Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ltnyG5TBg0531xAP8bczdt_jxKU.roa
File: ltnyG5TBg0531xAP8bczdt_jxKU.roa (raw, json)
Hash identifier: simLGmZGDK503RS4OfJit3Z6oAWdWz9y47drHlO2PTk=
Subject key identifier: 96:D9:F2:1B:94:C1:83:4E:77:D7:10:0F:F1:B7:33:76:DF:E3:C4:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAD8306F598FD562C07548650F18DCAE7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ltnyG5TBg0531xAP8bczdt_jxKU.roa
Signing time: Thu 15 Feb 2024 16:04:21 +0000
ROA not before: Thu 15 Feb 2024 16:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:ad82:f184/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:83:06:f5:98:fd:56:2c:07:54:86:50:f1:8d:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 16:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d9f21b94c1834e77d7100ff1b73376dfe3c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:65:b0:62:be:c1:91:ec:ab:91:96:ad:a6:
b6:82:6a:8b:9d:4d:7c:d0:3a:b4:b1:48:c0:b3:2f:
87:f0:30:4d:42:ac:67:d7:83:05:fd:c2:74:03:c6:
f4:f1:03:50:b0:c1:97:4b:ea:75:9c:7d:dc:c4:72:
e2:6a:dc:c4:f3:22:33:55:00:c4:68:79:ec:33:0e:
38:7e:c5:03:2e:93:fb:c7:5e:a5:22:8a:7f:ae:77:
ba:fd:1b:14:4d:29:65:45:d0:e2:07:21:a7:92:c8:
3f:2c:52:1c:81:49:11:2e:b3:bd:48:c3:31:8d:13:
bd:13:c4:1c:5d:d1:8a:45:a2:28:66:d3:1c:35:7d:
45:89:22:db:25:28:e8:7d:59:88:d5:43:ae:a3:75:
f9:1c:6d:1b:d6:2a:62:3b:31:82:53:5a:36:a3:bf:
6f:0c:cc:00:97:dc:de:40:d6:5f:38:ac:1f:c1:be:
56:3b:89:38:e6:bf:c8:32:1f:c0:3c:f5:2b:ef:07:
53:33:ef:0d:34:fa:15:bb:4d:25:af:93:ed:ed:84:
fa:c9:7c:6c:c2:54:46:97:66:3b:ed:cf:31:50:8d:
c2:3e:1f:88:0e:6a:4c:67:7f:93:87:b7:2d:6c:43:
35:7f:68:3e:e8:cc:eb:a9:9f:2f:df:3a:33:10:85:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:F2:1B:94:C1:83:4E:77:D7:10:0F:F1:B7:33:76:DF:E3:C4:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ltnyG5TBg0531xAP8bczdt_jxKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:20:8a:f0:e9:a0:55:8a:4e:a9:35:38:b0:e6:09:98:14:00:
b5:75:31:c5:cd:fa:47:20:a1:0c:42:51:ff:cd:41:15:a3:b8:
da:d8:f2:87:56:dc:7b:7a:23:bd:c9:93:c9:fe:38:71:74:a8:
a9:db:d8:e1:f6:db:b1:26:9c:3e:8d:d3:04:fe:82:24:ee:f2:
3b:c8:b7:ed:c9:15:fd:84:72:98:95:fc:ae:e9:55:af:1c:0a:
31:10:31:f0:20:b3:da:ad:6c:4f:8c:74:80:0e:11:66:3c:21:
65:a5:0e:f2:94:16:9f:aa:fb:40:46:f5:50:39:76:0d:7f:5f:
ed:09:b4:a7:a5:61:27:44:8e:83:12:54:d6:1c:2b:44:a5:3f:
ea:9d:ad:a9:32:6b:7f:cc:2b:f3:79:96:df:9f:06:e5:4d:0c:
27:a5:9c:3f:2d:7f:ca:ab:db:5b:3a:30:0e:e3:c5:2b:2b:27:
18:56:2e:71:2b:41:aa:d4:68:3a:f6:1f:ff:76:ae:5a:5d:fe:
2d:17:23:d7:5d:db:cf:5c:a7:4e:e5:e2:6e:4c:da:0e:70:50:
e0:f1:1e:6a:3f:a4:a1:f4:d2:8c:9e:a1:2b:b6:b2:a6:61:ed:
8e:ae:b6:76:c9:95:31:19:43:b6:74:f2:14:0c:f5:79:44:4e:
66:09:b9:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2tgwb1mP1WLAdUhlDxjcrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE1MTYwNDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ5ZjIxYjk0YzE4MzRlNzdkNzEwMGZmMWI3MzM3NmRmZTNjNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYZlsGK+wZHsq5GWraa2gmqLnU18
0Dq0sUjAsy+H8DBNQqxn14MF/cJ0A8b08QNQsMGXS+p1nH3cxHLiatzE8yIzVQDE
aHnsMw44fsUDLpP7x16lIop/rne6/RsUTSllRdDiByGnksg/LFIcgUkRLrO9SMMx
jRO9E8QcXdGKRaIoZtMcNX1FiSLbJSjofVmI1UOuo3X5HG0b1ipiOzGCU1o2o79v
DMwAl9zeQNZfOKwfwb5WO4k45r/IMh/APPUr7wdTM+8NNPoVu00lr5Pt7YT6yXxs
wlRGl2Y77c8xUI3CPh+IDmpMZ3+Th7ctbEM1f2g+6MzrqZ8v3zozEIXpYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJbZ8huUwYNOd9cQD/G3M3bf48SlMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbHRueUc1VEJnMDUzMXhBUDhiY3pkdF9qeEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHogivDpoFWKTqk1OLDm
CZgUALV1McXN+kcgoQxCUf/NQRWjuNrY8odW3Ht6I73Jk8n+OHF0qKnb2OH227Em
nD6N0wT+giTu8jvIt+3JFf2EcpiV/K7pVa8cCjEQMfAgs9qtbE+MdIAOEWY8IWWl
DvKUFp+q+0BG9VA5dg1/X+0JtKelYSdEjoMSVNYcK0SlP+qdrakya3/MK/N5lt+f
BuVNDCelnD8tf8qr21s6MA7jxSsrJxhWLnErQarUaDr2H/92rlpd/i0XI9dd289c
p07l4m5M2g5wUODxHmo/pKH00oyeoSu2sqZh7Y6utnbJlTEZQ7Z08hQM9XlETmYJ
uTI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:19:00 2025 by rpki-client