Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fSe0ASZAqhSC5Y-3NNobgI9XvEs.roa
File: fSe0ASZAqhSC5Y-3NNobgI9XvEs.roa (raw, json)
Hash identifier: KaIcNavErz615d6oAhSM+BB3JmT4/fqLGdVIjWl0Uk8=
Subject key identifier: 7D:27:B4:01:26:40:AA:14:82:E5:8F:B7:34:DA:1B:80:8F:57:BC:4B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E03212861BC382015521533B5E932FA96
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fSe0ASZAqhSC5Y-3NNobgI9XvEs.roa
Signing time: Sun 03 Mar 2024 07:04:48 +0000
ROA not before: Sun 03 Mar 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:320:ae2e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:21:28:61:bc:38:20:15:52:15:33:b5:e9:32:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d27b4012640aa1482e58fb734da1b808f57bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:f7:fd:9a:f1:fd:35:74:97:db:f1:4b:ce:
63:6a:3c:09:af:51:b4:bc:4e:e4:c4:44:33:8d:98:
33:97:07:0c:1d:74:b0:dd:11:22:2d:5b:02:f6:f4:
84:1c:45:14:ab:0b:e1:9a:c9:51:dc:f7:96:cd:eb:
ab:ca:10:03:a4:ad:2f:ee:ec:8c:5f:75:34:9d:dd:
b4:ab:06:20:dc:ee:23:c2:f0:15:a5:58:f7:81:65:
7c:16:3d:0e:73:62:2c:68:cc:c9:75:ea:77:16:a5:
49:77:34:74:c3:4b:9b:f4:fb:4b:f9:49:4b:78:0f:
22:db:f1:e6:98:d9:ad:b4:65:fb:8d:5b:26:6a:9f:
9a:a4:45:7b:f1:e4:02:fa:0d:8e:80:d6:1b:0a:da:
9f:a9:dc:42:9f:b2:cb:8e:c0:9a:e8:ff:b8:35:1a:
9e:e3:15:bc:d4:9b:a8:3f:4b:b8:62:82:70:c7:9c:
ca:8a:d0:bc:17:35:e5:f0:a7:99:62:54:9b:54:10:
83:65:3d:48:57:43:74:b0:b2:97:c9:e5:34:e5:de:
9a:d9:9e:5a:67:98:31:34:0b:3b:2a:80:61:0d:ee:
8d:10:5e:58:66:07:05:12:6d:3d:19:35:df:85:c7:
e1:ce:af:ac:9e:b7:67:66:e2:8f:26:f2:1d:35:e7:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:B4:01:26:40:AA:14:82:E5:8F:B7:34:DA:1B:80:8F:57:BC:4B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fSe0ASZAqhSC5Y-3NNobgI9XvEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:79:57:2f:a9:6b:94:69:fb:cf:17:29:bd:bc:e7:6d:b4:d9:
1c:78:0a:2b:4a:aa:fa:a3:89:5e:92:d8:74:32:f3:32:87:cd:
b5:36:aa:51:47:b3:21:60:07:bb:06:bc:cb:4e:b9:73:b0:62:
a4:bd:54:be:a6:78:a5:09:cc:dc:8f:2d:8c:e1:7f:ef:0e:97:
ff:5b:e1:4e:56:56:b1:3c:96:88:25:52:d3:0a:8b:c6:93:8d:
48:c6:a2:a1:ad:a8:50:ce:bc:5e:21:e6:b2:89:c4:b4:54:64:
a4:10:4a:5e:87:ab:42:5c:49:ce:2a:d3:04:bd:41:22:d5:ab:
5f:26:d2:ca:3f:8b:43:dc:f7:60:be:93:94:a9:46:8a:18:e2:
5c:7e:73:f5:d6:b5:86:6d:15:34:43:54:e1:c5:22:d3:e5:c8:
44:b1:18:68:0b:6b:91:4c:c7:31:42:60:31:ed:48:37:2c:d6:
98:da:94:59:8b:23:9a:70:69:f9:ee:61:44:56:30:44:9f:9c:
53:85:1b:80:62:21:03:79:b9:07:a0:1a:69:59:82:d9:ae:0b:
ca:67:25:29:9c:e0:a7:ca:31:17:07:03:ef:72:bc:c1:41:a9:
57:7e:b1:2c:07:f0:55:b2:0e:62:a2:33:20:09:82:7e:2a:c4:
2e:b7:f8:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4DIShhvDggFVIVM7XpMvqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAzMDcwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI3YjQwMTI2NDBhYTE0ODJlNThmYjczNGRhMWI4MDhmNTdiYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR/3/Zrx/TV0l9vxS85jajwJr1G0
vE7kxEQzjZgzlwcMHXSw3REiLVsC9vSEHEUUqwvhmslR3PeWzeuryhADpK0v7uyM
X3U0nd20qwYg3O4jwvAVpVj3gWV8Fj0Oc2IsaMzJdep3FqVJdzR0w0ub9PtL+UlL
eA8i2/HmmNmttGX7jVsmap+apEV78eQC+g2OgNYbCtqfqdxCn7LLjsCa6P+4NRqe
4xW81JuoP0u4YoJwx5zKitC8FzXl8KeZYlSbVBCDZT1IV0N0sLKXyeU05d6a2Z5a
Z5gxNAs7KoBhDe6NEF5YZgcFEm09GTXfhcfhzq+snrdnZuKPJvIdNecybQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH0ntAEmQKoUguWPtzTaG4CPV7xLMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZlNlMEFTWkFxaFNDNVktM05Ob2JnSTlYdkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABN5Vy+pa5Rp+88XKb28
52202Rx4CitKqvqjiV6S2HQy8zKHzbU2qlFHsyFgB7sGvMtOuXOwYqS9VL6meKUJ
zNyPLYzhf+8Ol/9b4U5WVrE8loglUtMKi8aTjUjGoqGtqFDOvF4h5rKJxLRUZKQQ
Sl6Hq0JcSc4q0wS9QSLVq18m0so/i0Pc92C+k5SpRooY4lx+c/XWtYZtFTRDVOHF
ItPlyESxGGgLa5FMxzFCYDHtSDcs1pjalFmLI5pwafnuYURWMESfnFOFG4BiIQN5
uQegGmlZgtmuC8pnJSmc4KfKMRcHA+9yvMFBqVd+sSwH8FWyDmKiMyAJgn4qxC63
+M4=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:26 2025 by rpki-client