Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5ScsqgT9BCU2GGCUjjxGbx0qCsM.roa
File: 5ScsqgT9BCU2GGCUjjxGbx0qCsM.roa (raw, json)
Hash identifier: mseS14/auHMm9WRRHbp5611ZnCcd1Fz/dTczWa5g1w4=
Subject key identifier: E5:27:2C:AA:04:FD:04:25:36:18:60:94:8E:3C:46:6F:1D:2A:0A:C3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8B9EEF8285D1A318276A86779C10FD5B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5ScsqgT9BCU2GGCUjjxGbx0qCsM.roa
Signing time: Thu 21 Dec 2023 09:04:58 +0000
ROA not before: Thu 21 Dec 2023 09:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:8b9e:40da/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:9e:ef:82:85:d1:a3:18:27:6a:86:77:9c:10:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 09:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5272caa04fd0425361860948e3c466f1d2a0ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6f:c5:2c:ee:00:3b:63:83:b7:d3:f7:7d:b7:
bc:68:83:7c:61:e1:02:2f:1d:64:29:69:29:f0:44:
6a:40:0e:2d:f6:b6:a0:0a:04:4e:4d:29:24:5a:b8:
94:f6:fc:35:7d:64:3d:e2:a8:64:b2:c6:42:9a:44:
fa:c4:56:8f:88:30:0d:63:4c:35:39:0c:13:c9:c5:
a0:fd:f2:6d:fc:ad:11:15:e5:1c:05:7d:8a:40:a4:
d4:59:e1:64:7b:d4:eb:7d:81:17:ca:31:7d:d2:6c:
cb:b0:2e:e8:6c:ac:8d:9d:08:b0:ae:6a:11:6f:15:
4d:70:a1:a5:d8:e4:12:9a:86:eb:ba:13:50:a3:b5:
3e:4a:5a:a0:6e:66:9b:07:fc:79:bc:1e:da:26:cd:
2c:c1:d1:10:98:f3:7f:83:bc:fc:14:61:8d:13:a3:
43:bd:3c:95:cf:0d:fb:45:48:18:ec:12:7e:fe:d5:
f2:d4:3a:bc:29:d6:16:f9:dc:87:b1:3e:3e:39:ed:
6a:21:b3:1c:36:dd:b0:56:e8:34:9b:2e:f0:35:9a:
b9:83:12:f2:c9:f0:fa:49:22:3b:4c:a8:b3:5b:c0:
2a:2d:c1:3f:7a:4c:7c:62:b0:7a:12:be:2a:98:db:
f6:cb:c4:e2:4d:88:e3:9f:f9:d9:66:b4:31:b5:9e:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:2C:AA:04:FD:04:25:36:18:60:94:8E:3C:46:6F:1D:2A:0A:C3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5ScsqgT9BCU2GGCUjjxGbx0qCsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:28:f3:e1:54:41:f8:73:1c:b4:b2:8a:ec:31:a1:ea:26:fe:
cc:a5:05:be:32:7a:0a:7b:c7:a8:c6:ee:2f:d0:91:91:fd:11:
54:68:7a:b4:a1:67:bc:bd:ea:88:77:d8:0a:05:3d:07:ad:b2:
93:81:b1:e8:91:41:3b:f0:90:63:ae:0a:4c:c4:65:98:66:21:
74:61:08:e3:28:96:f3:2e:ef:92:5b:1e:e8:b0:ab:86:c7:a7:
42:d0:25:58:e0:e5:e3:42:19:58:c5:85:7d:84:a2:91:7a:86:
65:02:da:da:9a:0f:b2:e6:bc:f8:b5:9c:1c:d7:0a:2d:92:c3:
28:4f:82:3a:d7:8f:a6:87:3d:55:db:ac:01:85:19:66:c4:ce:
90:63:49:22:e7:2e:8f:bb:43:ec:9e:65:2f:e5:a0:ef:69:99:
1f:39:28:00:d9:1d:17:53:23:6a:8b:81:5b:45:38:b4:41:81:
f5:42:91:a0:75:85:d9:e4:27:81:cb:65:11:51:64:f9:b6:12:
6c:a5:a3:f2:22:99:c7:5c:60:d9:6c:58:b2:6c:7f:d8:40:9c:
7a:60:5d:ae:cc:34:1d:66:73:84:78:65:21:74:fc:6a:b7:32:
fd:cd:60:73:9d:4d:98:d3:50:2d:1d:54:bc:09:7a:35:5a:f1:
b3:bc:f8:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyLnu+ChdGjGCdqhnecEP1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMDkwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTI3MmNhYTA0ZmQwNDI1MzYxODYwOTQ4ZTNjNDY2ZjFkMmEwYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/FLO4AO2ODt9P3fbe8aIN8YeEC
Lx1kKWkp8ERqQA4t9ragCgROTSkkWriU9vw1fWQ94qhkssZCmkT6xFaPiDANY0w1
OQwTycWg/fJt/K0RFeUcBX2KQKTUWeFke9TrfYEXyjF90mzLsC7obKyNnQiwrmoR
bxVNcKGl2OQSmobruhNQo7U+SlqgbmabB/x5vB7aJs0swdEQmPN/g7z8FGGNE6ND
vTyVzw37RUgY7BJ+/tXy1Dq8KdYW+dyHsT4+Oe1qIbMcNt2wVug0my7wNZq5gxLy
yfD6SSI7TKizW8AqLcE/ekx8YrB6Er4qmNv2y8TiTYjjn/nZZrQxtZ7V9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOUnLKoE/QQlNhhglI48Rm8dKgrDMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNVNjc3FnVDlCQ1UyR0dDVWpqeEdieDBxQ3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKgo8+FUQfhzHLSyiuwx
oeom/sylBb4yegp7x6jG7i/QkZH9EVRoerShZ7y96oh32AoFPQetspOBseiRQTvw
kGOuCkzEZZhmIXRhCOMolvMu75JbHuiwq4bHp0LQJVjg5eNCGVjFhX2EopF6hmUC
2tqaD7LmvPi1nBzXCi2SwyhPgjrXj6aHPVXbrAGFGWbEzpBjSSLnLo+7Q+yeZS/l
oO9pmR85KADZHRdTI2qLgVtFOLRBgfVCkaB1hdnkJ4HLZRFRZPm2Emylo/Iimcdc
YNlsWLJsf9hAnHpgXa7MNB1mc4R4ZSF0/Gq3Mv3NYHOdTZjTUC0dVLwJejVa8bO8
+AE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:50:17 2025 by rpki-client