Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yv0kotB3mxVUAtjcwWlIIcRhq2E.roa
File: yv0kotB3mxVUAtjcwWlIIcRhq2E.roa (raw, json)
Hash identifier: UULX00be6uS+XgYJfuknt15EJH7hGISOJ5pa3swiDZo=
Subject key identifier: CA:FD:24:A2:D0:77:9B:15:54:02:D8:DC:C1:69:48:21:C4:61:AB:61
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF56E6054BE0ED5F40217EFA4F9B6076F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yv0kotB3mxVUAtjcwWlIIcRhq2E.roa
Signing time: Wed 10 Jan 2024 22:11:40 +0000
ROA not before: Wed 10 Jan 2024 22:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:6e:60:54:be:0e:d5:f4:02:17:ef:a4:f9:b6:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 22:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cafd24a2d0779b155402d8dcc1694821c461ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:2b:8b:76:60:2c:50:66:f3:87:d7:87:1f:
56:b4:40:7c:bb:f6:3a:68:58:86:e7:a7:2c:1f:52:
0a:3e:db:46:db:cc:f6:05:e7:76:cc:7a:87:c9:8b:
f8:58:1d:46:74:ca:2a:6c:01:76:88:52:df:33:89:
17:2e:0d:2c:8a:02:75:14:98:cd:40:4c:14:2c:75:
a0:80:dd:83:a3:23:89:9d:cb:7c:fa:4f:fb:46:48:
07:40:82:c4:91:b1:f4:86:f3:bb:62:ec:6d:3a:7b:
94:94:4b:6e:b4:b9:26:65:8c:60:65:c5:db:56:89:
48:1e:4d:b9:43:77:dc:33:3b:a8:cb:18:94:08:f1:
f1:9e:9d:f1:61:ed:b8:84:c4:3d:ff:fe:a7:26:00:
ae:61:6a:16:ad:6c:cd:d4:23:e0:76:40:f0:f5:5e:
57:4e:e8:39:1e:e2:11:4e:99:05:33:ee:71:48:9c:
30:22:ae:43:6c:19:4f:88:65:11:a0:bd:ac:19:da:
a0:0b:48:6e:e8:39:de:ed:fc:a3:75:a4:94:f8:dd:
f9:07:7f:c7:b4:1f:f1:0a:6a:f0:60:26:9a:e2:4e:
6a:a0:62:7c:20:2f:f9:a0:d4:a4:89:a7:b3:7f:e0:
10:4b:fb:de:77:75:68:f0:95:27:4b:34:8a:61:48:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:24:A2:D0:77:9B:15:54:02:D8:DC:C1:69:48:21:C4:61:AB:61
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yv0kotB3mxVUAtjcwWlIIcRhq2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:11:f7:9c:df:88:5e:5d:1d:80:59:b6:96:52:1a:44:b3:ad:
24:47:54:4d:60:d8:51:15:d7:51:e7:54:21:90:6e:b4:eb:10:
17:59:a8:ee:b5:02:1e:2d:21:58:9e:44:46:b2:ed:32:a7:cf:
16:60:18:8f:ab:4d:24:13:51:63:9c:cd:96:ec:c7:c8:e7:20:
bb:98:db:9b:59:90:b2:40:f1:3e:05:6d:b2:bd:7a:e4:8b:99:
91:03:b2:f1:75:bd:cb:68:2f:9c:9f:2f:cc:62:76:68:75:ce:
39:02:86:7a:88:fb:2e:a2:7b:7e:85:f0:80:c2:95:5c:f9:59:
b8:5e:dc:51:6f:0e:83:61:28:94:06:cb:85:ad:0a:d9:e6:39:
64:31:e0:1a:94:c7:d0:2e:ff:7f:56:ef:ae:4f:cd:b2:49:2e:
88:0d:71:fd:68:5d:c7:0b:80:13:6a:33:90:6b:7a:89:95:20:
b2:e1:6b:a1:bc:8a:11:5f:df:68:d0:56:a9:40:9c:61:89:f0:
93:0c:52:1f:c6:f6:a1:cf:db:64:bf:75:27:74:69:85:40:05:
c0:62:78:4c:33:6e:fe:59:f7:d4:29:a5:f9:b0:4a:5a:db:25:
0b:8d:05:93:55:f8:53:93:49:43:d3:70:1f:98:cb:5a:7f:03:
ed:37:ec:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz1bmBUvg7V9AIX76T5tgdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEwMjIxMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWZkMjRhMmQwNzc5YjE1NTQwMmQ4ZGNjMTY5NDgyMWM0NjFhYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIri3ZgLFBm84fXhx9WtEB8u/Y6
aFiG56csH1IKPttG28z2Bed2zHqHyYv4WB1GdMoqbAF2iFLfM4kXLg0sigJ1FJjN
QEwULHWggN2DoyOJnct8+k/7RkgHQILEkbH0hvO7YuxtOnuUlEtutLkmZYxgZcXb
VolIHk25Q3fcMzuoyxiUCPHxnp3xYe24hMQ9//6nJgCuYWoWrWzN1CPgdkDw9V5X
Tug5HuIRTpkFM+5xSJwwIq5DbBlPiGURoL2sGdqgC0hu6Dne7fyjdaSU+N35B3/H
tB/xCmrwYCaa4k5qoGJ8IC/5oNSkiaezf+AQS/ved3Vo8JUnSzSKYUgbZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMr9JKLQd5sVVALY3MFpSCHEYathMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveXYwa290QjNteFZVQXRqY3dXbElJY1JocTJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJsR95zfiF5dHYBZtpZS
GkSzrSRHVE1g2FEV11HnVCGQbrTrEBdZqO61Ah4tIVieREay7TKnzxZgGI+rTSQT
UWOczZbsx8jnILuY25tZkLJA8T4FbbK9euSLmZEDsvF1vctoL5yfL8xidmh1zjkC
hnqI+y6ie36F8IDClVz5Wbhe3FFvDoNhKJQGy4WtCtnmOWQx4BqUx9Au/39W765P
zbJJLogNcf1oXccLgBNqM5BreomVILLha6G8ihFf32jQVqlAnGGJ8JMMUh/G9qHP
22S/dSd0aYVABcBieEwzbv5Z99QppfmwSlrbJQuNBZNV+FOTSUPTcB+Yy1p/A+03
7BM=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:31:13 2025 by rpki-client