Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_zPorPw-hT_rHu7CKWKUWLRMh9w.roa
File: _zPorPw-hT_rHu7CKWKUWLRMh9w.roa (raw, json)
Hash identifier: XNdsdkHs7SW4r8r7DgyDBi0RJi3ccrbVPW8v0o/EOgg=
Subject key identifier: FF:33:E8:AC:FC:3E:85:3F:EB:1E:EE:C2:29:62:94:58:B4:4C:87:DC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A0D2980E984E1CC0FAF58A8EEDFF2C1B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_zPorPw-hT_rHu7CKWKUWLRMh9w.roa
Signing time: Thu 11 Jul 2024 08:04:34 +0000
ROA not before: Thu 11 Jul 2024 08:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:a0d2:830b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:d2:98:0e:98:4e:1c:c0:fa:f5:8a:8e:ed:ff:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 08:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff33e8acfc3e853feb1eeec229629458b44c87dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:37:b3:aa:15:71:9c:6a:5b:86:79:fc:f0:
0e:dc:ae:bc:13:78:68:01:40:86:f5:77:87:9e:29:
5c:a4:fd:3e:f8:8d:de:6c:91:69:8a:b6:12:ce:07:
90:86:62:11:61:02:58:bf:07:5c:9d:c7:9f:9b:a5:
85:54:5c:7e:1f:ff:51:dc:f8:8b:8d:d7:dd:71:5b:
eb:9b:48:32:f7:b1:f7:48:31:cb:cf:6b:6b:89:54:
08:6a:26:49:0d:d9:c2:b4:ec:7f:68:eb:fe:99:63:
28:92:b7:3c:e4:8b:e9:d6:c0:e9:15:5c:d6:66:51:
53:d0:d7:11:4c:fe:1d:2a:45:6f:32:78:a9:de:b1:
cd:62:01:14:f2:8e:16:68:24:44:ad:3e:3f:d0:db:
ca:67:82:67:99:c3:5d:c0:af:f5:37:60:1e:30:28:
03:30:20:8f:25:cc:9c:f4:db:78:4c:bb:76:55:72:
b4:12:98:2d:4c:aa:76:96:cf:a8:a3:b6:e5:e2:d2:
51:7f:8e:28:56:a6:4f:1d:b9:c6:b2:b1:9f:aa:5f:
f5:e2:ea:63:be:40:a6:77:6f:20:a3:0d:29:1b:02:
4f:9b:83:09:30:8b:09:f4:63:fc:6a:c5:4d:15:4e:
af:d2:e4:44:b4:af:4f:d5:d1:3d:e6:7f:2f:92:a7:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:E8:AC:FC:3E:85:3F:EB:1E:EE:C2:29:62:94:58:B4:4C:87:DC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_zPorPw-hT_rHu7CKWKUWLRMh9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:62:56:c6:ad:6f:06:65:d1:2c:13:6e:9d:16:05:34:c0:25:
d5:2c:5d:9e:e7:f1:65:c9:c8:c5:42:15:b0:f9:62:e0:9d:3e:
a1:45:35:62:c4:af:92:8e:7e:40:51:86:01:11:73:c2:89:f7:
c5:a6:74:a2:75:48:5d:cd:7c:49:ff:10:b0:0b:bb:4e:15:b6:
75:d6:a6:ad:52:55:8d:f8:ba:e3:5c:44:84:15:9a:c0:6e:2b:
39:d7:26:25:4e:2c:2d:e4:f8:dc:6f:61:3e:23:76:7b:f9:94:
ad:0b:d8:1d:90:8c:1c:0e:ad:93:7a:42:45:37:ce:38:03:96:
bb:c3:93:ce:87:df:94:ff:86:24:62:d2:ae:f7:04:76:b1:69:
f0:25:bf:75:93:bd:87:3f:50:1d:fc:0e:3d:36:50:ab:11:97:
22:31:ce:8c:b0:91:b5:bb:c9:87:82:91:74:2a:cb:d3:80:59:
47:b3:cc:b9:7e:c5:43:e6:15:93:78:84:fd:af:81:e5:15:7d:
a8:65:6a:16:e9:45:89:07:06:51:19:3e:85:d1:44:f6:d1:c5:
19:9b:ce:eb:c4:ab:a5:41:59:c3:cd:b2:82:c4:05:e2:e6:fd:
7d:f9:49:82:ac:6b:37:a0:dd:90:15:3f:bd:e5:1a:ad:74:fc:
eb:6c:d4:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCg0pgOmE4cwPr1io7t/ywbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzExMDgwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjMzZThhY2ZjM2U4NTNmZWIxZWVlYzIyOTYyOTQ1OGI0NGM4N2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLQ3s6oVcZxqW4Z5/PAO3K68E3ho
AUCG9XeHnilcpP0++I3ebJFpirYSzgeQhmIRYQJYvwdcncefm6WFVFx+H/9R3PiL
jdfdcVvrm0gy97H3SDHLz2triVQIaiZJDdnCtOx/aOv+mWMokrc85Ivp1sDpFVzW
ZlFT0NcRTP4dKkVvMnip3rHNYgEU8o4WaCRErT4/0NvKZ4JnmcNdwK/1N2AeMCgD
MCCPJcyc9Nt4TLt2VXK0EpgtTKp2ls+oo7bl4tJRf44oVqZPHbnGsrGfql/14upj
vkCmd28gow0pGwJPm4MJMIsJ9GP8asVNFU6v0uREtK9P1dE95n8vkqdUsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP8z6Kz8PoU/6x7uwililFi0TIfcMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvX3pQb3JQdy1oVF9ySHU3Q0tXS1VXTFJNaDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI1iVsatbwZl0SwTbp0W
BTTAJdUsXZ7n8WXJyMVCFbD5YuCdPqFFNWLEr5KOfkBRhgERc8KJ98WmdKJ1SF3N
fEn/ELALu04VtnXWpq1SVY34uuNcRIQVmsBuKznXJiVOLC3k+NxvYT4jdnv5lK0L
2B2QjBwOrZN6QkU3zjgDlrvDk86H35T/hiRi0q73BHaxafAlv3WTvYc/UB38Dj02
UKsRlyIxzoywkbW7yYeCkXQqy9OAWUezzLl+xUPmFZN4hP2vgeUVfahlahbpRYkH
BlEZPoXRRPbRxRmbzuvEq6VBWcPNsoLEBeLm/X35SYKsazeg3ZAVP73lGq10/Ots
1JA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:20:16 2025 by rpki-client