Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CHzGx5n9-pajtNFR416zg_N-XE0.roa
File: CHzGx5n9-pajtNFR416zg_N-XE0.roa (raw, json)
Hash identifier: 0/0vykpiHwPoJOFTf5PVzjHQZOcxZtLu+bp7el5WCw4=
Subject key identifier: 08:7C:C6:C7:99:FD:FA:96:A3:B4:D1:51:E3:5E:B3:83:F3:7E:5C:4D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D758AF07733DE48F315100F99C96B3193
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CHzGx5n9-pajtNFR416zg_N-XE0.roa
Signing time: Sun 04 Feb 2024 19:14:16 +0000
ROA not before: Sun 04 Feb 2024 19:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:75:8a:f0:77:33:de:48:f3:15:10:0f:99:c9:6b:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 19:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=087cc6c799fdfa96a3b4d151e35eb383f37e5c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:b9:cc:c6:ea:a9:8b:88:fa:22:ce:26:be:
c8:ea:d8:26:8b:41:3d:53:73:4f:98:96:26:fe:f4:
2d:9a:80:b7:c5:f7:30:3e:2d:23:34:d8:22:3a:69:
8e:44:3a:67:1b:3d:25:42:ca:81:c4:d3:c2:1c:14:
f8:68:6f:60:4b:c9:13:10:28:cf:5a:2a:26:46:9b:
69:e0:a2:ba:e3:07:5a:24:c2:c7:39:83:7b:73:56:
99:b5:7c:e9:63:5e:bf:e3:3e:82:ef:43:99:4c:62:
52:17:28:94:7f:33:b4:47:e0:18:6f:27:59:f4:f4:
a4:d6:8b:6b:f7:86:c6:14:19:11:18:1f:a2:67:ed:
54:00:48:f7:ae:31:11:e7:f3:35:70:7b:c7:e4:ab:
d6:be:38:92:ab:72:b5:54:a0:fe:fd:08:4d:18:98:
b3:81:84:25:7b:d8:84:fa:53:8a:e7:45:9a:b7:56:
88:f1:5f:06:15:d4:4e:5c:c8:76:1d:eb:ec:48:1c:
d5:09:07:7e:18:36:95:36:c8:b2:bc:d6:70:b0:fe:
b7:a4:45:ae:f9:4b:87:e9:24:14:f0:2e:f9:02:58:
d8:ae:1c:dd:1e:b8:55:05:25:41:c8:db:ea:ce:79:
6c:d2:f7:87:33:d0:6d:16:6a:c6:71:c0:a0:58:54:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7C:C6:C7:99:FD:FA:96:A3:B4:D1:51:E3:5E:B3:83:F3:7E:5C:4D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CHzGx5n9-pajtNFR416zg_N-XE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6e:d3:84:92:f7:cc:22:0b:d1:01:19:82:7c:77:5c:e7:06:
be:ea:99:b1:97:44:a8:81:9a:10:6b:92:3d:0b:10:c1:1f:fb:
96:6f:d6:86:5c:cd:d7:c6:3a:49:48:f1:6a:2d:2d:24:d5:6f:
80:37:04:d2:8d:a0:0b:b2:50:ee:5e:22:1b:81:68:a8:fa:24:
3f:6d:03:5b:da:83:5d:35:b2:70:09:a7:c1:c5:17:03:4a:43:
de:8b:72:c9:48:6c:b2:20:79:eb:ab:11:bf:7d:11:19:28:81:
bc:36:e7:cb:f5:a0:30:12:91:64:52:b8:57:4a:58:c4:aa:00:
2f:87:0e:fa:1b:7a:97:73:41:70:8d:bd:8f:66:2a:7c:cf:76:
57:32:a3:1f:c0:47:95:2f:0c:b4:67:0e:db:01:76:c4:22:22:
e7:7a:2f:b4:6d:1b:b6:14:29:64:a9:b5:20:54:90:4a:70:5d:
60:57:5f:58:37:ee:48:de:e3:3a:1c:02:87:3c:43:1d:12:fc:
b6:a9:8e:d8:48:32:dc:d2:bf:0e:e0:0e:d8:5a:6d:70:1a:6d:
09:dc:5d:75:89:2e:fe:18:39:05:fa:1e:d2:9f:3d:91:8e:1e:
9f:36:50:fd:ea:ca:22:47:3d:3d:cd:ef:5a:fb:f5:aa:57:b1:
48:55:7d:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY11ivB3M95I8xUQD5nJazGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA0MTkxNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdjYzZjNzk5ZmRmYTk2YTNiNGQxNTFlMzVlYjM4M2YzN2U1YzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LS5zMbqqYuI+iLOJr7I6tgmi0E9
U3NPmJYm/vQtmoC3xfcwPi0jNNgiOmmORDpnGz0lQsqBxNPCHBT4aG9gS8kTECjP
WiomRptp4KK64wdaJMLHOYN7c1aZtXzpY16/4z6C70OZTGJSFyiUfzO0R+AYbydZ
9PSk1otr94bGFBkRGB+iZ+1UAEj3rjER5/M1cHvH5KvWvjiSq3K1VKD+/QhNGJiz
gYQle9iE+lOK50Wat1aI8V8GFdROXMh2HevsSBzVCQd+GDaVNsiyvNZwsP63pEWu
+UuH6SQU8C75AljYrhzdHrhVBSVByNvqznls0veHM9BtFmrGccCgWFRJPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAh8xseZ/fqWo7TRUeNes4PzflxNMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQ0h6R3g1bjktcGFqdE5GUjQxNnpnX04tWEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG1u04SS98wiC9EBGYJ8
d1znBr7qmbGXRKiBmhBrkj0LEMEf+5Zv1oZczdfGOklI8WotLSTVb4A3BNKNoAuy
UO5eIhuBaKj6JD9tA1vag101snAJp8HFFwNKQ96LcslIbLIgeeurEb99ERkogbw2
58v1oDASkWRSuFdKWMSqAC+HDvobepdzQXCNvY9mKnzPdlcyox/AR5UvDLRnDtsB
dsQiIud6L7RtG7YUKWSptSBUkEpwXWBXX1g37kje4zocAoc8Qx0S/LapjthIMtzS
vw7gDthabXAabQncXXWJLv4YOQX6HtKfPZGOHp82UP3qyiJHPT3N71r79apXsUhV
feI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:49:12 2025 by rpki-client