Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A2JAu_5KZjDFdILvpPJG5dRdzz8.roa
File: A2JAu_5KZjDFdILvpPJG5dRdzz8.roa (raw, json)
Hash identifier: oRuq8gk2Wbtt2Kx1FOWm3feyw+rcn6x3XAapQ+OEFKE=
Subject key identifier: 03:62:40:BB:FE:4A:66:30:C5:74:82:EF:A4:F2:46:E5:D4:5D:CF:3F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1A1E541610DDC4600956234FA05471FE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A2JAu_5KZjDFdILvpPJG5dRdzz8.roa
Signing time: Thu 18 Jan 2024 01:10:11 +0000
ROA not before: Thu 18 Jan 2024 01:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:1e:54:16:10:dd:c4:60:09:56:23:4f:a0:54:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 01:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036240bbfe4a6630c57482efa4f246e5d45dcf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:c9:dd:34:e2:1a:6b:65:dc:09:96:33:34:
1d:58:4c:c1:41:59:78:7e:ce:21:f3:77:58:77:ed:
5d:c8:87:af:af:d8:9a:6c:dd:bb:84:d5:f6:e6:96:
72:b4:37:10:ac:9e:81:61:e4:fd:87:e9:c3:27:d1:
4d:dc:7f:40:0d:45:3a:65:32:65:d8:3b:55:03:5a:
f1:b4:39:16:7c:b5:e7:31:c1:19:bb:64:27:85:d6:
d7:3c:ab:d8:f0:1b:33:cd:32:a0:45:1b:6b:3c:eb:
ec:3f:a8:71:d9:d8:fb:01:c1:0a:9c:1b:a7:e0:78:
5d:a1:cb:c1:58:c3:25:75:c0:2a:2d:b1:ee:cc:12:
bb:f3:9c:84:b8:d5:c0:37:57:a4:10:9a:ba:be:5a:
c0:84:40:8b:42:52:e2:32:3c:72:2b:80:e3:94:bf:
d0:57:b0:48:12:db:8e:1d:9c:39:14:5a:82:40:16:
b2:fb:09:52:b4:50:bb:12:ff:41:29:80:44:53:b7:
ce:71:5c:07:82:48:50:d4:ec:63:96:b2:7d:12:a0:
c4:32:78:11:a5:48:86:08:11:40:4c:da:bf:13:9b:
3e:f8:11:6d:b0:0e:52:8c:4b:fa:b6:14:ae:a5:aa:
ac:76:82:38:c7:fc:aa:3d:2e:3e:36:bd:e2:c1:d2:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:40:BB:FE:4A:66:30:C5:74:82:EF:A4:F2:46:E5:D4:5D:CF:3F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A2JAu_5KZjDFdILvpPJG5dRdzz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:c5:89:fa:2e:05:27:35:6f:a2:a5:22:55:1d:cc:96:f8:cb:
e4:ef:37:94:2f:fc:b4:d4:f4:df:69:e9:d8:8a:2e:98:09:3b:
f5:73:5d:18:7e:d1:47:c2:9b:59:69:8e:b2:62:44:fd:49:a5:
a1:d6:92:67:4d:9b:72:4c:df:1a:fa:27:51:87:0e:a4:b8:b0:
71:58:1c:80:14:17:b9:45:60:94:11:28:85:ae:43:0e:c5:5f:
c0:9d:fc:ab:21:5b:f5:29:7d:c7:81:b2:9e:96:eb:77:23:de:
a6:f3:75:e2:b5:d8:d3:df:2c:7c:6a:fc:41:3e:bc:c9:66:30:
98:c0:1e:b1:d8:0d:ba:b4:40:21:f1:b9:d2:06:10:66:74:c4:
bf:5e:ca:d3:0c:40:90:a6:44:9a:a1:2f:b3:af:a8:6a:d9:8a:
0f:57:d7:5e:38:9a:66:f1:c9:a2:d5:77:e8:c6:13:0a:97:94:
1f:b4:13:f3:43:ef:f8:02:00:89:ab:fe:43:6f:17:27:db:37:
fd:a5:94:5c:47:2b:7f:c5:d6:4e:56:1a:da:46:a1:37:93:af:
00:47:93:b5:1e:3b:4b:f7:02:16:9c:5c:72:f6:32:d8:86:7c:
6c:25:6b:b2:0c:d2:71:7b:8c:cd:77:c0:a1:1f:fc:ab:f8:36:
0c:8a:73:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0aHlQWEN3EYAlWI0+gVHH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE4MDExMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzYyNDBiYmZlNGE2NjMwYzU3NDgyZWZhNGYyNDZlNWQ0NWRjZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEbJ3TTiGmtl3AmWMzQdWEzBQVl4
fs4h83dYd+1dyIevr9iabN27hNX25pZytDcQrJ6BYeT9h+nDJ9FN3H9ADUU6ZTJl
2DtVA1rxtDkWfLXnMcEZu2QnhdbXPKvY8BszzTKgRRtrPOvsP6hx2dj7AcEKnBun
4HhdocvBWMMldcAqLbHuzBK785yEuNXAN1ekEJq6vlrAhECLQlLiMjxyK4DjlL/Q
V7BIEtuOHZw5FFqCQBay+wlStFC7Ev9BKYBEU7fOcVwHgkhQ1OxjlrJ9EqDEMngR
pUiGCBFATNq/E5s++BFtsA5SjEv6thSupaqsdoI4x/yqPS4+Nr3iwdJmaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFANiQLv+SmYwxXSC76TyRuXUXc8/MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQTJKQXVfNUtaakRGZElMdnBQSkc1ZFJkeno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIjFifouBSc1b6KlIlUd
zJb4y+TvN5Qv/LTU9N9p6diKLpgJO/VzXRh+0UfCm1lpjrJiRP1JpaHWkmdNm3JM
3xr6J1GHDqS4sHFYHIAUF7lFYJQRKIWuQw7FX8Cd/KshW/UpfceBsp6W63cj3qbz
deK12NPfLHxq/EE+vMlmMJjAHrHYDbq0QCHxudIGEGZ0xL9eytMMQJCmRJqhL7Ov
qGrZig9X1144mmbxyaLVd+jGEwqXlB+0E/ND7/gCAImr/kNvFyfbN/2llFxHK3/F
1k5WGtpGoTeTrwBHk7UeO0v3AhacXHL2MtiGfGwla7IM0nF7jM13wKEf/Kv4NgyK
cwU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:40 2025 by rpki-client