Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aIohOYulpU-2HyaqmGL04yQpxQA.roa
File: aIohOYulpU-2HyaqmGL04yQpxQA.roa (raw, json)
Hash identifier: PErCicqPIbzOHD/YlJ9dsO2jSRLQMXlSMkIT2Aokkgo=
Subject key identifier: 68:8A:21:39:8B:A5:A5:4F:B6:1F:26:AA:98:62:F4:E3:24:29:C5:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA0AE7A1F8FB4AF353FD2FF6003EB6D73
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aIohOYulpU-2HyaqmGL04yQpxQA.roa
Signing time: Mon 25 Dec 2023 11:13:58 +0000
ROA not before: Mon 25 Dec 2023 11:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:ae:7a:1f:8f:b4:af:35:3f:d2:ff:60:03:eb:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 11:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=688a21398ba5a54fb61f26aa9862f4e32429c500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:fd:68:2a:ff:da:20:36:97:6b:bf:7a:cd:
cd:6d:17:e6:6f:79:8d:92:88:79:42:48:4b:8b:5e:
3b:0b:b0:f1:42:59:0f:8f:41:be:cd:c2:69:de:70:
09:99:1e:3a:b8:26:a7:b3:24:ba:74:10:13:9b:47:
b1:bb:76:46:3a:d5:d6:7b:1e:79:fe:8f:20:88:c6:
57:8b:37:86:e8:26:a2:fd:a3:9b:fa:6e:4d:da:80:
be:42:4b:3b:37:ed:1d:bf:7a:4c:01:ac:73:27:9d:
e8:c0:36:b5:f7:68:83:1a:3f:3c:6a:1c:fa:b0:63:
4e:9e:eb:ec:d2:dd:04:a0:14:29:84:95:71:82:65:
82:5b:f4:ad:1b:bb:97:c5:26:96:24:0f:9c:21:3f:
02:58:75:31:17:b4:8d:41:24:3f:33:c5:e6:c3:b3:
f9:04:23:05:f5:4d:a2:fe:99:74:3a:f8:9b:f1:0e:
7f:31:92:7a:b3:78:30:83:35:2e:cf:53:11:59:92:
b3:9d:03:27:eb:89:5d:22:11:52:31:25:0f:c5:b3:
f0:75:c1:13:86:34:fc:30:91:37:86:74:61:69:74:
69:15:b0:03:d9:07:10:e6:3a:78:0a:de:98:89:dc:
10:f7:62:1e:52:03:12:fd:22:a7:a9:a4:1c:bd:54:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8A:21:39:8B:A5:A5:4F:B6:1F:26:AA:98:62:F4:E3:24:29:C5:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aIohOYulpU-2HyaqmGL04yQpxQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:23:c9:74:4e:ca:d4:7a:6a:f9:27:68:40:c6:60:7c:b0:02:
72:4a:73:61:39:18:49:22:4d:78:7e:2a:2b:c2:7a:75:07:3f:
86:17:96:12:02:24:26:70:8e:e5:d9:f1:fd:9c:70:6c:4f:f3:
2b:94:b9:ce:b4:6c:82:a6:57:ba:54:57:55:6e:1a:76:bb:d4:
fc:07:d5:28:fe:53:21:06:c1:f7:04:27:73:ee:9f:76:10:b4:
9f:54:dc:f4:56:ac:b4:57:df:b3:7e:07:6c:94:03:f2:e8:87:
91:cf:8f:90:44:e6:ef:8f:44:32:b6:1e:8d:34:df:25:72:f1:
53:59:52:1a:0a:de:6e:a9:4b:be:f2:d7:9b:ca:13:8a:02:7c:
7c:03:ab:b6:a9:48:be:9a:88:46:57:7a:25:bb:ab:05:ed:81:
bb:ce:e8:b1:12:16:01:32:46:7c:5a:cf:96:3c:a7:59:60:b0:
33:04:46:a9:47:b1:8b:3d:88:f4:06:5c:16:92:c5:a6:36:f0:
34:89:73:db:1e:dc:ff:a5:1a:0d:b8:ca:9f:fe:5d:d4:b1:dd:
8f:8f:4d:55:98:fd:3e:2e:94:c6:9d:33:44:cc:e4:29:6a:15:
12:74:27:26:7a:8b:84:61:40:6e:56:97:c4:6a:11:03:60:69:
9f:62:b2:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYygrnofj7SvNT/S/2AD621zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI1MTExMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhhMjEzOThiYTVhNTRmYjYxZjI2YWE5ODYyZjRlMzI0MjljNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdr9aCr/2iA2l2u/es3NbRfmb3mN
koh5QkhLi147C7DxQlkPj0G+zcJp3nAJmR46uCansyS6dBATm0exu3ZGOtXWex55
/o8giMZXizeG6Cai/aOb+m5N2oC+Qks7N+0dv3pMAaxzJ53owDa192iDGj88ahz6
sGNOnuvs0t0EoBQphJVxgmWCW/StG7uXxSaWJA+cIT8CWHUxF7SNQSQ/M8Xmw7P5
BCMF9U2i/pl0Ovib8Q5/MZJ6s3gwgzUuz1MRWZKznQMn64ldIhFSMSUPxbPwdcET
hjT8MJE3hnRhaXRpFbAD2QcQ5jp4Ct6YidwQ92IeUgMS/SKnqaQcvVTffQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGiKITmLpaVPth8mqphi9OMkKcUAMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYUlvaE9ZdWxwVS0ySHlhcW1HTDA0eVFweFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHMjyXROytR6avknaEDG
YHywAnJKc2E5GEkiTXh+KivCenUHP4YXlhICJCZwjuXZ8f2ccGxP8yuUuc60bIKm
V7pUV1VuGna71PwH1Sj+UyEGwfcEJ3Pun3YQtJ9U3PRWrLRX37N+B2yUA/Loh5HP
j5BE5u+PRDK2Ho003yVy8VNZUhoK3m6pS77y15vKE4oCfHwDq7apSL6aiEZXeiW7
qwXtgbvO6LESFgEyRnxaz5Y8p1lgsDMERqlHsYs9iPQGXBaSxaY28DSJc9se3P+l
Gg24yp/+XdSx3Y+PTVWY/T4ulMadM0TM5ClqFRJ0JyZ6i4RhQG5Wl8RqEQNgaZ9i
slc=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:30:45 2025 by rpki-client