Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eldqZZmzioTNfSWkO3jJ9xyA290.roa
File: eldqZZmzioTNfSWkO3jJ9xyA290.roa (raw, json)
Hash identifier: g8E6JfGNObZdaEoTuFX8HBlHxj3o4w964Glrz4sZwHs=
Subject key identifier: 7A:57:6A:65:99:B3:8A:84:CD:7D:25:A4:3B:78:C9:F7:1C:80:DB:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4F84C5093AA0D72988868CAFE5E261C7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eldqZZmzioTNfSWkO3jJ9xyA290.roa
Signing time: Mon 18 Mar 2024 03:04:45 +0000
ROA not before: Mon 18 Mar 2024 03:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:4f84:8f47/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4f:84:c5:09:3a:a0:d7:29:88:86:8c:af:e5:e2:61:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 03:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a576a6599b38a84cd7d25a43b78c9f71c80dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:6f:5c:c0:15:3c:21:0c:33:fb:cd:ce:18:
78:b4:ad:50:a1:66:2b:20:9b:27:38:79:23:da:07:
18:ed:ab:96:e2:a9:b3:ce:5a:04:aa:73:8a:7b:0f:
b8:21:82:97:17:75:a5:e5:21:c5:84:f5:9b:de:51:
50:b3:e0:88:fa:3d:18:33:3e:ad:7a:68:4f:2e:17:
f6:53:1e:8d:bc:68:64:cb:da:85:a1:a2:7e:5d:46:
2f:54:27:88:32:22:18:20:cd:db:72:dd:53:83:d1:
54:72:bc:8a:eb:23:cd:50:4d:c4:44:38:1b:bb:1f:
86:13:2a:78:cb:0c:78:7a:bc:af:c3:86:bd:20:04:
79:43:42:3a:dc:a2:f2:ea:1a:fa:1b:cc:a1:b0:be:
65:ac:72:32:a6:07:1a:ac:c6:bb:11:87:39:9d:93:
5c:8f:52:52:96:20:51:48:13:3a:a9:da:8f:d6:f6:
85:10:7d:19:46:c8:38:e5:5c:87:a5:ed:12:46:3f:
82:21:93:89:81:97:e5:fc:0a:58:0e:64:f7:7e:25:
25:80:58:9e:b0:59:69:93:53:24:55:da:cd:bd:8d:
96:aa:50:f2:00:00:6b:17:c0:27:53:45:ce:0a:d3:
70:7b:d2:8b:c5:cd:30:ef:2d:05:70:eb:1c:b2:44:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:6A:65:99:B3:8A:84:CD:7D:25:A4:3B:78:C9:F7:1C:80:DB:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eldqZZmzioTNfSWkO3jJ9xyA290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:11:e2:ff:44:55:16:e8:6b:36:34:e1:a1:70:4e:30:ce:5f:
23:2b:69:05:9e:2b:f8:05:ea:b1:4d:bd:1b:2c:8b:ef:1c:68:
a4:7d:a3:c4:78:05:ee:d0:f5:c7:84:f8:41:c5:15:09:19:18:
7d:ba:67:5e:12:29:79:ea:2a:d3:33:77:8d:ba:c5:9b:01:02:
7e:80:21:36:32:ad:38:3c:f7:33:00:45:a7:7d:6e:a1:a1:c5:
d7:00:76:98:c7:cd:c5:f6:3b:fb:f7:e8:de:22:95:c3:de:d1:
90:68:d1:1d:f6:dc:f8:81:4b:fb:c6:d5:0c:1e:21:be:02:c3:
6b:0f:a6:b2:38:38:f2:78:e4:af:e7:2d:e6:9d:97:f0:d5:3a:
68:71:ee:4d:bd:8a:5c:b5:f1:03:f3:07:27:fe:8d:42:8c:5e:
ee:fa:91:2b:50:c2:3c:f1:14:f9:04:ad:7d:cb:fb:fe:ca:bc:
0a:70:06:20:35:a4:a3:a6:21:96:a4:f5:0c:42:c1:b3:64:af:
bc:ff:3c:0a:19:01:f1:35:83:56:4a:92:4e:90:e1:0a:df:9d:
e5:84:8e:28:14:13:4b:13:b2:0e:6f:82:4f:e7:e6:13:36:6d:
70:05:6c:32:9b:d3:f5:a2:4c:14:5a:e5:77:e4:a7:2e:82:dd:
3b:dd:2a:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5PhMUJOqDXKYiGjK/l4mHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE4MDMwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTU3NmE2NTk5YjM4YTg0Y2Q3ZDI1YTQzYjc4YzlmNzFjODBkYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EVvXMAVPCEMM/vNzhh4tK1QoWYr
IJsnOHkj2gcY7auW4qmzzloEqnOKew+4IYKXF3Wl5SHFhPWb3lFQs+CI+j0YMz6t
emhPLhf2Ux6NvGhky9qFoaJ+XUYvVCeIMiIYIM3bct1Tg9FUcryK6yPNUE3ERDgb
ux+GEyp4ywx4eryvw4a9IAR5Q0I63KLy6hr6G8yhsL5lrHIypgcarMa7EYc5nZNc
j1JSliBRSBM6qdqP1vaFEH0ZRsg45VyHpe0SRj+CIZOJgZfl/ApYDmT3fiUlgFie
sFlpk1MkVdrNvY2WqlDyAABrF8AnU0XOCtNwe9KLxc0w7y0FcOscskQMswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHpXamWZs4qEzX0lpDt4yfccgNvdMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZWxkcVpabXppb1ROZlNXa08zako5eHlBMjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHgR4v9EVRboazY04aFw
TjDOXyMraQWeK/gF6rFNvRssi+8caKR9o8R4Be7Q9ceE+EHFFQkZGH26Z14SKXnq
KtMzd426xZsBAn6AITYyrTg89zMARad9bqGhxdcAdpjHzcX2O/v36N4ilcPe0ZBo
0R323PiBS/vG1QweIb4Cw2sPprI4OPJ45K/nLeadl/DVOmhx7k29ily18QPzByf+
jUKMXu76kStQwjzxFPkErX3L+/7KvApwBiA1pKOmIZak9QxCwbNkr7z/PAoZAfE1
g1ZKkk6Q4QrfneWEjigUE0sTsg5vgk/n5hM2bXAFbDKb0/WiTBRa5Xfkpy6C3Tvd
KnQ=
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:40:33 2025 by rpki-client