Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xtkO8q0DwzhPeRAc4TwwefvsArk.roa
File: xtkO8q0DwzhPeRAc4TwwefvsArk.roa (raw, json)
Hash identifier: 6eAGB69NO0QkPJw6OnrqqqBXxe2nHUrF8JuuWCQWiRM=
Subject key identifier: C6:D9:0E:F2:AD:03:C3:38:4F:79:10:1C:E1:3C:30:79:FB:EC:02:B9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA03E6BA1D685090200C840DA67950889
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xtkO8q0DwzhPeRAc4TwwefvsArk.roa
Signing time: Tue 13 Feb 2024 02:14:21 +0000
ROA not before: Tue 13 Feb 2024 02:14:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a0:3e:6b:a1:d6:85:09:02:00:c8:40:da:67:95:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 02:14:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d90ef2ad03c3384f79101ce13c3079fbec02b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:81:f0:b5:61:f9:b8:df:12:36:b6:63:6d:
06:16:59:46:32:d0:17:de:db:54:8c:ae:c1:5e:55:
ee:78:ca:a4:66:d7:4a:34:2e:71:dd:f9:01:8d:31:
8e:36:5c:8c:66:9e:a9:09:ca:81:e7:b9:87:37:ad:
67:fa:11:f8:b2:a4:1b:56:44:3f:dc:e5:7a:cd:5d:
4d:4b:81:3a:07:b7:97:f7:31:57:3f:ba:05:4f:4c:
ca:36:f4:3f:b0:15:63:7d:76:90:9e:09:f5:46:e0:
f5:09:f7:73:6c:ad:80:03:4f:54:57:53:19:8a:b8:
29:10:63:f5:c6:f3:cd:f6:04:65:a3:bc:89:82:12:
b7:65:6f:74:39:73:01:06:bf:35:54:d1:9f:6a:8e:
9a:b8:6b:38:1f:10:4f:61:2a:81:c4:1b:d4:c7:23:
40:81:42:1e:d4:88:2d:b1:90:d5:89:1b:34:71:47:
d6:c8:42:74:93:e1:d8:bd:c4:33:58:f5:2d:dd:62:
18:8c:ec:71:d1:2a:c4:e6:5b:5b:db:b0:42:62:b3:
9b:28:33:7d:0c:bc:69:fc:54:e7:d0:6d:42:d9:5e:
94:f6:29:47:56:59:55:93:bb:0d:af:b0:24:69:6e:
db:8e:a7:e1:59:e3:d2:78:78:20:28:cf:91:a8:ae:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:0E:F2:AD:03:C3:38:4F:79:10:1C:E1:3C:30:79:FB:EC:02:B9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xtkO8q0DwzhPeRAc4TwwefvsArk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:6e:92:98:95:82:87:b2:1f:ac:13:f7:4b:e2:3e:e5:37:34:
55:95:66:a2:83:1d:50:6b:da:92:6c:2d:c2:80:6b:3f:ec:ff:
bc:20:73:e3:c7:f5:0a:7c:d8:7a:63:de:3f:fe:ec:74:e1:92:
cd:09:96:6b:6e:b0:15:9d:48:45:95:78:ea:e4:1a:86:24:f7:
f3:fc:81:85:11:69:ef:78:54:60:81:c3:89:2e:76:5a:4f:6b:
67:a8:32:32:4e:02:cd:5e:10:df:2e:b4:00:82:94:61:26:5c:
2c:e3:93:d3:39:01:c7:b7:55:d6:d3:1f:25:1e:c2:85:4a:dd:
61:1c:a6:32:2f:e2:fc:e0:a8:dd:e3:bb:a1:69:72:20:2a:c0:
59:93:46:1b:22:89:08:aa:3d:76:f5:f8:5d:43:c7:eb:fb:0f:
3d:44:a8:95:cc:76:c8:ec:b0:61:94:48:5e:ee:ab:57:a4:a0:
7a:86:16:ab:55:fa:38:de:7a:76:d2:3d:47:a8:72:be:4a:84:
7d:59:b9:87:1f:8b:17:3c:7e:db:10:0a:ad:04:c0:75:4c:fc:
f1:85:25:f3:60:c3:da:40:d2:98:e3:09:49:82:0e:fa:05:4f:
29:ba:5f:23:e1:80:e7:c8:7a:a4:75:c6:92:2d:4f:48:38:03:
88:48:c4:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2gPmuh1oUJAgDIQNpnlQiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEzMDIxNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQ5MGVmMmFkMDNjMzM4NGY3OTEwMWNlMTNjMzA3OWZiZWMwMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLqB8LVh+bjfEja2Y20GFllGMtAX
3ttUjK7BXlXueMqkZtdKNC5x3fkBjTGONlyMZp6pCcqB57mHN61n+hH4sqQbVkQ/
3OV6zV1NS4E6B7eX9zFXP7oFT0zKNvQ/sBVjfXaQngn1RuD1CfdzbK2AA09UV1MZ
irgpEGP1xvPN9gRlo7yJghK3ZW90OXMBBr81VNGfao6auGs4HxBPYSqBxBvUxyNA
gUIe1IgtsZDViRs0cUfWyEJ0k+HYvcQzWPUt3WIYjOxx0SrE5ltb27BCYrObKDN9
DLxp/FTn0G1C2V6U9ilHVllVk7sNr7AkaW7bjqfhWePSeHggKM+RqK7ohQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMbZDvKtA8M4T3kQHOE8MHn77AK5MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveHRrTzhxMER3emhQZVJBYzRUd3dlZnZzQXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGZukpiVgoeyH6wT90vi
PuU3NFWVZqKDHVBr2pJsLcKAaz/s/7wgc+PH9Qp82Hpj3j/+7HThks0JlmtusBWd
SEWVeOrkGoYk9/P8gYURae94VGCBw4kudlpPa2eoMjJOAs1eEN8utACClGEmXCzj
k9M5Ace3VdbTHyUewoVK3WEcpjIv4vzgqN3ju6FpciAqwFmTRhsiiQiqPXb1+F1D
x+v7Dz1EqJXMdsjssGGUSF7uq1ekoHqGFqtV+jjeenbSPUeocr5KhH1ZuYcfixc8
ftsQCq0EwHVM/PGFJfNgw9pA0pjjCUmCDvoFTym6XyPhgOfIeqR1xpItT0g4A4hI
xPU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:55 2025 by rpki-client