Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ij_qsPnbUG-Eao2nOPUJ-x9lhv8.roa
File: ij_qsPnbUG-Eao2nOPUJ-x9lhv8.roa (raw, json)
Hash identifier: 8ibjYvGyFYxrKyEx44PLs+Mvs3ZEsq5hkno8hZfdoKo=
Subject key identifier: 8A:3F:EA:B0:F9:DB:50:6F:84:6A:8D:A7:38:F5:09:FB:1F:65:86:FF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8D5664003A2E99C1681434E63950FFCB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ij_qsPnbUG-Eao2nOPUJ-x9lhv8.roa
Signing time: Thu 21 Dec 2023 17:04:58 +0000
ROA not before: Thu 21 Dec 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:8d55:c5c2/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:56:64:00:3a:2e:99:c1:68:14:34:e6:39:50:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a3feab0f9db506f846a8da738f509fb1f6586ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:88:eb:71:b7:b1:e2:d0:74:6e:53:ba:d1:
04:17:e0:10:3d:e8:ab:f1:ad:14:31:a2:d2:0e:a2:
14:86:97:dc:c6:a9:73:e7:55:8d:c4:20:3c:71:21:
e6:78:00:4c:e0:bb:27:e6:b0:de:c1:05:c4:a2:81:
48:25:3d:c8:fc:21:6e:56:c6:3b:9e:86:82:7c:da:
29:80:3c:91:0f:92:b2:1f:71:b7:0b:06:f9:02:b8:
98:ec:cd:95:d1:0b:1c:96:a1:21:3b:63:67:40:3c:
36:4f:07:e5:76:7a:e0:41:40:7b:f2:95:cf:4f:d2:
66:e1:fe:e3:d8:e0:72:b9:93:89:ba:06:a8:d1:cb:
2a:c4:63:7c:51:cb:7c:b6:80:77:54:72:b0:17:f3:
e8:cc:dc:67:94:02:98:a4:6b:0f:f1:65:83:36:58:
24:83:f4:18:d7:3b:d1:ed:46:17:f9:cc:b8:d0:b3:
43:f1:37:01:cc:29:3c:94:86:76:7a:2f:83:72:e8:
72:3e:20:5f:fd:39:fa:9b:6a:22:0b:3a:32:79:da:
58:49:28:30:eb:13:20:77:d2:2a:fc:82:5c:1a:35:
47:21:95:dc:78:f8:a9:a0:ec:5c:bd:e1:cd:52:2a:
be:b8:55:22:ae:95:64:41:78:a2:52:21:a8:5b:eb:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:EA:B0:F9:DB:50:6F:84:6A:8D:A7:38:F5:09:FB:1F:65:86:FF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ij_qsPnbUG-Eao2nOPUJ-x9lhv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:47:c2:cb:b6:15:2e:aa:17:aa:eb:b4:0b:1b:a9:b9:ec:75:
61:70:43:b8:13:a6:d2:75:97:91:7e:0c:68:5d:a4:2f:e5:b6:
c3:9f:cf:0d:a3:7e:a8:57:e7:a9:5d:89:8c:b2:61:45:8b:61:
84:94:e0:87:d8:bc:0b:09:55:eb:29:ce:e4:c6:57:b8:0d:90:
11:10:97:5e:f8:94:20:12:d5:72:cb:fe:5d:7e:19:4b:00:56:
21:f1:1d:8f:8b:be:99:13:08:fa:ef:87:a3:42:b8:fd:05:5d:
ef:c8:88:98:8e:dd:87:91:72:91:5c:bc:a2:97:94:2c:f0:3a:
bb:b1:70:03:d1:2c:e7:f2:00:19:c4:e9:a4:24:8a:49:30:f2:
de:2d:07:cc:9f:d4:b0:dc:56:25:6f:71:24:47:9e:6f:4a:54:
2f:44:a1:2a:95:95:55:8a:84:14:c4:bb:f5:f3:ae:56:8a:45:
25:b4:8f:1e:6b:7b:c9:3f:4c:26:b5:b1:d1:79:79:e2:58:8a:
71:ff:89:06:8f:b5:c9:ab:b7:cf:ba:17:09:60:24:b4:a1:02:
db:7d:f7:da:f1:df:cc:e2:f8:1e:6c:f0:0f:f6:63:3f:98:8d:
8e:8d:0c:48:95:be:c3:df:58:98:fe:aa:cd:80:5d:ff:b7:55:
d5:89:af:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyNVmQAOi6ZwWgUNOY5UP/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMTcwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTNmZWFiMGY5ZGI1MDZmODQ2YThkYTczOGY1MDlmYjFmNjU4NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIqI63G3seLQdG5TutEEF+AQPeir
8a0UMaLSDqIUhpfcxqlz51WNxCA8cSHmeABM4Lsn5rDewQXEooFIJT3I/CFuVsY7
noaCfNopgDyRD5KyH3G3Cwb5AriY7M2V0QsclqEhO2NnQDw2TwfldnrgQUB78pXP
T9Jm4f7j2OByuZOJugao0csqxGN8Uct8toB3VHKwF/PozNxnlAKYpGsP8WWDNlgk
g/QY1zvR7UYX+cy40LND8TcBzCk8lIZ2ei+DcuhyPiBf/Tn6m2oiCzoyedpYSSgw
6xMgd9Iq/IJcGjVHIZXcePipoOxcveHNUiq+uFUirpVkQXiiUiGoW+sc9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIo/6rD521BvhGqNpzj1CfsfZYb/MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaWpfcXNQbmJVRy1FYW8ybk9QVUoteDlsaHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZHwsu2FS6qF6rrtAsb
qbnsdWFwQ7gTptJ1l5F+DGhdpC/ltsOfzw2jfqhX56ldiYyyYUWLYYSU4IfYvAsJ
VespzuTGV7gNkBEQl174lCAS1XLL/l1+GUsAViHxHY+LvpkTCPrvh6NCuP0FXe/I
iJiO3YeRcpFcvKKXlCzwOruxcAPRLOfyABnE6aQkikkw8t4tB8yf1LDcViVvcSRH
nm9KVC9EoSqVlVWKhBTEu/XzrlaKRSW0jx5re8k/TCa1sdF5eeJYinH/iQaPtcmr
t8+6FwlgJLShAtt999rx38zi+B5s8A/2Yz+YjY6NDEiVvsPfWJj+qs2AXf+3VdWJ
rwU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:00 2025 by rpki-client