90:e4:fc:
e5:6c:67:5b:33:de:dd:37:bb:be:54:76:2a:ef:fa:
b1:a3:30:61:58:84:c3:c2:dc:35:c0:06:1a:29:6d:
93:75:3e:87:a1:f9:e7:bf:3f:64:21:63:ed:29:61:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:6B:9F:8F:9A:56:3B:97:8A:66:A4:3D:9D:4F:14:11:B5:D6:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYtrn4-aVjuXimakPZ1PFBG11gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:86:17:54:f3:b6:f7:20:56:0c:ca:25:6b:e7:59:8e:c7:8f:
9b:4a:fa:5a:4e:b4:07:04:fc:db:7b:be:86:be:bd:1b:54:b5:
78:b9:45:98:21:1b:fe:28:42:19:ee:a7:f5:58:14:c7:01:15:
84:9d:89:b3:a0:7e:ce:86:91:d4:ef:c3:64:c7:0a:ec:27:e1:
ca:2c:ae:77:c1:4f:e8:29:b2:5b:fd:b7:3a:a0:49:7f:10:8d:
c3:2c:e3:bc:c4:80:fe:50:2b:fe:09:16:3c:72:1f:36:cd:0c:
55:08:7c:43:dc:cf:8f:18:62:3a:f4:87:71:2c:0d:73:0c:d3:
43:15:b6:24:81:62:0d:02:24:c4:5c:f2:79:66:b6:df:8f:f4:
5d:78:36:c7:a5:d3:82:9e:f0:13:73:a3:ea:48:01:f3:54:9f:
b5:37:e8:d0:f6:a0:ef:bd:c8:24:1c:b5:3a:b7:a0:6b:63:ad:
8a:9f:5b:d7:c7:6e:6f:c2:4b:ae:17:10:77:04:a5:56:98:38:
30:03:21:f7:7e:c4:1c:1a:cd:cc:da:e3:b5:20:e7:b6:62:f3:
54:0f:eb:04:ea:26:03:17:1c:31:76:a1:db:fb:cf:7a:b1:29:
91:10:2a:82:22:83:a1:0d:55:e2:7e:c5:b1:55:a7:dd:49:11:
48:a5:cf:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6T9/Z5ToS7M5O74nKT6Go6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMxMTAwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NThiNmI5ZjhmOWE1NjNiOTc4YTY2YTQzZDlkNGYxNDExYjVkNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfxno4G995X8Ohea4i1zgPAniMnG
CDjkjuxuQL2KGLMjfo2FaohnV51vYI81NkxCQLDruo3jHHRPSBq3qM6lBgJ4mm3T
YsSCfCcA8/lAcin6zCih+5bB+VSz/CknUVZr2+I/NIxRzZjLkdQTV7/WPbAHe+hn
usvSXObovLeAVDGGZUYA7ibG8Z1BcXFYJ63SUmYfstz97CRYhaqhIPJBQIbPyBjz
petJUpEF953NSPyiMgLUZyBBaArcd/vbndkQW5HGHcUZyQojc7Scpw+Q5PzlbGdb
M97dN7u+VHYq7/qxozBhWITDwtw1wAYaKW2TdT6Hofnnvz9kIWPtKWFijwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWLa5+PmlY7l4pmpD2dTxQRtdYEMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbFl0cm40LWFWanVYaW1ha1BaMVBGQkcxMWdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+GF1TztvcgVgzKJWvn
WY7Hj5tK+lpOtAcE/Nt7voa+vRtUtXi5RZghG/4oQhnup/VYFMcBFYSdibOgfs6G
kdTvw2THCuwn4cosrnfBT+gpslv9tzqgSX8QjcMs47zEgP5QK/4JFjxyHzbNDFUI
fEPcz48YYjr0h3EsDXMM00MVtiSBYg0CJMRc8nlmtt+P9F14Nsel04Ke8BNzo+pI
AfNUn7U36ND2oO+9yCQctTq3oGtjrYqfW9fHbm/CS64XEHcEpVaYODADIfd+xBwa
zcza47Ug57Zi81QP6wTqJgMXHDF2odv7z3qxKZEQKoIig6ENVeJ+xbFVp91JEUil
z3Q=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:41 2025 by rpki-client