Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CEJ-NfPqaQ-VA6nauw0ltI71oes.roa
File: CEJ-NfPqaQ-VA6nauw0ltI71oes.roa (raw, json)
Hash identifier: nxP2kZquwhxsxsccoLvnSRz9rYuZqAEoukRltIACNY8=
Subject key identifier: 08:42:7E:35:F3:EA:69:0F:95:03:A9:DA:BB:0D:25:B4:8E:F5:A1:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8CB801A49B124D2BFB002DF98467536B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CEJ-NfPqaQ-VA6nauw0ltI71oes.roa
Signing time: Thu 21 Dec 2023 14:11:58 +0000
ROA not before: Thu 21 Dec 2023 14:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:b8:01:a4:9b:12:4d:2b:fb:00:2d:f9:84:67:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 14:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08427e35f3ea690f9503a9dabb0d25b48ef5a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:d1:93:2d:fe:da:cd:94:e3:87:58:ba:15:
85:bc:64:d1:53:ec:d9:4b:72:c9:71:1e:25:6b:4b:
1f:b3:d9:8f:4a:5a:52:b2:62:70:56:f6:87:4b:fc:
90:f9:ba:a1:07:df:26:a7:03:60:d7:a4:58:3d:96:
1c:f4:07:a0:d4:6d:28:99:93:3b:41:ad:93:c6:b2:
5c:f6:b1:45:f8:99:5a:76:0f:ae:04:fe:46:46:e5:
3c:46:be:6b:0a:9f:14:64:e6:70:fb:3a:a7:cf:c5:
99:9b:6d:4a:57:ad:ea:0d:ed:94:89:81:ad:f6:af:
66:82:55:cd:7c:49:bf:9a:11:8f:e6:45:8c:79:23:
62:d4:f1:01:85:a3:67:87:dc:d3:8d:ca:b3:5d:9f:
60:92:23:c4:f8:25:d3:8d:ea:71:a0:0f:86:3c:a0:
9f:72:c2:ad:e2:74:59:2e:cd:d8:9a:17:e8:68:6f:
93:f5:9f:52:4a:72:67:77:b4:c7:fc:0a:be:3d:49:
85:4f:d4:66:3e:87:b3:0f:23:34:42:b4:1e:2b:a0:
dc:9f:f4:22:33:fd:f8:8d:39:3c:40:2d:4e:d8:6a:
ba:cd:5b:1f:8b:a5:9d:64:ca:a9:e1:00:d4:69:b6:
a7:80:34:7e:ff:b1:ed:59:d0:19:d6:51:11:27:a2:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:7E:35:F3:EA:69:0F:95:03:A9:DA:BB:0D:25:B4:8E:F5:A1:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CEJ-NfPqaQ-VA6nauw0ltI71oes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:c0:65:d3:64:5c:10:52:a0:31:32:84:83:ae:93:b9:bf:f9:
1d:0f:5d:e3:73:91:ac:e5:ec:4c:44:f1:48:39:f0:03:00:22:
b3:18:cd:e4:49:58:93:e2:2a:79:2d:09:1c:b5:8f:df:91:0e:
50:31:04:b0:d9:cf:a1:5e:41:8b:6d:2b:a4:2a:a3:f5:a5:39:
d4:04:97:1f:48:ab:66:c7:d0:a2:47:77:2e:c3:95:c8:a3:1d:
d9:78:bb:2c:5d:98:09:70:90:65:a4:1b:eb:42:65:63:2b:fa:
4b:77:37:74:1f:f3:c3:1e:4a:0d:f5:b3:ec:e5:7c:80:77:0a:
d1:76:86:9a:08:c4:17:fe:91:38:33:14:ed:51:e5:7f:9e:99:
18:a6:5e:23:ec:40:bc:94:ae:7a:35:95:8f:ca:8f:29:76:6b:
98:6c:5f:bc:4b:98:31:bc:e7:14:e4:54:65:c1:39:9f:59:31:
e0:08:b5:41:65:01:90:78:1d:11:54:90:f7:2a:8a:54:19:e1:
ba:dc:43:69:11:bb:bc:bc:6f:34:07:3b:bc:7b:15:1b:99:cf:
13:61:55:3c:4e:04:4e:c9:95:d1:3a:51:02:e1:35:70:b1:ea:
00:7f:17:cd:eb:f8:39:e6:65:66:00:ea:8a:2f:7a:75:fe:92:
8b:fb:2c:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyMuAGkmxJNK/sALfmEZ1NrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMTQxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODQyN2UzNWYzZWE2OTBmOTUwM2E5ZGFiYjBkMjViNDhlZjVhMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF3Rky3+2s2U44dYuhWFvGTRU+zZ
S3LJcR4la0sfs9mPSlpSsmJwVvaHS/yQ+bqhB98mpwNg16RYPZYc9Aeg1G0omZM7
Qa2TxrJc9rFF+Jladg+uBP5GRuU8Rr5rCp8UZOZw+zqnz8WZm21KV63qDe2UiYGt
9q9mglXNfEm/mhGP5kWMeSNi1PEBhaNnh9zTjcqzXZ9gkiPE+CXTjepxoA+GPKCf
csKt4nRZLs3YmhfoaG+T9Z9SSnJnd7TH/Aq+PUmFT9RmPoezDyM0QrQeK6Dcn/Qi
M/34jTk8QC1O2Gq6zVsfi6WdZMqp4QDUabangDR+/7HtWdAZ1lERJ6KgXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAhCfjXz6mkPlQOp2rsNJbSO9aHrMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQ0VKLU5mUHFhUS1WQTZuYXV3MGx0STcxb2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF7AZdNkXBBSoDEyhIOu
k7m/+R0PXeNzkazl7ExE8Ug58AMAIrMYzeRJWJPiKnktCRy1j9+RDlAxBLDZz6Fe
QYttK6Qqo/WlOdQElx9Iq2bH0KJHdy7DlcijHdl4uyxdmAlwkGWkG+tCZWMr+kt3
N3Qf88MeSg31s+zlfIB3CtF2hpoIxBf+kTgzFO1R5X+emRimXiPsQLyUrno1lY/K
jyl2a5hsX7xLmDG85xTkVGXBOZ9ZMeAItUFlAZB4HRFUkPcqilQZ4brcQ2kRu7y8
bzQHO7x7FRuZzxNhVTxOBE7JldE6UQLhNXCx6gB/F83r+DnmZWYA6oovenX+kov7
LBs=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:19 2025 by rpki-client