Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VZwlHQGNSZqTfY4cJ1r9yX1B9kg.roa
File: VZwlHQGNSZqTfY4cJ1r9yX1B9kg.roa (raw, json)
Hash identifier: WtrQFfFBMca+YSMrI/MGsNjBZqzW0NpbMSKDwzzDerE=
Subject key identifier: 55:9C:25:1D:01:8D:49:9A:93:7D:8E:1C:27:5A:FD:C9:7D:41:F6:48
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9962CD374D7D9626993F6390D0D7F046
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VZwlHQGNSZqTfY4cJ1r9yX1B9kg.roa
Signing time: Sun 24 Dec 2023 01:13:58 +0000
ROA not before: Sun 24 Dec 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:62:cd:37:4d:7d:96:26:99:3f:63:90:d0:d7:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=559c251d018d499a937d8e1c275afdc97d41f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:5e:a5:7d:45:8c:c0:73:a8:98:7c:d2:82:
8c:3a:f8:00:4b:43:22:99:69:c6:9a:99:9f:1e:b7:
fd:81:05:64:24:61:ff:b5:a2:4b:7b:dd:b1:c8:8c:
0a:5a:a3:94:12:78:53:b2:9a:c2:dd:40:11:02:0a:
6a:c3:3e:1b:82:33:88:81:68:9f:07:0c:f8:c1:f7:
fd:2f:20:96:37:1a:53:5b:2a:0d:b6:79:b2:e5:a1:
4b:bb:bf:6c:aa:68:68:86:49:65:ef:7a:26:28:36:
fb:46:b4:0e:e4:8d:38:50:97:2e:39:03:b9:7c:e3:
d6:f3:aa:a0:7e:53:71:db:75:bb:59:fc:80:1d:5c:
59:90:ae:b9:02:0b:1f:f0:51:a1:af:0f:71:ca:5e:
8d:0a:91:5e:87:40:ce:07:21:d6:75:68:30:4f:ec:
fa:f6:dd:a4:3d:80:4a:c2:46:82:af:d3:94:68:e2:
8a:14:14:13:44:66:9d:b8:ef:4b:fe:6c:71:3c:08:
24:56:58:77:7a:44:18:56:f3:d8:e0:fb:0f:4e:d4:
23:6a:dc:e7:c0:be:33:fa:4b:13:05:20:c7:36:6e:
ff:ae:1b:7f:10:b0:6d:67:d7:cb:38:93:b4:ed:63:
68:df:9a:a9:83:64:c7:bb:8a:c9:82:98:5d:05:13:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:25:1D:01:8D:49:9A:93:7D:8E:1C:27:5A:FD:C9:7D:41:F6:48
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VZwlHQGNSZqTfY4cJ1r9yX1B9kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1c:99:43:34:60:5a:0e:86:d6:59:d0:01:48:67:ac:d9:ec:
82:f9:f3:5f:e4:43:4e:31:41:b5:20:7e:bc:68:99:c8:61:3f:
7a:97:12:3e:6f:1b:64:6f:05:8d:a4:34:9e:aa:d3:d1:a1:05:
67:09:fc:33:e6:3b:35:bc:c0:54:31:7c:b9:05:a2:c1:3c:98:
0d:45:c3:4a:24:ea:bf:f3:f1:1b:e1:7a:64:f5:77:4c:2e:a7:
2a:1c:7f:41:9b:41:36:cf:04:8e:f0:03:a7:1d:10:cf:a1:33:
da:d7:1f:38:46:53:c4:40:f3:e3:c4:58:22:48:ae:29:4e:aa:
fd:48:6b:a5:4d:a0:00:77:1d:a2:f3:b0:1f:97:68:db:a3:8f:
78:ac:56:f0:ef:eb:e8:d3:3e:58:45:51:9d:17:eb:4b:8f:ba:
32:d1:5b:68:7b:a5:c5:f5:63:99:4f:4b:a3:a8:53:b2:89:f6:
9f:12:15:b6:03:68:10:65:68:f9:27:fe:9e:8a:78:2f:47:c1:
91:e1:ed:3f:42:75:88:56:76:27:21:1e:3a:5e:7c:72:64:9d:
63:00:25:0f:36:5d:00:b4:aa:a8:dc:db:11:fa:a4:3b:48:f5:
2d:81:a7:0b:90:1e:b3:d7:84:73:3e:dd:c0:83:33:97:1a:94:
f5:ef:83:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyZYs03TX2WJpk/Y5DQ1/BGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI0MDExMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTljMjUxZDAxOGQ0OTlhOTM3ZDhlMWMyNzVhZmRjOTdkNDFmNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PlepX1FjMBzqJh80oKMOvgAS0Mi
mWnGmpmfHrf9gQVkJGH/taJLe92xyIwKWqOUEnhTsprC3UARAgpqwz4bgjOIgWif
Bwz4wff9LyCWNxpTWyoNtnmy5aFLu79sqmhohkll73omKDb7RrQO5I04UJcuOQO5
fOPW86qgflNx23W7WfyAHVxZkK65Agsf8FGhrw9xyl6NCpFeh0DOByHWdWgwT+z6
9t2kPYBKwkaCr9OUaOKKFBQTRGaduO9L/mxxPAgkVlh3ekQYVvPY4PsPTtQjatzn
wL4z+ksTBSDHNm7/rht/ELBtZ9fLOJO07WNo35qpg2THu4rJgphdBRM0gwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFWcJR0BjUmak32OHCda/cl9QfZIMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVlp3bEhRR05TWnFUZlk0Y0oxcjl5WDFCOWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIwcmUM0YFoOhtZZ0AFI
Z6zZ7IL581/kQ04xQbUgfrxomchhP3qXEj5vG2RvBY2kNJ6q09GhBWcJ/DPmOzW8
wFQxfLkFosE8mA1Fw0ok6r/z8RvhemT1d0wupyocf0GbQTbPBI7wA6cdEM+hM9rX
HzhGU8RA8+PEWCJIrilOqv1Ia6VNoAB3HaLzsB+XaNujj3isVvDv6+jTPlhFUZ0X
60uPujLRW2h7pcX1Y5lPS6OoU7KJ9p8SFbYDaBBlaPkn/p6KeC9HwZHh7T9CdYhW
dichHjpefHJknWMAJQ82XQC0qqjc2xH6pDtI9S2BpwuQHrPXhHM+3cCDM5calPXv
g0c=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:11 2025 by rpki-client