Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ymQJpwC4tto17rbRPzsebCnCcpg.roa
File: ymQJpwC4tto17rbRPzsebCnCcpg.roa (raw, json)
Hash identifier: eKWcw8zjd9qA85x/H+i0IKMX4EvRCH9y5iMv+g1plbk=
Subject key identifier: CA:64:09:A7:00:B8:B6:DA:35:EE:B6:D1:3F:3B:1E:6C:29:C2:72:98
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9431E98CB40DEED310E9EC7841610F0E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ymQJpwC4tto17rbRPzsebCnCcpg.roa
Signing time: Sat 10 Feb 2024 18:05:15 +0000
ROA not before: Sat 10 Feb 2024 18:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:9431:f57/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:31:e9:8c:b4:0d:ee:d3:10:e9:ec:78:41:61:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 18:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca6409a700b8b6da35eeb6d13f3b1e6c29c27298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:42:ec:50:dd:c6:88:1f:89:fe:90:ae:34:
f6:e5:b9:b6:a0:cd:71:42:a3:6f:63:5f:67:66:a4:
2d:05:9e:7e:12:3a:ab:38:9b:ba:bd:d4:9b:fa:3b:
99:96:f4:a0:cc:92:5c:5d:76:04:59:15:4e:b2:c1:
48:59:5e:ae:95:c4:91:04:74:a1:7f:79:52:67:a7:
2e:5e:4d:52:40:03:8a:19:ef:65:ab:1d:95:b6:1c:
b1:20:33:f1:36:49:b4:da:d5:78:93:fd:f6:92:0b:
45:aa:2b:c4:19:df:a9:45:95:0a:0f:6a:70:c9:c9:
48:a5:4c:ba:39:67:1c:26:94:66:c1:b0:b2:7a:23:
94:78:97:74:6a:95:5c:e8:d3:5e:c2:de:c9:b7:2e:
63:74:10:6c:2a:b0:7d:df:cc:7e:02:c0:68:c7:a3:
1f:61:4e:1d:c4:45:3a:8b:b3:de:be:c2:c1:98:b6:
c6:c0:85:ec:57:2e:71:d1:f5:ca:38:4a:b9:75:ff:
6b:83:c7:9b:f3:a0:92:93:a8:31:13:4a:df:2b:1a:
80:e8:8b:39:98:ff:7d:0a:34:01:19:64:e4:8b:02:
57:b6:46:16:7b:4a:e9:ed:ea:11:1c:31:e2:3f:3e:
d0:70:d0:a5:83:29:a2:13:9f:a6:e9:59:ed:25:15:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:09:A7:00:B8:B6:DA:35:EE:B6:D1:3F:3B:1E:6C:29:C2:72:98
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ymQJpwC4tto17rbRPzsebCnCcpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:3f:39:d3:df:92:4d:95:b7:87:81:27:db:38:01:d6:70:8d:
3e:5e:2f:f6:63:d5:44:0b:cc:05:6b:37:1b:53:4c:35:e2:fd:
1d:71:4c:d1:ce:ee:d9:c7:75:2e:6e:e8:2c:b0:64:f7:d9:e2:
60:0a:35:5d:f5:07:c4:8f:79:4a:3a:98:d3:e0:e2:71:40:1e:
89:4f:80:73:6b:e5:12:d5:cf:e7:fa:e0:a7:18:b0:0b:b5:ca:
20:81:c4:9c:fb:22:1f:bf:c2:3c:e4:0b:b1:6f:a4:d9:3e:ee:
66:30:b9:f8:82:15:b1:45:ee:12:f3:89:f0:b3:bc:db:1a:bb:
1d:80:3f:1a:91:60:2a:39:c5:31:31:f9:d8:b9:f5:2e:0b:9f:
d3:c6:e4:bc:bf:05:b7:bd:d2:a1:d6:c5:ff:80:4d:81:b0:f2:
4b:f3:05:e8:e6:dd:c3:cf:07:28:06:a9:0e:bd:d3:e6:60:ae:
af:32:3d:a7:39:69:e2:fd:ce:e0:70:c4:05:67:36:e8:16:69:
56:6f:74:f6:b6:38:87:14:d0:76:7a:f2:a4:2b:07:ed:fe:b2:
8d:26:d2:4b:da:86:7d:88:12:c9:8b:08:84:58:ee:20:6e:20:
2f:37:a8:d6:5c:57:15:b1:42:4b:d3:a8:cd:49:90:a6:1e:25:
92:59:b6:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2UMemMtA3u0xDp7HhBYQ8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEwMTgwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTY0MDlhNzAwYjhiNmRhMzVlZWI2ZDEzZjNiMWU2YzI5YzI3Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhNC7FDdxogfif6QrjT25bm2oM1x
QqNvY19nZqQtBZ5+EjqrOJu6vdSb+juZlvSgzJJcXXYEWRVOssFIWV6ulcSRBHSh
f3lSZ6cuXk1SQAOKGe9lqx2VthyxIDPxNkm02tV4k/32kgtFqivEGd+pRZUKD2pw
yclIpUy6OWccJpRmwbCyeiOUeJd0apVc6NNewt7Jty5jdBBsKrB938x+AsBox6Mf
YU4dxEU6i7PevsLBmLbGwIXsVy5x0fXKOEq5df9rg8eb86CSk6gxE0rfKxqA6Is5
mP99CjQBGWTkiwJXtkYWe0rp7eoRHDHiPz7QcNClgymiE5+m6VntJRWHvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMpkCacAuLbaNe620T87HmwpwnKYMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveW1RSnB3QzR0dG8xN3JiUlB6c2ViQ25DY3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJg/OdPfkk2Vt4eBJ9s4
AdZwjT5eL/Zj1UQLzAVrNxtTTDXi/R1xTNHO7tnHdS5u6CywZPfZ4mAKNV31B8SP
eUo6mNPg4nFAHolPgHNr5RLVz+f64KcYsAu1yiCBxJz7Ih+/wjzkC7FvpNk+7mYw
ufiCFbFF7hLzifCzvNsaux2APxqRYCo5xTEx+di59S4Ln9PG5Ly/Bbe90qHWxf+A
TYGw8kvzBejm3cPPBygGqQ690+Zgrq8yPac5aeL9zuBwxAVnNugWaVZvdPa2OIcU
0HZ68qQrB+3+so0m0kvahn2IEsmLCIRY7iBuIC83qNZcVxWxQkvTqM1JkKYeJZJZ
thE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:22 2025 by rpki-client