Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4l4VpbTB2tWaAwtcNOZsKD8COCk.roa
File: 4l4VpbTB2tWaAwtcNOZsKD8COCk.roa (raw, json)
Hash identifier: JIG1A9TPbbYPM2TzRSczaa6qrSSncTVIOh0ozv12YDI=
Subject key identifier: E2:5E:15:A5:B4:C1:DA:D5:9A:03:0B:5C:34:E6:6C:28:3F:02:38:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E148DCD2516293EB6F2784C95835E7DF8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4l4VpbTB2tWaAwtcNOZsKD8COCk.roa
Signing time: Wed 06 Mar 2024 16:17:01 +0000
ROA not before: Wed 06 Mar 2024 16:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:8d:cd:25:16:29:3e:b6:f2:78:4c:95:83:5e:7d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 16:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e25e15a5b4c1dad59a030b5c34e66c283f023829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:06:73:d8:f3:d0:ea:fa:74:cd:a6:41:51:
ef:b8:68:02:83:84:e5:0d:fc:f7:6e:15:b5:74:98:
f5:82:b1:8f:13:c6:a0:1c:25:5c:82:ea:ae:b0:7e:
2c:ae:59:90:e0:9a:5a:cc:37:20:89:13:c2:da:2d:
c5:6b:65:71:02:78:01:5c:aa:ff:74:60:c9:bf:19:
29:b9:22:25:ba:bc:8e:47:fd:d1:92:cb:d4:79:c4:
d0:9f:8b:8e:ab:17:1e:8e:b5:3c:18:2f:aa:b7:11:
4e:9f:bf:cb:9f:0a:55:1b:c0:4f:db:be:63:78:a2:
f2:6e:a8:07:6b:37:1a:64:9e:0b:e3:b4:d6:20:ad:
90:f5:e8:a8:9d:fe:64:d0:a9:ed:b0:88:d9:68:66:
dc:cb:a6:d7:ef:1b:70:c9:d8:96:18:32:42:df:d9:
a8:b5:54:83:ac:c5:18:cd:48:37:bd:3a:62:b5:d1:
88:a7:48:75:3e:a3:d8:d6:b2:58:56:b5:1f:81:a6:
7c:72:36:56:25:c3:06:42:34:53:f7:1b:b5:bb:30:
19:15:bd:a5:08:e3:6a:d1:e0:36:6e:b4:94:4f:6a:
b7:9e:b9:f8:75:51:54:55:31:6b:85:97:fd:5f:e7:
07:ab:22:a4:b8:60:e6:20:0c:a5:1a:2b:30:63:87:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5E:15:A5:B4:C1:DA:D5:9A:03:0B:5C:34:E6:6C:28:3F:02:38:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4l4VpbTB2tWaAwtcNOZsKD8COCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:81:8c:7e:95:0a:54:2d:80:d3:12:93:68:14:b9:42:c9:a2:
86:09:8b:b0:ab:de:dd:61:9d:f6:08:24:b3:c0:97:86:17:1f:
1d:10:43:0a:46:24:59:0e:c0:16:2f:64:70:bc:0d:80:7b:b2:
80:7e:cf:c3:52:9d:03:2d:c5:f2:13:bd:3d:18:79:bd:ed:e0:
05:49:77:24:d0:6e:e8:bb:f4:3e:88:64:6b:48:1f:4e:5c:dc:
17:0f:2e:c9:de:70:3d:bc:bf:c8:70:d0:e7:68:36:6e:da:b2:
a8:82:59:b2:ee:c8:3f:b4:4a:18:2d:b6:81:fe:d4:e3:5f:dc:
5a:18:9f:07:3e:d6:5e:1f:bb:9b:38:a6:9c:36:39:0c:93:be:
c5:22:10:5f:72:aa:cf:4e:df:dd:6d:d7:fe:d6:15:6a:dd:eb:
92:fd:76:5e:f8:72:66:f7:e3:ba:c8:72:83:df:c1:fc:1d:e9:
b5:f9:28:bb:f8:bb:16:36:a9:20:89:ea:b6:e2:95:3e:9c:b6:
48:0f:a0:54:04:93:c8:4f:a5:46:24:dc:80:df:eb:06:09:da:
96:f3:79:5b:ca:14:f3:d1:26:c1:3c:19:b9:d3:d8:97:0e:4c:
81:a2:9e:33:e7:d8:1c:23:c5:38:47:79:01:6f:e0:1c:d6:96:
9a:bc:0a:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4Ujc0lFik+tvJ4TJWDXn34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA2MTYxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjVlMTVhNWI0YzFkYWQ1OWEwMzBiNWMzNGU2NmMyODNmMDIzODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixUGc9jz0Or6dM2mQVHvuGgCg4Tl
Dfz3bhW1dJj1grGPE8agHCVcguqusH4srlmQ4JpazDcgiRPC2i3Fa2VxAngBXKr/
dGDJvxkpuSIluryOR/3RksvUecTQn4uOqxcejrU8GC+qtxFOn7/LnwpVG8BP275j
eKLybqgHazcaZJ4L47TWIK2Q9eionf5k0KntsIjZaGbcy6bX7xtwydiWGDJC39mo
tVSDrMUYzUg3vTpitdGIp0h1PqPY1rJYVrUfgaZ8cjZWJcMGQjRT9xu1uzAZFb2l
CONq0eA2brSUT2q3nrn4dVFUVTFrhZf9X+cHqyKkuGDmIAylGiswY4dYGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOJeFaW0wdrVmgMLXDTmbCg/AjgpMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNGw0VnBiVEIydFdhQXd0Y05PWnNLRDhDT0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIuBjH6VClQtgNMSk2gU
uULJooYJi7Cr3t1hnfYIJLPAl4YXHx0QQwpGJFkOwBYvZHC8DYB7soB+z8NSnQMt
xfITvT0Yeb3t4AVJdyTQbui79D6IZGtIH05c3BcPLsnecD28v8hw0OdoNm7asqiC
WbLuyD+0ShgttoH+1ONf3FoYnwc+1l4fu5s4ppw2OQyTvsUiEF9yqs9O391t1/7W
FWrd65L9dl74cmb347rIcoPfwfwd6bX5KLv4uxY2qSCJ6rbilT6ctkgPoFQEk8hP
pUYk3IDf6wYJ2pbzeVvKFPPRJsE8GbnT2JcOTIGinjPn2BwjxThHeQFv4BzWlpq8
Ct8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:38 2025 by rpki-client