Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sghJnN1tnkyf4KC3x0xgaIsLJBw.roa
File: sghJnN1tnkyf4KC3x0xgaIsLJBw.roa (raw, json)
Hash identifier: 5eGc4DvFTAoNXmbgt59SdLv1Bo5zVtTW26VTasuNWGE=
Subject key identifier: B2:08:49:9C:DD:6D:9E:4C:9F:E0:A0:B7:C7:4C:60:68:8B:0B:24:1C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7C62F9CA7176040E09D80692AEE60C32
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sghJnN1tnkyf4KC3x0xgaIsLJBw.roa
Signing time: Tue 26 Mar 2024 20:10:44 +0000
ROA not before: Tue 26 Mar 2024 20:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:62:f9:ca:71:76:04:0e:09:d8:06:92:ae:e6:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 20:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b208499cdd6d9e4c9fe0a0b7c74c60688b0b241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:3a:de:42:3a:8c:55:48:a6:d8:27:09:8a:
19:1b:14:de:ce:58:5f:a2:78:96:56:5f:5e:d7:f7:
b1:09:9d:b1:af:57:88:5d:98:e5:49:2b:1f:d0:27:
75:c9:29:a5:fc:76:ef:a3:b9:76:b3:42:09:b1:15:
a6:f4:e4:2a:a4:30:d9:47:0d:59:c0:dd:49:1a:02:
10:6a:7c:fd:7b:21:90:a8:ba:ef:8e:3d:cc:fd:5f:
a0:63:dd:47:49:29:68:39:1c:d7:6b:a4:de:ae:07:
cf:ba:9e:9a:ad:13:7f:a6:a5:f5:5c:22:5b:dc:c7:
d2:24:84:d2:2e:62:5c:86:a1:0d:2f:a7:ce:26:7b:
83:9e:1d:27:f9:69:f2:d4:93:3f:7d:e6:9f:09:fc:
40:87:27:ab:12:30:dc:d2:53:84:cb:14:84:af:9f:
b9:78:84:14:85:44:8a:fe:d5:73:02:2c:52:1f:02:
cb:6f:45:4a:06:f6:1b:2a:f4:84:9b:09:32:bf:12:
9a:63:3a:16:94:7d:fa:55:71:bb:14:57:a0:fc:93:
fd:7a:e9:3a:72:40:55:a7:b7:1b:bf:a7:4e:d7:b7:
9c:38:3f:79:f1:5e:d8:49:b6:9b:7b:57:6b:0c:b9:
6b:a0:87:67:bf:f0:b7:13:2c:7d:70:60:40:53:a6:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:49:9C:DD:6D:9E:4C:9F:E0:A0:B7:C7:4C:60:68:8B:0B:24:1C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sghJnN1tnkyf4KC3x0xgaIsLJBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:91:65:2f:71:63:4b:1a:37:b5:b2:fd:98:69:d1:5f:55:51:
6d:29:12:69:ec:47:d1:a8:13:53:1d:53:fb:13:8a:94:f3:46:
32:8b:43:17:f4:fd:3d:bc:af:51:4e:e7:67:2c:bb:cc:b1:56:
1a:fb:7b:9e:c9:f7:18:d6:a9:85:30:48:d2:e0:9f:37:cd:54:
97:a8:dd:29:9f:9f:4b:48:4d:43:93:e3:0c:68:9b:b6:87:16:
bc:2a:19:0c:10:75:38:3c:51:59:aa:4f:eb:cb:15:87:c3:40:
80:45:12:e8:f8:7a:3e:c3:bc:ad:d0:d8:99:d6:eb:60:68:f9:
82:fb:e6:13:b7:ac:34:bb:9c:65:d9:10:05:24:a8:38:e4:ff:
b9:81:18:41:c3:7d:82:c2:0d:bb:4a:f6:fa:5b:23:c0:d3:b4:
cd:c8:e5:88:a5:34:1c:d5:22:e8:c8:fa:08:d2:28:94:08:53:
60:35:db:b9:af:d6:51:d5:c0:c2:59:9f:e7:71:f8:bc:da:a9:
d4:08:27:2c:29:80:0f:85:0f:d6:7a:90:7f:b1:d6:b7:ce:ec:
61:19:20:43:e9:b0:f8:d0:ee:8e:8b:e3:ac:7b:37:29:85:61:
95:a4:1e:7d:48:76:a7:0d:77:ad:83:9c:43:f7:54:3d:42:fb:
23:f5:b0:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY58YvnKcXYEDgnYBpKu5gwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI2MjAxMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjA4NDk5Y2RkNmQ5ZTRjOWZlMGEwYjdjNzRjNjA2ODhiMGIyNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgY63kI6jFVIptgnCYoZGxTezlhf
oniWVl9e1/exCZ2xr1eIXZjlSSsf0Cd1ySml/Hbvo7l2s0IJsRWm9OQqpDDZRw1Z
wN1JGgIQanz9eyGQqLrvjj3M/V+gY91HSSloORzXa6TergfPup6arRN/pqX1XCJb
3MfSJITSLmJchqENL6fOJnuDnh0n+Wny1JM/feafCfxAhyerEjDc0lOEyxSEr5+5
eIQUhUSK/tVzAixSHwLLb0VKBvYbKvSEmwkyvxKaYzoWlH36VXG7FFeg/JP9euk6
ckBVp7cbv6dO17ecOD958V7YSbabe1drDLlroIdnv/C3Eyx9cGBAU6a+ywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLIISZzdbZ5Mn+Cgt8dMYGiLCyQcMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvc2doSm5OMXRua3lmNEtDM3gweGdhSXNMSkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGqRZS9xY0saN7Wy/Zhp
0V9VUW0pEmnsR9GoE1MdU/sTipTzRjKLQxf0/T28r1FO52csu8yxVhr7e57J9xjW
qYUwSNLgnzfNVJeo3Smfn0tITUOT4wxom7aHFrwqGQwQdTg8UVmqT+vLFYfDQIBF
Euj4ej7DvK3Q2JnW62Bo+YL75hO3rDS7nGXZEAUkqDjk/7mBGEHDfYLCDbtK9vpb
I8DTtM3I5YilNBzVIujI+gjSKJQIU2A127mv1lHVwMJZn+dx+LzaqdQIJywpgA+F
D9Z6kH+x1rfO7GEZIEPpsPjQ7o6L46x7NymFYZWkHn1IdqcNd62DnEP3VD1C+yP1
sL0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:15 2025 by rpki-client