Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Q3cz4EEEExax1nv4wtLZZPPEgSk.roa
File: Q3cz4EEEExax1nv4wtLZZPPEgSk.roa (raw, json)
Hash identifier: ML1oxtfPutOEqYHFMGiG3+QvRpl8345MdKNoHGmCBSQ=
Subject key identifier: 43:77:33:E0:41:04:13:16:B1:D6:7B:F8:C2:D2:D9:64:F3:C4:81:29
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01942748641CAA9C21843E1E942341DCD518
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Q3cz4EEEExax1nv4wtLZZPPEgSk.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.135.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:64:1c:aa:9c:21:84:3e:1e:94:23:41:dc:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437733e041041316b1d67bf8c2d2d964f3c48129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:34:91:d3:6d:df:35:52:02:81:2c:75:23:
fa:8a:4f:17:d9:6d:4f:2a:ec:18:fa:fa:b2:72:e8:
28:63:70:b2:d2:75:b4:b5:2a:00:48:7d:78:47:69:
c3:b2:ef:7f:44:9f:24:89:ae:ec:b5:7e:50:74:66:
0c:f8:31:d5:c2:b1:40:ca:d6:78:23:da:af:4a:35:
f2:c4:5a:c7:41:53:fe:a0:22:70:b7:9d:3c:f7:28:
15:cf:4e:26:06:4d:67:53:44:62:4d:2f:96:e1:ca:
c8:dc:b2:43:89:e4:0c:41:bf:94:66:4e:be:7a:74:
83:6a:44:aa:16:e5:41:74:6a:b4:e1:78:06:64:80:
a6:ab:9d:b6:a6:5a:0f:70:50:70:44:29:5e:05:47:
c0:90:9f:5d:98:d9:22:56:dd:f4:95:fc:7b:93:6d:
a4:ac:c5:59:ee:6d:5e:af:b7:46:a2:9b:8f:d2:1a:
53:46:67:ea:aa:be:04:97:88:10:7e:82:c4:46:6a:
67:47:97:2b:73:9e:c5:e6:7b:e0:42:1b:9f:87:85:
be:5c:93:00:ca:5c:e3:76:d9:e1:e2:9a:0c:bf:67:
dc:90:c2:8c:14:50:07:64:22:51:c7:58:38:4f:a8:
75:66:c2:ec:f0:b4:1e:e7:f3:06:9c:81:ac:ff:b9:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:33:E0:41:04:13:16:B1:D6:7B:F8:C2:D2:D9:64:F3:C4:81:29
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/Q3cz4EEEExax1nv4wtLZZPPEgSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:fc:24:d5:37:51:26:16:9b:0e:c4:c1:70:be:3a:9c:1f:52:
39:8d:f0:21:41:e0:8d:74:ea:a8:8b:ce:ff:17:84:f4:18:02:
07:51:f6:0e:e6:49:22:9d:e2:58:d7:64:29:e6:fa:cb:97:f9:
88:7a:b1:22:5f:bd:c7:68:61:6c:13:26:f6:76:ef:9b:2f:12:
15:81:8c:b3:4d:f3:3b:3b:24:09:85:a9:cc:2b:8b:45:08:79:
cc:70:40:c3:44:30:ab:af:76:ce:bf:a5:a7:fb:bd:47:d9:68:
86:85:99:ac:4e:23:42:da:06:51:cc:d4:cb:7f:93:da:d0:4b:
30:73:ea:cb:0e:5a:79:82:2d:cd:04:ed:e0:29:78:ce:7a:be:
c1:db:f5:e0:89:cc:b1:1f:86:ca:f2:24:47:26:f5:8b:2c:c8:
bf:62:a4:83:d7:9b:74:20:ac:d3:f4:8e:85:62:a9:dc:b9:09:
b2:ce:f7:d9:25:b3:0a:fc:53:00:1c:43:81:40:03:e8:51:14:
03:1c:8f:a7:f7:be:c2:44:91:74:af:53:b1:01:1a:e3:9b:e0:
cb:52:30:85:3e:9d:c9:63:4f:76:e1:28:72:03:12:58:11:ef:
32:91:e6:fb:8c:81:3b:cd:8b:b9:58:8b:9a:d5:01:a8:3a:57:
66:c4:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:29 2025 by rpki-client