Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4athKr98hYfAiwZbovBz6im9rfo.roa
File: 4athKr98hYfAiwZbovBz6im9rfo.roa (raw, json)
Hash identifier: JiddLSR3FpHZ11AIMda753HDSWPHvXByEpexHvDVqo0=
Subject key identifier: E1:AB:61:2A:BF:7C:85:87:C0:8B:06:5B:A2:F0:73:EA:29:BD:AD:FA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8C4A23BF849B71325CC06F5BC90F42C0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4athKr98hYfAiwZbovBz6im9rfo.roa
Signing time: Thu 21 Dec 2023 12:11:58 +0000
ROA not before: Thu 21 Dec 2023 12:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:4a:23:bf:84:9b:71:32:5c:c0:6f:5b:c9:0f:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 12:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1ab612abf7c8587c08b065ba2f073ea29bdadfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:81:99:63:a9:55:0c:5b:52:6f:be:e8:73:
e9:0a:fe:97:0a:3f:27:91:a0:70:04:45:cc:13:70:
e2:2d:8c:31:8d:f1:a9:ed:62:36:50:4f:8c:e2:03:
51:af:23:f0:fe:17:4d:43:b9:35:1b:ef:b0:24:e5:
ff:53:73:12:6a:ea:64:4d:3f:b3:b5:2f:86:03:da:
f4:a8:e5:9c:f9:18:6f:a9:26:a2:ec:e6:d2:43:86:
22:64:f1:0a:70:86:c0:69:7f:6e:be:b1:e7:c9:7a:
5c:a7:41:2d:c6:4a:a3:aa:3d:1f:ba:9d:61:f6:1e:
c4:86:0b:5b:cd:77:8a:0f:8e:d7:23:ff:46:57:b4:
7d:df:1e:0d:b2:36:de:76:c1:a4:c5:6c:bf:91:6e:
9d:e0:b1:95:5f:a2:96:af:68:69:f3:06:f0:ea:e4:
26:d3:06:c1:f4:cc:4f:d7:8f:3e:5d:d5:ea:da:e2:
f3:18:41:a1:86:17:9b:d4:24:a1:5c:8a:ee:12:37:
43:7c:17:20:f6:ab:08:3c:29:25:84:46:e9:22:51:
02:f5:55:51:62:ad:ee:f2:fc:fe:4e:4f:d2:e8:c2:
0d:ab:5e:75:90:98:54:d0:bb:cd:ac:87:e6:2c:e2:
af:c9:3c:7a:e5:fe:16:b9:40:98:49:33:09:cf:92:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:61:2A:BF:7C:85:87:C0:8B:06:5B:A2:F0:73:EA:29:BD:AD:FA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4athKr98hYfAiwZbovBz6im9rfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:14:13:ef:f0:f8:0a:7a:a1:a0:b7:3c:22:06:70:fe:2e:9c:
44:69:f4:70:fd:b5:c2:20:cb:6d:6f:90:47:94:4d:ce:54:b6:
1a:9d:d8:af:79:76:9e:93:99:6e:58:59:cc:1b:78:01:18:8b:
c9:fa:8b:cc:13:6b:3d:f9:f2:a0:d0:fa:81:47:ea:a0:6c:1c:
55:32:68:5a:05:c4:56:14:2e:55:38:b8:16:f8:85:28:26:ff:
a9:69:6f:0c:10:e3:c0:31:81:0a:da:53:c4:d4:a4:bf:08:ce:
7e:8e:27:f0:36:1d:27:f0:a1:0f:ad:41:54:31:e7:47:d7:8b:
86:2a:2c:0b:a7:ee:c6:19:7d:c8:a3:19:da:56:84:06:a3:9a:
dc:64:f0:0e:34:71:f7:bb:10:bb:a9:1b:20:eb:54:38:5b:f4:
bb:f1:ba:f3:49:e6:72:21:6b:a9:01:a3:c7:6f:f1:90:ca:42:
f9:49:f6:9e:75:7a:ec:f2:b6:e5:79:0b:ea:97:f6:d2:4c:4c:
b6:ba:27:c3:1a:c1:50:4d:40:b4:49:4a:67:f4:4b:94:1e:c3:
a2:42:40:33:be:bc:9f:a0:de:26:6f:34:bd:c7:ce:91:f3:a8:
4c:9d:e7:49:6c:30:e1:74:ba:9f:87:b3:a5:f3:d8:16:61:38:
05:49:a5:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyMSiO/hJtxMlzAb1vJD0LAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMTIxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFiNjEyYWJmN2M4NTg3YzA4YjA2NWJhMmYwNzNlYTI5YmRhZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfCBmWOpVQxbUm++6HPpCv6XCj8n
kaBwBEXME3DiLYwxjfGp7WI2UE+M4gNRryPw/hdNQ7k1G++wJOX/U3MSaupkTT+z
tS+GA9r0qOWc+RhvqSai7ObSQ4YiZPEKcIbAaX9uvrHnyXpcp0Etxkqjqj0fup1h
9h7EhgtbzXeKD47XI/9GV7R93x4NsjbedsGkxWy/kW6d4LGVX6KWr2hp8wbw6uQm
0wbB9MxP148+XdXq2uLzGEGhhheb1CShXIruEjdDfBcg9qsIPCklhEbpIlEC9VVR
Yq3u8vz+Tk/S6MINq151kJhU0LvNrIfmLOKvyTx65f4WuUCYSTMJz5I8zwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOGrYSq/fIWHwIsGW6Lwc+opva36MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNGF0aEtyOThoWWZBaXdaYm92Qno2aW05cmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJAUE+/w+Ap6oaC3PCIG
cP4unERp9HD9tcIgy21vkEeUTc5Uthqd2K95dp6TmW5YWcwbeAEYi8n6i8wTaz35
8qDQ+oFH6qBsHFUyaFoFxFYULlU4uBb4hSgm/6lpbwwQ48AxgQraU8TUpL8Izn6O
J/A2HSfwoQ+tQVQx50fXi4YqLAun7sYZfcijGdpWhAajmtxk8A40cfe7ELupGyDr
VDhb9LvxuvNJ5nIha6kBo8dv8ZDKQvlJ9p51euzytuV5C+qX9tJMTLa6J8MawVBN
QLRJSmf0S5Qew6JCQDO+vJ+g3iZvNL3HzpHzqEyd50lsMOF0up+Hs6Xz2BZhOAVJ
pcI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:43:50 2025 by rpki-client