Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4GR8skHrUQlk6hF8dq_rsNtAik.roa
File: j4GR8skHrUQlk6hF8dq_rsNtAik.roa (raw, json)
Hash identifier: zx3S6ellBtM+6ZYIV/GLDyAf9fE3RwbzSj86lk0swqU=
Subject key identifier: 8F:81:91:F2:C9:07:AD:44:25:93:A8:45:F1:DA:BF:AE:C3:6D:02:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E539D0CD8E0BC3ADCF2A4E9CA57942522
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4GR8skHrUQlk6hF8dq_rsNtAik.roa
Signing time: Mon 18 Mar 2024 22:09:45 +0000
ROA not before: Mon 18 Mar 2024 22:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:53:9d:0c:d8:e0:bc:3a:dc:f2:a4:e9:ca:57:94:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 22:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f8191f2c907ad442593a845f1dabfaec36d0229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:3b:df:1f:b2:87:36:70:10:5f:38:ab:46:
ca:b6:79:e5:48:d1:48:43:87:d8:48:9e:75:72:69:
ac:fc:68:53:ff:e0:2a:c1:17:68:ab:83:3d:70:11:
01:32:db:7b:9b:8f:d8:cf:b7:87:a7:f0:c7:fc:93:
fe:4b:67:9d:5a:5f:e9:c3:fb:d5:9f:34:07:c1:d5:
5c:a1:3a:c3:ff:8d:94:41:9c:24:9c:10:d6:52:ee:
62:ed:ed:9d:0c:c0:8f:cb:62:9c:2a:88:67:9e:8f:
6b:d6:db:cf:50:a8:8c:a2:ae:cb:c3:08:7b:b8:f4:
22:95:87:de:eb:8b:46:42:f6:c1:52:a4:2a:e7:67:
f6:f3:7e:73:74:e1:92:5a:b9:20:28:71:88:b3:0f:
75:d6:be:bc:83:f2:a5:be:17:25:9c:03:13:80:2a:
c6:96:d1:85:d0:1a:ec:a4:25:86:9a:0a:d6:95:ad:
42:48:5e:cc:bb:06:6a:11:7f:93:63:25:8d:50:28:
6e:b4:d6:52:4f:e6:81:c0:8f:b7:d9:ef:06:1f:2d:
95:24:2c:b1:c4:05:18:09:1f:f5:2f:1e:5e:3b:c6:
75:00:a0:e4:7f:e2:80:bd:89:5b:b2:ca:fd:0d:73:
82:e4:3d:55:6c:a0:14:98:ad:18:62:f8:64:26:ed:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:91:F2:C9:07:AD:44:25:93:A8:45:F1:DA:BF:AE:C3:6D:02:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4GR8skHrUQlk6hF8dq_rsNtAik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:d0:c8:f1:4f:8d:33:55:25:5b:d8:23:2f:4a:8b:3d:a0:c9:
1b:4f:0a:bd:85:6c:c3:3b:90:21:25:71:12:a1:b3:83:93:cb:
68:d6:fe:08:5c:4b:85:7f:b8:49:0f:33:cf:34:e6:9d:b7:50:
fd:c2:c3:7d:2c:23:d5:16:ad:61:a6:fa:ab:24:a9:f7:a6:65:
60:8e:81:af:06:b7:0b:8b:48:04:de:49:a9:7e:ac:6e:d2:09:
e9:9c:de:39:d1:58:b0:a8:2f:ce:72:ae:ec:ef:f2:f5:6c:95:
82:61:d2:8c:aa:e2:97:33:3f:43:82:90:a0:40:e4:4b:c9:2a:
7f:88:56:ce:e9:5e:98:33:21:22:a3:7a:06:ff:2e:b5:d6:8f:
59:57:15:3e:70:8e:9f:51:0b:a9:18:7f:0b:e1:7f:36:82:10:
6e:53:a4:56:08:40:88:71:f1:cc:29:bc:f8:e6:a3:ee:01:db:
0b:2d:b0:4c:58:c8:df:6d:73:6c:49:76:41:39:8c:e9:ab:dc:
01:8e:53:dd:80:9b:76:ed:fa:3c:9b:ac:ab:6b:c4:cb:91:eb:
62:6f:bc:50:13:39:f4:b4:53:8b:e5:cd:d9:a9:04:ac:9d:79:
d1:37:3c:14:b8:16:e5:ab:5a:0a:61:ff:8b:18:96:e8:16:8a:
f2:96:d1:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5TnQzY4Lw63PKk6cpXlCUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE4MjIwOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjgxOTFmMmM5MDdhZDQ0MjU5M2E4NDVmMWRhYmZhZWMzNmQwMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXI73x+yhzZwEF84q0bKtnnlSNFI
Q4fYSJ51cmms/GhT/+AqwRdoq4M9cBEBMtt7m4/Yz7eHp/DH/JP+S2edWl/pw/vV
nzQHwdVcoTrD/42UQZwknBDWUu5i7e2dDMCPy2KcKohnno9r1tvPUKiMoq7Lwwh7
uPQilYfe64tGQvbBUqQq52f2835zdOGSWrkgKHGIsw911r68g/KlvhclnAMTgCrG
ltGF0BrspCWGmgrWla1CSF7MuwZqEX+TYyWNUChutNZST+aBwI+32e8GHy2VJCyx
xAUYCR/1Lx5eO8Z1AKDkf+KAvYlbssr9DXOC5D1VbKAUmK0YYvhkJu0ATQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI+BkfLJB61EJZOoRfHav67DbQIpMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvajRHUjhza0hyVVFsazZoRjhkcV9yc050QWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFnQyPFPjTNVJVvYIy9K
iz2gyRtPCr2FbMM7kCElcRKhs4OTy2jW/ghcS4V/uEkPM8805p23UP3Cw30sI9UW
rWGm+qskqfemZWCOga8GtwuLSATeSal+rG7SCemc3jnRWLCoL85yruzv8vVslYJh
0oyq4pczP0OCkKBA5EvJKn+IVs7pXpgzISKjegb/LrXWj1lXFT5wjp9RC6kYfwvh
fzaCEG5TpFYIQIhx8cwpvPjmo+4B2wstsExYyN9tc2xJdkE5jOmr3AGOU92Am3bt
+jybrKtrxMuR62JvvFATOfS0U4vlzdmpBKydedE3PBS4FuWrWgph/4sYlugWivKW
0SY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:57:20 2025 by rpki-client