Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/McpdOYHBuekypYJDw-VVahy1G4s.roa
File: McpdOYHBuekypYJDw-VVahy1G4s.roa (raw, json)
Hash identifier: TPzCRCkBK51pSKjiSkYDhkfRozKCEMRTZbahwbY7nLE=
Subject key identifier: 31:CA:5D:39:81:C1:B9:E9:32:A5:82:43:C3:E5:55:6A:1C:B5:1B:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D95BAAC924A559186AD2642C56798E3B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/McpdOYHBuekypYJDw-VVahy1G4s.roa
Signing time: Sun 11 Feb 2024 01:14:15 +0000
ROA not before: Sun 11 Feb 2024 01:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:95:ba:ac:92:4a:55:91:86:ad:26:42:c5:67:98:e3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 01:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31ca5d3981c1b9e932a58243c3e5556a1cb51b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:02:bb:56:ff:37:3b:49:e7:11:07:2a:cd:
9d:cc:66:9b:d0:8a:bb:c0:a9:0f:20:d4:34:b3:34:
4a:70:d8:1c:2c:ba:f1:45:c3:cc:d0:60:d1:a6:11:
f0:b8:67:42:cf:2d:cc:62:49:26:c9:33:bf:4a:a3:
f9:fe:e1:80:69:95:65:ce:4a:31:06:0a:40:63:a9:
66:4f:d1:a9:91:6c:98:fe:ee:8b:6c:bf:68:79:98:
11:eb:73:27:67:36:25:82:46:b3:d3:a5:68:88:e7:
08:13:8d:c0:57:c4:58:0a:76:76:af:21:e3:ff:f3:
90:0d:44:35:45:60:b6:b3:5e:a5:fb:09:fb:6a:52:
76:cf:1d:08:2d:94:bd:9e:ba:a2:68:95:39:ff:06:
15:e7:80:1e:8a:a8:76:7f:1a:71:d4:59:32:29:bf:
75:7e:89:10:62:83:62:da:68:94:d8:54:be:eb:d8:
88:65:e6:94:85:7d:be:78:ac:73:af:ad:d3:f5:b9:
f9:76:d4:97:f2:92:10:9f:c7:e1:76:f3:9d:9d:29:
9a:ac:a0:d2:7e:ab:68:54:0d:a9:0e:ef:4a:d0:36:
16:cf:1a:c3:c5:ac:20:dc:01:a1:6c:4d:66:ea:f5:
c8:e5:3f:df:1c:d2:4e:56:4e:18:3b:6e:ae:cc:d4:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:5D:39:81:C1:B9:E9:32:A5:82:43:C3:E5:55:6A:1C:B5:1B:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/McpdOYHBuekypYJDw-VVahy1G4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:99:aa:08:3f:b3:39:40:c2:a4:10:fb:c4:38:f6:54:f0:89:
cf:57:05:3a:5f:e6:3e:d1:ed:8a:ef:fb:c4:39:fc:e2:91:08:
28:91:98:04:dc:cc:60:f3:71:ba:75:ae:e5:3d:f5:d8:f9:37:
43:28:f3:fb:08:66:55:88:c1:98:d4:1a:58:e6:4d:95:c6:df:
25:56:15:eb:e5:5d:4b:bd:f1:aa:0c:da:5b:82:39:2c:89:34:
06:77:b9:47:d7:9e:9a:05:0f:43:ed:7d:05:77:28:40:fc:8f:
2a:4b:24:0d:2d:84:2f:51:ba:5c:68:d3:b9:9e:55:dd:8f:a7:
39:f0:32:3e:63:2c:13:94:d4:4d:d8:bc:e6:c6:ca:88:dd:61:
0e:80:52:bc:0f:36:c1:16:cf:4b:43:10:a1:8a:fc:d0:49:19:
9e:ee:f4:07:8a:7d:09:93:78:ff:c6:95:99:ae:d7:65:3e:66:
58:ba:85:10:d1:07:de:92:79:61:86:c2:01:9b:8e:27:c4:ad:
98:d3:ea:23:ae:10:1d:50:2b:a1:f4:f3:47:50:0b:7c:28:1a:
1f:45:ce:a8:4f:d6:61:05:5e:c6:7a:9a:ca:1d:69:eb:cd:bc:
2d:4a:c2:2b:0c:0b:73:3f:aa:1d:ef:d2:00:09:bc:4f:a7:3f:
4e:00:82:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2VuqySSlWRhq0mQsVnmOO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjExMDExNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWNhNWQzOTgxYzFiOWU5MzJhNTgyNDNjM2U1NTU2YTFjYjUxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlegCu1b/NztJ5xEHKs2dzGab0Iq7
wKkPINQ0szRKcNgcLLrxRcPM0GDRphHwuGdCzy3MYkkmyTO/SqP5/uGAaZVlzkox
BgpAY6lmT9GpkWyY/u6LbL9oeZgR63MnZzYlgkaz06VoiOcIE43AV8RYCnZ2ryHj
//OQDUQ1RWC2s16l+wn7alJ2zx0ILZS9nrqiaJU5/wYV54Aeiqh2fxpx1FkyKb91
fokQYoNi2miU2FS+69iIZeaUhX2+eKxzr63T9bn5dtSX8pIQn8fhdvOdnSmarKDS
fqtoVA2pDu9K0DYWzxrDxawg3AGhbE1m6vXI5T/fHNJOVk4YO26uzNQ2EQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDHKXTmBwbnpMqWCQ8PlVWoctRuLMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTWNwZE9ZSEJ1ZWt5cFlKRHctVlZhaHkxRzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAKZqgg/szlAwqQQ+8Q4
9lTwic9XBTpf5j7R7Yrv+8Q5/OKRCCiRmATczGDzcbp1ruU99dj5N0Mo8/sIZlWI
wZjUGljmTZXG3yVWFevlXUu98aoM2luCOSyJNAZ3uUfXnpoFD0PtfQV3KED8jypL
JA0thC9Rulxo07meVd2PpznwMj5jLBOU1E3YvObGyojdYQ6AUrwPNsEWz0tDEKGK
/NBJGZ7u9AeKfQmTeP/GlZmu12U+Zli6hRDRB96SeWGGwgGbjifErZjT6iOuEB1Q
K6H080dQC3woGh9FzqhP1mEFXsZ6msodaevNvC1KwisMC3M/qh3v0gAJvE+nP04A
gkU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:41:50 2025 by rpki-client