Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fFymzqqfM_2FYMLvdRfNOyhk2H4.roa
File: fFymzqqfM_2FYMLvdRfNOyhk2H4.roa (raw, json)
Hash identifier: fQW8zAyXzPIij3BxIOa7FNCZwCwqAfG3UPY4uXRhpx4=
Subject key identifier: 7C:5C:A6:CE:AA:9F:33:FD:85:60:C2:EF:75:17:CD:3B:28:64:D8:7E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8E3421F3725C0063B9C9B97E3C735EC0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fFymzqqfM_2FYMLvdRfNOyhk2H4.roa
Signing time: Sat 30 Mar 2024 07:12:44 +0000
ROA not before: Sat 30 Mar 2024 07:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8e:34:21:f3:72:5c:00:63:b9:c9:b9:7e:3c:73:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 07:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c5ca6ceaa9f33fd8560c2ef7517cd3b2864d87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:29:56:e1:38:e1:91:c4:c3:5f:a7:00:c1:
7a:39:6e:63:84:63:18:90:c2:1a:1e:13:a9:aa:a5:
5f:d0:42:61:a4:9f:c1:15:ef:54:79:d0:49:32:5d:
d8:f9:be:78:a0:d9:d2:55:f0:39:1e:02:9f:49:97:
e9:54:fc:50:6a:b1:4d:c6:36:74:3b:6d:07:ac:5b:
0e:c7:d7:31:2c:28:43:de:c6:86:28:35:37:09:1a:
b3:95:50:4a:68:6e:ff:94:f1:a7:8d:7e:65:30:14:
8f:52:f4:dc:a1:08:2e:66:61:e8:84:e2:8b:f2:d8:
ce:d3:10:31:05:c9:a0:64:3b:26:8f:83:c9:0f:26:
6f:c4:51:39:a5:ed:e6:48:24:75:40:21:c0:45:8f:
c7:36:87:31:92:ff:a6:20:7e:f9:10:66:c0:3f:9f:
0a:2c:f6:5b:a6:fc:b5:e9:e5:72:28:b6:69:16:11:
39:54:bb:c9:7d:ba:1b:c0:7f:07:f6:03:94:9e:08:
86:e2:3c:41:9e:b0:7b:d5:76:d9:2e:c0:03:c5:d4:
14:31:a9:af:64:e7:4b:ba:e1:ef:b7:31:6c:2b:0f:
79:97:a6:3a:7d:a7:52:fc:62:15:4d:ac:ae:bd:36:
2b:ce:40:57:a1:03:67:ca:44:7c:7b:78:29:84:7c:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:A6:CE:AA:9F:33:FD:85:60:C2:EF:75:17:CD:3B:28:64:D8:7E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fFymzqqfM_2FYMLvdRfNOyhk2H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:d5:48:10:e0:f8:37:98:a5:31:fe:07:dc:8a:4c:8a:63:f9:
6f:c4:65:39:c3:8b:a6:6a:66:63:b8:2f:74:fd:e3:3d:d8:3d:
22:a2:0d:cb:ca:5d:92:46:e1:8e:1d:8b:f3:03:06:4a:87:51:
a4:c8:3d:32:33:ec:f8:d3:a0:7b:63:60:1e:12:6a:a7:a7:89:
82:99:28:5b:ff:e3:2d:1d:8a:d2:d5:69:0f:8b:d9:f6:d7:79:
7e:aa:8b:51:3b:a7:9b:b6:17:d5:3f:2b:96:19:e8:8a:ac:47:
a6:0f:80:9a:df:78:68:42:a3:4c:f4:df:ce:33:39:a8:e9:49:
46:24:60:ef:e2:57:4d:d5:55:85:8f:fc:b7:f7:0f:37:22:8a:
bc:bf:7a:3a:b6:9d:3c:dc:f8:b2:ee:6c:93:f3:88:5b:f0:96:
1b:10:43:61:13:38:ab:da:11:f7:97:24:7b:fc:e4:d0:10:ae:
09:7b:3b:da:66:b4:e6:8d:60:f9:02:b6:52:f1:dc:4b:a7:df:
17:d4:57:94:07:53:cf:c7:47:90:2c:0e:80:95:2d:5d:9a:67:
92:a8:71:e7:2d:68:57:95:03:20:c8:68:e2:0b:aa:e9:ce:02:
d4:82:02:11:9f:ac:d5:46:9a:21:22:cd:10:59:4e:11:8c:12:
a7:2b:86:9a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6ONCHzclwAY7nJuX48c17AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMwMDcxMjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzVjYTZjZWFhOWYzM2ZkODU2MGMyZWY3NTE3Y2QzYjI4NjRkODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGgpVuE44ZHEw1+nAMF6OW5jhGMY
kMIaHhOpqqVf0EJhpJ/BFe9UedBJMl3Y+b54oNnSVfA5HgKfSZfpVPxQarFNxjZ0
O20HrFsOx9cxLChD3saGKDU3CRqzlVBKaG7/lPGnjX5lMBSPUvTcoQguZmHohOKL
8tjO0xAxBcmgZDsmj4PJDyZvxFE5pe3mSCR1QCHARY/HNocxkv+mIH75EGbAP58K
LPZbpvy16eVyKLZpFhE5VLvJfbobwH8H9gOUngiG4jxBnrB71XbZLsADxdQUMamv
ZOdLuuHvtzFsKw95l6Y6fadS/GIVTayuvTYrzkBXoQNnykR8e3gphHwy7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHxcps6qnzP9hWDC73UXzTsoZNh+MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZkZ5bXpxcWZNXzJGWU1MdmRSZk5PeWhrMkg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHLVSBDg+DeYpTH+B9yK
TIpj+W/EZTnDi6ZqZmO4L3T94z3YPSKiDcvKXZJG4Y4di/MDBkqHUaTIPTIz7PjT
oHtjYB4SaqeniYKZKFv/4y0ditLVaQ+L2fbXeX6qi1E7p5u2F9U/K5YZ6IqsR6YP
gJrfeGhCo0z0384zOajpSUYkYO/iV03VVYWP/Lf3Dzciiry/ejq2nTzc+LLubJPz
iFvwlhsQQ2ETOKvaEfeXJHv85NAQrgl7O9pmtOaNYPkCtlLx3Eun3xfUV5QHU8/H
R5AsDoCVLV2aZ5KocectaFeVAyDIaOILqunOAtSCAhGfrNVGmiEizRBZThGMEqcr
hpo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:11 2025 by rpki-client