Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z_iGKnip5QvZJR4frkyCxDdMsQg.roa
File: z_iGKnip5QvZJR4frkyCxDdMsQg.roa (raw, json)
Hash identifier: vr439BG7x2fEcI1N4Cs4d7xVCrtN5rgw/Y4umc8aFU4=
Subject key identifier: CF:F8:86:2A:78:A9:E5:0B:D9:25:1E:1F:AE:4C:82:C4:37:4C:B1:08
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D178F27142797891D294C7988D8F6F4B2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z_iGKnip5QvZJR4frkyCxDdMsQg.roa
Signing time: Wed 17 Jan 2024 13:14:34 +0000
ROA not before: Wed 17 Jan 2024 13:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:8f:27:14:27:97:89:1d:29:4c:79:88:d8:f6:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 17 13:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cff8862a78a9e50bd9251e1fae4c82c4374cb108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:cd:5e:40:97:6e:f3:8a:b9:59:76:7a:1f:
b7:5b:e7:1d:ee:23:85:4b:e5:88:eb:83:cb:d7:02:
90:b5:86:18:84:80:8f:7e:4b:5d:46:dd:68:60:49:
87:75:70:d4:0a:2f:95:dc:56:91:a7:94:9f:c9:1c:
80:2b:56:ca:bb:d7:37:77:18:51:86:2a:1d:ab:1f:
39:64:5f:fb:39:d6:b3:eb:57:9c:f1:f2:15:12:35:
62:2b:62:62:ff:6e:50:ba:e4:99:61:94:44:19:28:
61:6e:e1:71:fc:3a:5b:45:07:2e:b2:d8:88:d9:f3:
4d:74:a9:57:ed:13:84:3e:d4:6d:0e:10:30:64:6b:
94:57:78:6f:a7:ee:94:09:15:03:66:7a:34:cd:38:
50:69:37:ab:40:d6:8f:b7:e5:54:e4:28:a6:07:4a:
34:a4:83:cc:6a:c7:49:9d:2d:7c:f3:d3:1e:1a:90:
82:b9:e3:31:fb:de:49:be:5f:e3:66:5e:fd:64:4d:
5c:1e:c8:88:43:24:78:48:2b:72:9b:f8:26:83:a5:
38:f3:f4:b2:3c:0b:08:e2:7b:29:77:ae:0f:7e:bd:
ca:ae:4d:d9:3f:41:8c:29:ab:ac:d0:01:94:de:d3:
59:5b:d4:3a:cb:34:0a:99:5b:a4:b0:4b:e2:d0:b8:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:86:2A:78:A9:E5:0B:D9:25:1E:1F:AE:4C:82:C4:37:4C:B1:08
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z_iGKnip5QvZJR4frkyCxDdMsQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:78:63:52:53:f0:e5:f9:10:c0:22:f8:0b:02:f5:1b:aa:ba:
70:49:03:a6:00:c2:7f:cf:e5:d4:b3:41:6b:61:f0:4f:47:8d:
0d:45:b2:10:10:46:e4:10:48:16:54:d4:c7:0c:35:5d:cb:b0:
23:4f:64:1f:7f:1e:dd:a1:4b:79:e4:ef:30:8b:8e:9d:18:53:
96:c9:ff:3c:bd:f8:4f:87:32:1c:f8:50:1f:6e:6d:1c:e1:d8:
23:88:22:58:53:f0:59:29:2e:bf:aa:8b:89:47:b4:3d:6c:f6:
d7:37:c1:ab:05:08:3e:e0:d3:66:a7:32:c1:43:b8:e2:e6:a4:
21:3d:e8:19:b7:1c:43:12:84:f5:39:41:ee:bf:79:00:60:1b:
59:91:5d:fa:2a:57:5e:2a:29:51:58:e6:64:a5:11:b0:e9:a1:
69:fe:cb:db:5c:c9:ed:66:5c:92:9c:1b:6a:eb:24:8c:a2:ad:
dd:e9:81:a3:08:af:d0:ca:36:db:cb:62:9f:bf:36:fc:fc:94:
59:15:06:46:e2:56:b1:47:36:bc:10:71:97:05:f6:87:f7:8a:
35:5c:b7:cb:8e:d6:5f:4e:dc:b3:c6:cc:16:91:bc:ff:68:da:
d9:4e:8b:75:08:52:1c:45:8e:0f:0a:14:66:1c:e1:4a:2c:e4:
5d:55:b1:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0XjycUJ5eJHSlMeYjY9vSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE3MTMxNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmY4ODYyYTc4YTllNTBiZDkyNTFlMWZhZTRjODJjNDM3NGNiMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGDNXkCXbvOKuVl2eh+3W+cd7iOF
S+WI64PL1wKQtYYYhICPfktdRt1oYEmHdXDUCi+V3FaRp5SfyRyAK1bKu9c3dxhR
hiodqx85ZF/7Odaz61ec8fIVEjViK2Ji/25QuuSZYZREGShhbuFx/DpbRQcustiI
2fNNdKlX7ROEPtRtDhAwZGuUV3hvp+6UCRUDZno0zThQaTerQNaPt+VU5CimB0o0
pIPMasdJnS1889MeGpCCueMx+95Jvl/jZl79ZE1cHsiIQyR4SCtym/gmg6U48/Sy
PAsI4nspd64Pfr3Krk3ZP0GMKaus0AGU3tNZW9Q6yzQKmVuksEvi0LhJdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM/4hip4qeUL2SUeH65MgsQ3TLEIMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvel9pR0tuaXA1UXZaSlI0ZnJreUN4RGRNc1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG94Y1JT8OX5EMAi+AsC
9RuqunBJA6YAwn/P5dSzQWth8E9HjQ1FshAQRuQQSBZU1McMNV3LsCNPZB9/Ht2h
S3nk7zCLjp0YU5bJ/zy9+E+HMhz4UB9ubRzh2COIIlhT8FkpLr+qi4lHtD1s9tc3
wasFCD7g02anMsFDuOLmpCE96Bm3HEMShPU5Qe6/eQBgG1mRXfoqV14qKVFY5mSl
EbDpoWn+y9tcye1mXJKcG2rrJIyird3pgaMIr9DKNtvLYp+/Nvz8lFkVBkbiVrFH
NrwQcZcF9of3ijVct8uO1l9O3LPGzBaRvP9o2tlOi3UIUhxFjg8KFGYc4Uos5F1V
sTo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:16 2025 by rpki-client