Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5k-xhmWnUZQUZJUaeVBqkyyXlbY.roa
File: 5k-xhmWnUZQUZJUaeVBqkyyXlbY.roa (raw, json)
Hash identifier: jW5WF4ITjRWbEhBxjethH5391ryXguLMddq6LT6jWjM=
Subject key identifier: E6:4F:B1:86:65:A7:51:94:14:64:95:1A:79:50:6A:93:2C:97:95:B6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF2A1D427D8CD6ACEA4BA0C868864652E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5k-xhmWnUZQUZJUaeVBqkyyXlbY.roa
Signing time: Thu 29 Feb 2024 02:11:48 +0000
ROA not before: Thu 29 Feb 2024 02:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:a1:d4:27:d8:cd:6a:ce:a4:ba:0c:86:88:64:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 02:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e64fb18665a751941464951a79506a932c9795b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:14:02:d8:18:4a:b0:63:28:17:77:48:7f:
df:cd:a5:11:0e:97:c9:d5:98:3e:f3:af:7f:9a:e6:
fd:94:df:ce:4f:66:a3:4c:07:9a:8d:5d:3d:43:eb:
62:0e:2e:18:65:11:9b:26:e6:b5:a6:ab:53:44:f0:
9d:80:90:e5:ea:30:e3:9d:46:41:67:32:13:cc:ab:
42:98:d5:9e:0e:a6:7b:f9:31:2f:ee:4b:d2:2e:4e:
9c:af:e0:7f:c8:d3:43:57:48:a3:56:6a:37:18:7b:
e6:92:dc:77:1e:4e:51:13:ab:ef:b7:f9:10:a9:ec:
4a:c4:44:9e:71:01:85:26:e0:49:b6:7a:8f:04:5c:
11:e3:61:9a:34:bf:b8:ee:b1:00:64:bc:76:44:49:
36:1a:e9:9a:38:50:92:91:35:b1:fe:a6:45:a0:56:
a0:a4:f1:6c:4b:f0:e8:46:c5:4e:5a:98:64:59:09:
32:8d:19:15:9c:23:91:a4:bc:3f:0b:01:8d:9a:c3:
ff:80:55:f3:2a:44:22:46:0a:be:2f:6e:1d:bf:e2:
ac:08:04:84:3b:e8:57:c2:0c:e9:42:23:b9:29:27:
66:af:e2:69:d9:cf:4e:21:97:12:dc:0a:ca:e2:c4:
3e:ab:ed:e7:ab:ff:89:28:10:1e:7a:81:05:d5:42:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:B1:86:65:A7:51:94:14:64:95:1A:79:50:6A:93:2C:97:95:B6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5k-xhmWnUZQUZJUaeVBqkyyXlbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:ad:67:12:7f:fb:d4:dd:c1:27:38:56:73:ca:d3:5d:8c:49:
c0:59:c3:a0:8e:47:9a:bc:08:8c:64:3a:17:30:6e:1d:ae:df:
44:d3:71:e3:0f:a6:22:13:33:7c:6b:84:0c:b7:e7:7b:d9:8c:
4d:1c:c4:b3:d9:77:b3:00:e9:e9:ee:bf:e4:ac:d0:2e:75:bd:
e4:ad:e8:1d:ca:f8:78:3b:d0:03:40:3c:ab:22:09:a9:46:d7:
cf:66:ae:b9:3f:e2:0d:4f:5b:54:5e:49:3b:c8:e8:e4:59:0f:
94:b9:8c:4c:fa:01:17:ca:bf:30:16:c2:fb:6b:52:90:b7:db:
21:af:d5:03:21:7e:cc:89:d3:f1:0f:a9:64:a9:68:70:4a:58:
9f:7a:61:53:a2:e3:22:33:59:ce:25:dd:b5:e6:18:83:0b:42:
9b:6a:e0:84:d7:c6:fa:c3:ef:65:66:db:ef:ec:7b:66:4e:70:
f8:b1:a9:76:18:27:57:7c:69:42:bd:63:74:ce:c9:6b:6e:04:
03:5e:34:8f:41:43:33:dc:b1:b6:a5:f1:8e:4a:4e:1b:9e:fb:
f8:93:00:32:13:6d:05:79:a3:34:11:e4:41:4f:13:63:8f:7b:
55:10:f1:e1:ca:c6:e0:d3:0f:dd:50:3d:9b:90:58:6b:10:cd:
96:41:d7:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3yodQn2M1qzqS6DIaIZGUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI5MDIxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjRmYjE4NjY1YTc1MTk0MTQ2NDk1MWE3OTUwNmE5MzJjOTc5NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqREUAtgYSrBjKBd3SH/fzaURDpfJ
1Zg+869/mub9lN/OT2ajTAeajV09Q+tiDi4YZRGbJua1pqtTRPCdgJDl6jDjnUZB
ZzITzKtCmNWeDqZ7+TEv7kvSLk6cr+B/yNNDV0ijVmo3GHvmktx3Hk5RE6vvt/kQ
qexKxESecQGFJuBJtnqPBFwR42GaNL+47rEAZLx2REk2GumaOFCSkTWx/qZFoFag
pPFsS/DoRsVOWphkWQkyjRkVnCORpLw/CwGNmsP/gFXzKkQiRgq+L24dv+KsCASE
O+hXwgzpQiO5KSdmr+Jp2c9OIZcS3ArK4sQ+q+3nq/+JKBAeeoEF1ULYvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOZPsYZlp1GUFGSVGnlQapMsl5W2MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNWsteGhtV25VWlFVWkpVYWVWQnFreXlYbGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEetZxJ/+9TdwSc4VnPK
012MScBZw6COR5q8CIxkOhcwbh2u30TTceMPpiITM3xrhAy353vZjE0cxLPZd7MA
6enuv+Ss0C51veSt6B3K+Hg70ANAPKsiCalG189mrrk/4g1PW1ReSTvI6ORZD5S5
jEz6ARfKvzAWwvtrUpC32yGv1QMhfsyJ0/EPqWSpaHBKWJ96YVOi4yIzWc4l3bXm
GIMLQptq4ITXxvrD72Vm2+/se2ZOcPixqXYYJ1d8aUK9Y3TOyWtuBANeNI9BQzPc
sbal8Y5KThue+/iTADITbQV5ozQR5EFPE2OPe1UQ8eHKxuDTD91QPZuQWGsQzZZB
1/E=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:24 2025 by rpki-client