Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNJ_zeMKEawxAwCHWuHhVXvM01I.roa
File: yNJ_zeMKEawxAwCHWuHhVXvM01I.roa (raw, json)
Hash identifier: B9EeZygYve5VKz3aFrbW+MGz3WyBBhMvtePMAkripo8=
Subject key identifier: C8:D2:7F:CD:E3:0A:11:AC:31:03:00:87:5A:E1:E1:55:7B:CC:D3:52
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC40AD9333A6C4F68CA4986605FD28E7B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNJ_zeMKEawxAwCHWuHhVXvM01I.roa
Signing time: Tue 20 Feb 2024 01:04:21 +0000
ROA not before: Tue 20 Feb 2024 01:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:c40a:bc6f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:0a:d9:33:3a:6c:4f:68:ca:49:86:60:5f:d2:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 01:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d27fcde30a11ac310300875ae1e1557bccd352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:e4:c8:07:7e:c7:50:c1:d5:36:13:36:bc:
74:67:b6:07:1c:d6:75:47:8a:e6:af:56:b5:87:e1:
54:b2:6e:9b:0e:95:14:dd:d1:cb:cb:1b:e8:9c:d2:
58:e1:fa:be:45:51:3c:5d:c9:df:a7:36:48:c9:d9:
dd:51:00:a7:07:3a:46:a8:22:c1:88:eb:2f:59:81:
ad:6f:dd:a0:16:28:81:38:e9:82:b5:4f:f7:d9:94:
33:8a:c8:5f:8f:11:8a:2b:67:1d:db:76:be:04:36:
a0:4f:21:f0:00:0f:f5:09:b3:e8:0f:10:d1:1f:e8:
47:32:1f:eb:7d:f4:03:72:24:2e:98:5d:5d:4b:9f:
1e:10:3e:63:da:29:ba:e0:65:ca:59:53:fa:67:35:
0b:4b:85:65:9f:a4:a6:a1:79:da:df:8e:42:0f:e9:
f9:14:05:aa:cb:2f:f0:58:58:be:88:aa:f3:db:a2:
ad:c1:d6:9c:35:e8:01:87:1f:e2:89:8b:ff:40:03:
06:66:2c:d0:4f:58:8c:10:f6:25:46:41:6a:ce:24:
2e:8e:ac:5d:98:d4:20:87:76:16:6f:2b:c2:70:8d:
cb:62:71:e3:8e:86:ab:a6:22:4d:6d:7d:a7:30:6b:
bf:bc:bc:b5:e9:97:07:f9:1f:fa:8a:35:2a:24:2c:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:7F:CD:E3:0A:11:AC:31:03:00:87:5A:E1:E1:55:7B:CC:D3:52
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNJ_zeMKEawxAwCHWuHhVXvM01I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:a0:79:15:4b:9c:d3:b1:ac:1c:22:4d:ce:d9:9d:12:35:e0:
52:6d:f1:72:e0:b6:13:74:20:d7:a3:4a:bd:b7:c5:59:95:1a:
72:a1:ff:ca:a8:3f:a5:97:65:56:62:7f:aa:43:2f:ae:8f:f5:
92:37:a9:32:59:ac:40:cf:11:d7:52:70:3b:19:10:e2:3a:27:
48:92:fc:81:59:5a:e1:40:0e:37:38:31:4f:42:5d:e3:b2:a3:
f0:f3:14:79:ed:d6:f1:eb:4a:77:b6:44:5b:9a:4a:c5:e7:90:
de:85:b0:50:41:6a:83:94:e9:60:5a:06:df:50:03:bb:52:8f:
97:f8:fd:76:9b:f1:06:db:76:b3:86:75:69:e9:47:3d:88:bf:
90:8a:1f:32:cf:38:b5:88:a6:c9:62:24:7d:4f:52:be:65:6c:
2d:73:f9:4b:96:2d:3f:ce:62:44:65:81:cb:a9:db:5e:de:0a:
7d:d6:8f:c6:cf:86:b0:77:19:06:03:5d:e5:f4:fd:93:25:2f:
f7:aa:2d:04:44:e2:88:da:14:81:64:23:bc:d3:2e:14:79:4e:
37:b7:6e:05:fb:32:00:e2:e1:98:10:b3:3d:c2:e9:c6:40:bc:
60:38:8d:c7:8e:48:23:fe:6a:85:cc:ae:4d:32:07:6f:ce:bd:
af:2c:99:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3ECtkzOmxPaMpJhmBf0o57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjIwMDEwNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGQyN2ZjZGUzMGExMWFjMzEwMzAwODc1YWUxZTE1NTdiY2NkMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHkyAd+x1DB1TYTNrx0Z7YHHNZ1
R4rmr1a1h+FUsm6bDpUU3dHLyxvonNJY4fq+RVE8XcnfpzZIydndUQCnBzpGqCLB
iOsvWYGtb92gFiiBOOmCtU/32ZQzishfjxGKK2cd23a+BDagTyHwAA/1CbPoDxDR
H+hHMh/rffQDciQumF1dS58eED5j2im64GXKWVP6ZzULS4Vln6SmoXna345CD+n5
FAWqyy/wWFi+iKrz26KtwdacNegBhx/iiYv/QAMGZizQT1iMEPYlRkFqziQujqxd
mNQgh3YWbyvCcI3LYnHjjoarpiJNbX2nMGu/vLy16ZcH+R/6ijUqJCyDjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMjSf83jChGsMQMAh1rh4VV7zNNSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveU5KX3plTUtFYXd4QXdDSFd1SGhWWHZNMDFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACCgeRVLnNOxrBwiTc7Z
nRI14FJt8XLgthN0INejSr23xVmVGnKh/8qoP6WXZVZif6pDL66P9ZI3qTJZrEDP
EddScDsZEOI6J0iS/IFZWuFADjc4MU9CXeOyo/DzFHnt1vHrSne2RFuaSsXnkN6F
sFBBaoOU6WBaBt9QA7tSj5f4/Xab8QbbdrOGdWnpRz2Iv5CKHzLPOLWIpsliJH1P
Ur5lbC1z+UuWLT/OYkRlgcup217eCn3Wj8bPhrB3GQYDXeX0/ZMlL/eqLQRE4oja
FIFkI7zTLhR5Tje3bgX7MgDi4ZgQsz3C6cZAvGA4jceOSCP+aoXMrk0yB2/Ova8s
mVY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:49 2025 by rpki-client