Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9M2aW9bENUhLI3al31ky-FVJcOo.roa
File: 9M2aW9bENUhLI3al31ky-FVJcOo.roa (raw, json)
Hash identifier: e2s7xyCgDQOOhsr2R4jE3s9vcrq/Nm1UWCXT0x53DNs=
Subject key identifier: F4:CD:9A:5B:D6:C4:35:48:4B:23:76:A5:DF:59:32:F8:55:49:70:EA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEEFF5830623F4B1D90BB996D5E8ABBD8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9M2aW9bENUhLI3al31ky-FVJcOo.roa
Signing time: Tue 09 Jan 2024 16:12:40 +0000
ROA not before: Tue 09 Jan 2024 16:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:ff:58:30:62:3f:4b:1d:90:bb:99:6d:5e:8a:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 16:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4cd9a5bd6c435484b2376a5df5932f8554970ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:3f:77:41:6d:90:f3:ff:29:1c:7a:cc:5e:
de:28:fc:f4:3d:7e:d9:c0:cf:2b:0f:20:c0:e1:c2:
ef:e9:1b:d2:00:a9:de:36:63:49:1f:37:53:e8:64:
5e:0c:05:a1:b4:18:07:07:1f:79:5c:52:7e:8e:a1:
f1:6c:91:a3:0e:aa:41:63:c0:c4:5b:4b:5e:f6:3c:
3f:db:ed:71:58:28:a9:5a:6d:76:5f:f8:88:e3:ca:
b2:cb:20:fd:25:ea:5b:80:20:f5:f5:5d:86:d4:23:
31:0a:2f:cd:0a:06:c0:64:f4:0c:a9:23:df:15:b9:
9c:a9:a7:c3:f1:5e:79:7a:bc:76:29:cd:66:79:c7:
4c:8a:11:ff:98:ca:71:79:8d:99:03:bc:96:80:87:
ba:ce:9e:d7:94:cc:05:19:d1:e1:74:34:a1:f8:90:
72:d6:0a:c5:04:fd:d4:75:86:da:4b:e2:cf:03:4d:
2c:73:21:31:bb:5f:41:55:eb:b5:42:af:f4:ff:1f:
b9:7e:c3:59:8c:3c:f5:c5:26:2c:46:4d:27:69:9b:
79:fe:56:9d:5b:88:ab:76:b7:0e:cb:d5:76:ee:2a:
20:f8:89:ce:3b:63:6f:ae:84:d2:53:2a:20:fc:f0:
0c:4a:98:65:9c:8d:d8:53:19:97:f2:ec:f1:ae:83:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:9A:5B:D6:C4:35:48:4B:23:76:A5:DF:59:32:F8:55:49:70:EA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9M2aW9bENUhLI3al31ky-FVJcOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:24:99:d6:f6:35:a9:a7:5c:7d:5e:a0:1b:50:a8:56:6e:d1:
af:d9:05:99:fb:48:e9:3a:ae:4f:4d:8d:11:b4:b5:1a:40:07:
36:0e:44:8a:6b:42:c7:98:cd:8b:98:b9:dd:07:77:41:d7:c1:
0e:ad:aa:e8:c8:3b:af:55:2a:2e:9c:eb:cb:8e:03:61:63:78:
8d:75:c5:8b:11:b8:93:ed:c5:d2:aa:5f:af:d3:9f:33:d9:6f:
d1:3e:86:31:72:be:b9:45:00:4a:54:8f:f8:73:bd:a2:e3:8b:
64:bc:b2:3f:c2:ea:74:b8:50:85:15:84:69:a7:d6:59:93:12:
bc:e8:61:ce:d8:4e:fd:97:89:43:dd:60:82:cf:67:9c:64:d1:
2a:82:1b:65:42:9a:50:f0:c2:66:23:15:0b:94:3b:b0:91:45:
b6:cf:8f:7b:fa:54:df:12:81:d4:5c:bc:5f:c0:fb:6a:2c:49:
12:55:fe:59:aa:7b:dd:3e:49:7a:20:c1:d7:ed:a2:70:cb:d6:
17:20:15:09:f5:6b:ba:3a:fa:f9:e1:a2:53:ec:01:e8:1f:fb:
a6:03:ee:8f:08:96:1a:f0:d3:53:90:d1:42:fb:0a:09:e3:49:
79:57:1e:3e:a5:08:a6:bf:bb:ad:45:24:e6:ef:e3:60:e5:fd:
ac:7c:e4:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzu/1gwYj9LHZC7mW1eirvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA5MTYxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNkOWE1YmQ2YzQzNTQ4NGIyMzc2YTVkZjU5MzJmODU1NDk3MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK0/d0FtkPP/KRx6zF7eKPz0PX7Z
wM8rDyDA4cLv6RvSAKneNmNJHzdT6GReDAWhtBgHBx95XFJ+jqHxbJGjDqpBY8DE
W0te9jw/2+1xWCipWm12X/iI48qyyyD9JepbgCD19V2G1CMxCi/NCgbAZPQMqSPf
FbmcqafD8V55erx2Kc1mecdMihH/mMpxeY2ZA7yWgIe6zp7XlMwFGdHhdDSh+JBy
1grFBP3UdYbaS+LPA00scyExu19BVeu1Qq/0/x+5fsNZjDz1xSYsRk0naZt5/lad
W4irdrcOy9V27iog+InOO2NvroTSUyog/PAMSphlnI3YUxmX8uzxroO7WwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPTNmlvWxDVISyN2pd9ZMvhVSXDqMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOU0yYVc5YkVOVWhMSTNhbDMxa3ktRlZKY09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFUkmdb2NamnXH1eoBtQ
qFZu0a/ZBZn7SOk6rk9NjRG0tRpABzYORIprQseYzYuYud0Hd0HXwQ6tqujIO69V
Ki6c68uOA2FjeI11xYsRuJPtxdKqX6/TnzPZb9E+hjFyvrlFAEpUj/hzvaLji2S8
sj/C6nS4UIUVhGmn1lmTErzoYc7YTv2XiUPdYILPZ5xk0SqCG2VCmlDwwmYjFQuU
O7CRRbbPj3v6VN8SgdRcvF/A+2osSRJV/lmqe90+SXogwdftonDL1hcgFQn1a7o6
+vnholPsAegf+6YD7o8Ilhrw01OQ0UL7CgnjSXlXHj6lCKa/u61FJObv42Dl/ax8
5Ik=
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:15 2025 by rpki-client