Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UTaFDzSYyq5lQ4hT-VTkY5z7uKQ.roa
File: UTaFDzSYyq5lQ4hT-VTkY5z7uKQ.roa (raw, json)
Hash identifier: PHSQZNnly1orf9hzqq4+J/HDLEHMlaWawWXsEUfip8E=
Subject key identifier: 51:36:85:0F:34:98:CA:AE:65:43:88:53:F9:54:E4:63:9C:FB:B8:A4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E88D06F04C616124EDE6C5A2309A06C70
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UTaFDzSYyq5lQ4hT-VTkY5z7uKQ.roa
Signing time: Fri 29 Mar 2024 06:05:45 +0000
ROA not before: Fri 29 Mar 2024 06:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:88cf:a7c2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:d0:6f:04:c6:16:12:4e:de:6c:5a:23:09:a0:6c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 06:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5136850f3498caae65438853f954e4639cfbb8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:36:4b:cf:79:0f:ce:29:c9:36:4e:c1:50:
60:2b:cc:6e:a6:db:88:9b:1d:d7:84:ff:f2:c1:06:
49:ce:71:8c:7f:ed:19:50:47:ee:45:6b:37:4c:4e:
0b:38:ea:96:c9:65:22:51:ee:c3:5f:ba:e0:03:d7:
96:75:6f:a6:7a:17:93:12:b6:5b:8c:78:7e:c1:95:
20:dd:52:01:17:64:fd:1b:fd:72:f9:70:19:6e:b6:
9d:23:99:43:dd:ce:73:86:88:9b:71:c9:b0:3e:dd:
ab:71:9b:3e:e2:49:e9:df:4e:dc:8f:a9:39:d3:f1:
6c:01:1b:01:3f:7f:a2:ac:00:55:3b:0b:a9:c4:92:
22:b0:63:3b:08:78:9c:93:bc:00:5a:ea:34:94:4c:
e1:f4:5c:7c:eb:39:51:5f:25:bb:41:29:c5:30:4e:
b9:20:76:56:4d:e1:e2:2b:ac:ea:39:0a:cf:15:31:
f3:ae:5c:2f:54:f9:69:15:54:55:b7:04:98:9a:fc:
cc:c0:e4:14:a1:03:6b:71:79:1e:07:ac:6b:f2:17:
72:22:3d:3b:da:ec:41:b0:51:54:b2:f4:2f:a5:b8:
a5:3b:4f:55:52:7b:9c:06:3e:d1:e7:46:b2:64:93:
d4:9d:57:be:a9:7a:fa:74:ad:89:c0:fa:4a:45:7c:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:85:0F:34:98:CA:AE:65:43:88:53:F9:54:E4:63:9C:FB:B8:A4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UTaFDzSYyq5lQ4hT-VTkY5z7uKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:63:e4:2e:4c:a1:02:62:df:5e:44:be:db:ae:e7:9b:e9:2a:
a7:00:17:91:be:fe:27:32:e2:4c:5b:f0:2d:c8:b7:9a:2a:5f:
65:ec:09:da:ff:f5:9d:6a:54:64:23:60:28:b6:d4:83:70:b9:
f2:dd:76:c5:c8:7d:46:bf:2d:2d:b2:03:de:94:52:36:ce:08:
09:8a:45:d4:d9:04:99:c5:65:dd:25:db:9b:fb:69:96:b9:9c:
e7:3d:98:a5:8c:aa:c3:6f:6b:89:ab:dc:06:65:ba:89:a7:b7:
e1:6f:cf:0a:cc:1d:53:78:97:f4:79:1b:ba:39:52:59:c0:1c:
33:ca:47:3e:61:83:ed:d8:b3:ca:6e:f0:dc:76:e5:99:2f:83:
1b:32:d9:ca:18:11:b8:d8:3c:b3:b2:3a:35:2e:dc:3b:65:75:
32:e2:12:4b:bc:df:91:43:aa:5e:63:65:be:ec:e9:13:a2:43:
03:d3:80:ac:50:cb:33:a6:08:5c:53:22:36:3c:01:9a:21:a2:
77:72:cf:f6:b9:17:f2:ba:17:dd:51:83:42:d4:75:e4:02:34:
74:7a:09:bf:3d:43:9e:cf:d1:ba:de:f0:95:61:38:7d:f7:5e:
55:db:d0:d3:91:35:b3:ab:c4:f2:3e:eb:d0:d7:80:dc:ca:1b:
18:09:5b:0d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6I0G8ExhYSTt5sWiMJoGxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI5MDYwNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTM2ODUwZjM0OThjYWFlNjU0Mzg4NTNmOTU0ZTQ2MzljZmJiOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR02S895D84pyTZOwVBgK8xuptuI
mx3XhP/ywQZJznGMf+0ZUEfuRWs3TE4LOOqWyWUiUe7DX7rgA9eWdW+meheTErZb
jHh+wZUg3VIBF2T9G/1y+XAZbradI5lD3c5zhoibccmwPt2rcZs+4knp307cj6k5
0/FsARsBP3+irABVOwupxJIisGM7CHick7wAWuo0lEzh9Fx86zlRXyW7QSnFME65
IHZWTeHiK6zqOQrPFTHzrlwvVPlpFVRVtwSYmvzMwOQUoQNrcXkeB6xr8hdyIj07
2uxBsFFUsvQvpbilO09VUnucBj7R50ayZJPUnVe+qXr6dK2JwPpKRXz9ewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFE2hQ80mMquZUOIU/lU5GOc+7ikMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVVRhRkR6U1l5cTVsUTRoVC1WVGtZNXo3dUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHRj5C5MoQJi315Evtuu
55vpKqcAF5G+/icy4kxb8C3It5oqX2XsCdr/9Z1qVGQjYCi21INwufLddsXIfUa/
LS2yA96UUjbOCAmKRdTZBJnFZd0l25v7aZa5nOc9mKWMqsNva4mr3AZluomnt+Fv
zwrMHVN4l/R5G7o5UlnAHDPKRz5hg+3Ys8pu8Nx25Zkvgxsy2coYEbjYPLOyOjUu
3DtldTLiEku835FDql5jZb7s6ROiQwPTgKxQyzOmCFxTIjY8AZohondyz/a5F/K6
F91Rg0LUdeQCNHR6Cb89Q57P0bre8JVhOH33XlXb0NORNbOrxPI+69DXgNzKGxgJ
Ww0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:33 2025 by rpki-client