Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ne6SZBRIo0-nj103r0Gpt3fXM8E.roa
File: ne6SZBRIo0-nj103r0Gpt3fXM8E.roa (raw, json)
Hash identifier: XpUQQtHlQCOZCxq6MglE4i7zvHylIO9TOD6zpS5vpIA=
Subject key identifier: 9D:EE:92:64:14:48:A3:4F:A7:8F:5D:37:AF:41:A9:B7:77:D7:33:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFCB1359FE3E458EC0B5DAE1B5C334E1E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ne6SZBRIo0-nj103r0Gpt3fXM8E.roa
Signing time: Sat 02 Mar 2024 01:04:48 +0000
ROA not before: Sat 02 Mar 2024 01:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:fcb0:d4e8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fc:b1:35:9f:e3:e4:58:ec:0b:5d:ae:1b:5c:33:4e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 01:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dee92641448a34fa78f5d37af41a9b777d733c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:03:a7:a0:38:bc:e3:c4:76:f2:d9:d0:b0:
74:6b:18:d4:36:72:e3:33:ff:c2:2c:43:aa:7d:c8:
a6:b8:c9:18:fd:1e:9d:9b:16:c4:27:52:9d:d1:dd:
69:b5:68:89:51:17:ff:d8:23:f8:d7:c3:30:f5:f9:
a4:81:d3:03:68:8e:43:0b:b2:d5:33:08:99:5b:8c:
7a:79:34:e4:73:31:ac:85:86:4c:72:c2:b9:67:da:
72:d5:67:e1:ff:11:f8:88:8f:c1:a5:d4:40:54:28:
c9:81:46:b8:de:26:e8:6a:c9:88:bc:1e:c8:5a:d0:
6b:98:8a:ee:09:ba:f0:92:53:0c:20:52:09:3b:d8:
f4:bd:e2:76:60:18:f5:68:64:ee:36:ca:b8:ac:38:
64:f6:19:dc:e7:d3:28:bd:5e:a6:02:13:2c:cd:64:
d8:52:c0:fc:7d:a5:ef:e5:80:41:e9:2e:10:5d:08:
ab:43:94:7f:01:5d:ec:01:f2:43:f6:09:d7:5c:e8:
07:ae:6a:91:5d:1a:2d:e0:a8:ef:a1:17:1d:2b:d5:
74:b4:ac:f6:1e:89:4d:d6:fd:eb:72:66:58:2f:13:
db:8e:ba:71:2b:e3:14:44:79:81:6a:9c:90:b0:6d:
d1:6a:68:5c:29:e2:10:bd:2a:81:a1:0f:ed:4a:29:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:92:64:14:48:A3:4F:A7:8F:5D:37:AF:41:A9:B7:77:D7:33:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ne6SZBRIo0-nj103r0Gpt3fXM8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:32:0b:27:5b:60:fa:ff:8a:7a:d9:06:bd:62:79:7f:28:83:
92:30:9b:15:91:55:c0:b7:ff:54:7c:7e:d5:6e:7e:00:bd:b1:
63:37:c6:72:ca:3b:ac:96:d6:5c:5c:ca:5d:e5:a3:1e:70:65:
de:78:48:f7:a5:b8:35:95:e2:55:03:9f:52:36:90:43:6b:e6:
4c:75:26:00:00:c2:07:df:e2:71:ff:c9:7d:00:75:fe:1d:fe:
98:38:b3:96:16:22:ce:24:16:2c:0c:d4:06:e0:aa:76:be:26:
71:01:a0:68:66:fa:4a:cf:9c:f6:26:1c:7e:6e:ae:1c:24:0f:
e9:24:b3:2c:d6:ea:d2:48:e9:9d:63:db:c6:58:12:b8:4c:31:
f2:b9:2d:2a:d5:d7:49:92:ba:2e:14:3e:c9:17:76:89:a7:87:
5b:c8:8f:77:1f:6e:dd:57:5b:4f:c5:5e:b6:cc:76:8c:20:90:
4b:5f:dd:29:7a:06:3c:56:7a:ae:44:59:c8:99:19:b9:4b:9a:
a1:7e:a1:2b:a7:11:8b:e4:31:6a:8b:c6:e8:12:b4:8d:ba:92:
96:cd:7a:7d:42:8d:da:18:46:ee:cc:b3:9e:be:25:08:49:08:
e7:8f:2a:29:0a:ce:41:1f:81:3c:42:46:5c:d0:a6:c5:63:2f:
97:1e:36:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY38sTWf4+RY7AtdrhtcM04eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAyMDEwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGVlOTI2NDE0NDhhMzRmYTc4ZjVkMzdhZjQxYTliNzc3ZDczM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gUDp6A4vOPEdvLZ0LB0axjUNnLj
M//CLEOqfcimuMkY/R6dmxbEJ1Kd0d1ptWiJURf/2CP418Mw9fmkgdMDaI5DC7LV
MwiZW4x6eTTkczGshYZMcsK5Z9py1Wfh/xH4iI/BpdRAVCjJgUa43iboasmIvB7I
WtBrmIruCbrwklMMIFIJO9j0veJ2YBj1aGTuNsq4rDhk9hnc59MovV6mAhMszWTY
UsD8faXv5YBB6S4QXQirQ5R/AV3sAfJD9gnXXOgHrmqRXRot4KjvoRcdK9V0tKz2
HolN1v3rcmZYLxPbjrpxK+MURHmBapyQsG3RamhcKeIQvSqBoQ/tSinKKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ3ukmQUSKNPp49dN69Bqbd31zPBMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbmU2U1pCUklvMC1uajEwM3IwR3B0M2ZYTThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABIyCydbYPr/inrZBr1i
eX8og5IwmxWRVcC3/1R8ftVufgC9sWM3xnLKO6yW1lxcyl3lox5wZd54SPeluDWV
4lUDn1I2kENr5kx1JgAAwgff4nH/yX0Adf4d/pg4s5YWIs4kFiwM1Abgqna+JnEB
oGhm+krPnPYmHH5urhwkD+kksyzW6tJI6Z1j28ZYErhMMfK5LSrV10mSui4UPskX
domnh1vIj3cfbt1XW0/FXrbMdowgkEtf3Sl6BjxWeq5EWciZGblLmqF+oSunEYvk
MWqLxugStI26kpbNen1CjdoYRu7Ms56+JQhJCOePKikKzkEfgTxCRlzQpsVjL5ce
Nto=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:49:31 2025 by rpki-client