Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uiEVzM2yxl5UQQpv4dxfXIWYQhM.roa
File: uiEVzM2yxl5UQQpv4dxfXIWYQhM.roa (raw, json)
Hash identifier: qViEMdanU/PODH2MPKfGEIibwvpuDP0P5mdfqlx3UWA=
Subject key identifier: BA:21:15:CC:CD:B2:C6:5E:54:41:0A:6F:E1:DC:5F:5C:85:98:42:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE6271DA4977F8A7FB98AA797BC9B9EA4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uiEVzM2yxl5UQQpv4dxfXIWYQhM.roa
Signing time: Tue 16 Apr 2024 09:05:06 +0000
ROA not before: Tue 16 Apr 2024 09:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:e626:60c4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:27:1d:a4:97:7f:8a:7f:b9:8a:a7:97:bc:9b:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 09:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba2115cccdb2c65e54410a6fe1dc5f5c85984213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:3e:98:7f:54:0e:80:99:56:1e:55:92:89:
a1:df:f1:c3:72:af:0c:9b:1a:68:81:7f:e6:c1:70:
5c:6c:8d:b0:43:e9:56:32:34:f0:ab:30:a4:dd:94:
6c:7a:18:84:fa:eb:dd:15:73:c3:a0:08:03:cd:e4:
2e:a7:3f:0f:72:42:a1:ba:2f:69:7f:ad:7c:9a:02:
be:94:7c:fc:fe:cf:8b:12:0e:94:b3:b7:97:5c:7f:
91:c0:3f:55:2a:60:21:6c:de:9c:70:bb:a3:17:c3:
aa:79:1f:0d:ea:85:60:b8:4c:e2:57:17:34:30:38:
b8:a4:78:75:a0:97:40:78:6a:a9:45:e9:84:b4:ea:
3e:fe:52:89:2c:a4:62:37:29:14:f5:13:19:87:f9:
b2:47:ec:2f:e1:f6:4e:5e:92:62:50:4b:71:73:90:
72:06:93:fb:68:d7:4b:ea:01:ab:62:71:70:3a:d9:
e7:22:ca:6b:43:91:9a:1b:ff:3d:71:ae:a4:29:da:
4b:d4:dc:f8:bd:19:65:1a:f4:fc:f4:38:13:b5:6f:
77:2b:ec:33:31:ad:60:7e:72:3a:c7:2a:d4:9a:50:
d1:e0:4a:88:ad:50:07:71:d3:18:b3:07:57:5c:34:
c3:03:1a:1d:a4:48:ad:06:fd:11:7a:f6:10:cf:99:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:15:CC:CD:B2:C6:5E:54:41:0A:6F:E1:DC:5F:5C:85:98:42:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uiEVzM2yxl5UQQpv4dxfXIWYQhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:47:19:97:88:89:d9:0e:46:1d:35:a8:b5:af:e0:95:e6:b6:
4f:f4:fc:6c:49:bb:3a:82:0e:44:b0:37:fb:e2:44:5d:e2:bb:
73:1b:d5:28:d0:cf:d2:80:f5:a0:be:f9:2f:d1:4a:d3:67:7b:
4e:46:b9:b4:18:80:bd:3c:91:4f:7c:e5:95:d2:15:b2:f9:1d:
00:d4:57:06:f6:41:57:2a:2a:37:4e:ad:90:a1:be:94:9a:77:
3c:b1:95:b4:5f:97:61:db:9a:9f:78:fd:37:f4:3a:22:2d:ae:
b2:3c:bc:7a:93:c7:17:e0:9e:9e:eb:93:fa:f1:37:50:49:d8:
b7:a3:3a:fd:b1:59:0b:93:a2:85:f9:e1:b2:fb:0c:d4:bd:58:
61:7e:f0:82:2f:ad:6f:cc:31:13:1c:71:73:af:fc:83:ff:2f:
31:4e:d1:c1:c4:41:fe:07:8a:67:fe:9d:88:93:4d:7c:6e:62:
65:54:91:66:b1:a8:33:d0:f1:ca:6b:82:c1:24:d6:cb:79:3c:
a2:d4:30:8e:4d:ed:67:fe:56:15:87:45:a6:01:80:f0:ad:2b:
d7:a5:21:53:3e:db:de:94:e2:4a:4e:ce:19:f2:34:d0:83:de:
0b:b5:85:e2:14:41:6c:82:17:8b:27:e5:4a:91:ad:0d:ad:8e:
36:82:bc:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7mJx2kl3+Kf7mKp5e8m56kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDE2MDkwNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTIxMTVjY2NkYjJjNjVlNTQ0MTBhNmZlMWRjNWY1Yzg1OTg0MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUI+mH9UDoCZVh5Vkomh3/HDcq8M
mxpogX/mwXBcbI2wQ+lWMjTwqzCk3ZRsehiE+uvdFXPDoAgDzeQupz8PckKhui9p
f618mgK+lHz8/s+LEg6Us7eXXH+RwD9VKmAhbN6ccLujF8OqeR8N6oVguEziVxc0
MDi4pHh1oJdAeGqpRemEtOo+/lKJLKRiNykU9RMZh/myR+wv4fZOXpJiUEtxc5By
BpP7aNdL6gGrYnFwOtnnIsprQ5GaG/89ca6kKdpL1Nz4vRllGvT89DgTtW93K+wz
Ma1gfnI6xyrUmlDR4EqIrVAHcdMYswdXXDTDAxodpEitBv0RevYQz5mOiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLohFczNssZeVEEKb+HcX1yFmEITMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdWlFVnpNMnl4bDVVUVFwdjRkeGZYSVdZUWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABlHGZeIidkORh01qLWv
4JXmtk/0/GxJuzqCDkSwN/viRF3iu3Mb1SjQz9KA9aC++S/RStNne05GubQYgL08
kU985ZXSFbL5HQDUVwb2QVcqKjdOrZChvpSadzyxlbRfl2Hbmp94/Tf0OiItrrI8
vHqTxxfgnp7rk/rxN1BJ2LejOv2xWQuTooX54bL7DNS9WGF+8IIvrW/MMRMccXOv
/IP/LzFO0cHEQf4Himf+nYiTTXxuYmVUkWaxqDPQ8cprgsEk1st5PKLUMI5N7Wf+
VhWHRaYBgPCtK9elIVM+296U4kpOzhnyNNCD3gu1heIUQWyCF4sn5UqRrQ2tjjaC
vDY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:37:17 2025 by rpki-client