Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/myWy45FcWV-CZYsIDzf2cSGer5Y.roa
File: myWy45FcWV-CZYsIDzf2cSGer5Y.roa (raw, json)
Hash identifier: TaJ94Lz7dBNwDLqYESrZhGTex5As7FmvrBRaC8RMbSk=
Subject key identifier: 9B:25:B2:E3:91:5C:59:5F:82:65:8B:08:0F:37:F6:71:21:9E:AF:96
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1A4FC45B8E0A02D1A0C437767D7F4F96
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/myWy45FcWV-CZYsIDzf2cSGer5Y.roa
Signing time: Thu 18 Jan 2024 02:04:11 +0000
ROA not before: Thu 18 Jan 2024 02:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:1a4f:b8cc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:4f:c4:5b:8e:0a:02:d1:a0:c4:37:76:7d:7f:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 02:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b25b2e3915c595f82658b080f37f671219eaf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:9c:88:ba:2b:fa:c6:d6:7b:0b:05:1b:38:
7a:48:c9:64:26:cc:e2:39:ed:94:87:c4:c2:a1:1d:
cc:fa:68:42:ce:76:6d:40:6a:f6:d1:54:05:58:cb:
02:6e:15:ff:28:0c:1a:93:14:f2:51:d7:27:ce:78:
4b:76:b2:63:55:bd:90:8f:62:58:4e:ff:96:e7:34:
84:f8:03:89:09:7c:58:11:2d:32:1e:25:b8:58:ff:
f3:0f:a3:9f:95:14:f3:52:eb:46:04:ba:63:15:55:
36:c1:79:79:01:e7:55:e0:24:0f:ad:c0:a3:1a:2a:
e0:47:a5:7a:2b:b8:13:01:ec:b6:c6:a9:7a:5e:60:
79:bd:31:3d:5c:59:4d:64:16:f7:bb:6f:7f:83:3e:
f1:09:a4:4d:99:70:c5:ed:48:21:b3:f2:8d:40:ef:
60:e9:97:38:cb:c0:ad:e1:97:71:ef:bf:0f:5a:fb:
21:d4:94:aa:78:3b:34:46:db:63:47:ee:7c:23:6e:
82:f9:c1:b2:03:35:34:f3:3c:bb:b5:8c:7a:64:1c:
67:f1:b2:65:2a:f5:65:7a:d7:e4:a3:47:2e:4c:f5:
f1:0b:0c:81:3e:f2:79:c5:69:bd:71:48:0d:88:cc:
14:a2:b2:66:83:18:fc:fd:82:9f:7e:f0:24:af:47:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:B2:E3:91:5C:59:5F:82:65:8B:08:0F:37:F6:71:21:9E:AF:96
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/myWy45FcWV-CZYsIDzf2cSGer5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:b2:fb:f1:0c:72:87:87:80:1c:7d:61:25:1e:79:5a:57:e6:
cb:6a:7f:93:ed:b1:e0:11:8c:cb:11:c4:a3:98:3f:78:a9:f3:
34:47:27:28:98:99:c8:b3:75:b3:a9:94:2b:3f:6b:e0:bd:2a:
1b:66:6d:26:66:83:50:1a:99:fe:b6:6b:da:be:f5:b8:78:58:
6a:3c:cb:98:29:ff:f9:27:70:d2:03:56:08:30:02:05:9f:58:
f3:e9:65:69:51:ad:e9:90:5f:25:5e:e9:a4:c5:0d:0e:5f:69:
40:ca:b4:0a:0e:c1:08:54:68:17:2a:31:f5:fe:1e:2b:c2:d0:
dd:5c:0f:d5:10:76:fc:cf:3b:8d:95:33:cb:6e:ee:46:a7:25:
d0:06:ee:18:39:f6:3e:97:e3:f6:8b:9e:26:c7:ac:1f:b3:17:
fa:e3:ce:4f:90:20:8c:0d:9b:36:18:72:66:8e:a5:ad:c7:30:
75:35:16:d6:a4:87:61:ea:6f:a7:e8:9d:4a:b9:1a:68:78:4d:
4b:48:94:a2:1e:4e:30:52:4b:6f:00:b9:97:61:10:a8:d1:06:
97:93:df:70:22:62:17:0f:1d:9d:8a:ec:34:24:05:40:fb:21:
89:77:42:62:e4:c6:6e:a4:58:f1:07:88:d6:5d:a7:52:71:0a:
03:61:46:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0aT8RbjgoC0aDEN3Z9f0+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE4MDIwNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjI1YjJlMzkxNWM1OTVmODI2NThiMDgwZjM3ZjY3MTIxOWVhZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCqciLor+sbWewsFGzh6SMlkJszi
Oe2Uh8TCoR3M+mhCznZtQGr20VQFWMsCbhX/KAwakxTyUdcnznhLdrJjVb2Qj2JY
Tv+W5zSE+AOJCXxYES0yHiW4WP/zD6OflRTzUutGBLpjFVU2wXl5AedV4CQPrcCj
GirgR6V6K7gTAey2xql6XmB5vTE9XFlNZBb3u29/gz7xCaRNmXDF7Ughs/KNQO9g
6Zc4y8Ct4Zdx778PWvsh1JSqeDs0RttjR+58I26C+cGyAzU08zy7tYx6ZBxn8bJl
KvVletfko0cuTPXxCwyBPvJ5xWm9cUgNiMwUorJmgxj8/YKffvAkr0eaNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJslsuORXFlfgmWLCA839nEhnq+WMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbXlXeTQ1RmNXVi1DWllzSUR6ZjJjU0dlcjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACmy+/EMcoeHgBx9YSUe
eVpX5stqf5PtseARjMsRxKOYP3ip8zRHJyiYmcizdbOplCs/a+C9KhtmbSZmg1Aa
mf62a9q+9bh4WGo8y5gp//kncNIDVggwAgWfWPPpZWlRremQXyVe6aTFDQ5faUDK
tAoOwQhUaBcqMfX+HivC0N1cD9UQdvzPO42VM8tu7kanJdAG7hg59j6X4/aLnibH
rB+zF/rjzk+QIIwNmzYYcmaOpa3HMHU1Ftakh2Hqb6fonUq5Gmh4TUtIlKIeTjBS
S28AuZdhEKjRBpeT33AiYhcPHZ2K7DQkBUD7IYl3QmLkxm6kWPEHiNZdp1JxCgNh
Rr8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:06 2025 by rpki-client