Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q3uma5a_BCPTsDqiZtlto2P4xY0.roa
File: Q3uma5a_BCPTsDqiZtlto2P4xY0.roa (raw, json)
Hash identifier: EzgLroN3S3+VoWD7TxYhX5vlPatxnRxEgSXBmNv921g=
Subject key identifier: 43:7B:A6:6B:96:BF:04:23:D3:B0:3A:A2:66:D9:6D:A3:63:F8:C5:8D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDACF101A6B38781EE8FC27105A44A309
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q3uma5a_BCPTsDqiZtlto2P4xY0.roa
Signing time: Sun 14 Apr 2024 04:13:06 +0000
ROA not before: Sun 14 Apr 2024 04:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:da:cf:10:1a:6b:38:78:1e:e8:fc:27:10:5a:44:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 04:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=437ba66b96bf0423d3b03aa266d96da363f8c58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:48:10:e6:ed:23:14:d2:d4:c3:ba:c5:7a:
c1:27:f6:3c:3c:43:d9:89:2a:79:a4:35:e6:39:b2:
1e:0f:b0:b3:da:b2:04:33:3e:0b:3b:c2:00:82:00:
ca:cf:40:1a:ba:d8:ef:39:8c:b3:96:77:02:fb:4b:
59:0b:31:30:a3:4b:0c:6e:b6:53:7e:aa:b4:04:2a:
94:ca:38:b5:08:7d:13:66:9b:8d:27:89:df:d4:76:
72:1c:19:14:ce:24:1d:f7:92:84:65:1a:f6:b5:ec:
81:b4:b8:47:08:63:f3:7d:23:79:27:9a:88:a9:ab:
bb:be:5c:ca:56:8b:50:c6:2b:63:92:f0:72:17:9d:
61:94:6b:f9:56:89:56:b7:3c:1c:50:64:2d:8a:b8:
47:1d:d8:57:0f:eb:4d:f6:e8:8b:f3:61:d4:e8:c6:
20:a2:d8:4e:41:fd:d1:84:bc:bb:87:55:af:ef:9f:
57:38:03:fd:34:d8:e3:97:d3:4b:7e:7f:8e:b5:a4:
53:c0:ec:73:3a:f6:d5:bb:6f:58:d9:35:0d:94:6a:
32:56:2a:0d:d1:ea:ec:70:de:02:3a:81:62:32:63:
d8:91:c4:3e:d3:c8:14:0a:cd:e9:63:92:f8:bf:c6:
51:c7:b0:0a:d5:88:77:33:ce:44:7d:9e:93:81:12:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:A6:6B:96:BF:04:23:D3:B0:3A:A2:66:D9:6D:A3:63:F8:C5:8D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q3uma5a_BCPTsDqiZtlto2P4xY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:c8:f7:fb:8b:f8:5b:3a:7f:f8:3c:c7:38:e1:43:c4:24:c7:
a2:cc:86:8e:e0:fc:8b:39:a3:6a:5b:86:e2:cc:c6:6e:b3:f6:
3c:74:ea:4a:11:de:7a:60:27:f1:45:02:59:57:3d:e6:53:3e:
6a:ac:f3:de:26:e4:64:35:e9:0e:4e:22:75:35:6e:83:f4:07:
9b:82:ca:bc:a3:60:f0:1e:4b:45:7e:2e:3b:e0:f7:e5:2d:33:
5e:8f:54:97:d6:22:1d:7b:87:70:72:e3:fb:59:b6:d6:ec:12:
c4:96:a6:ec:92:b5:52:fd:21:fe:1f:c1:e0:e8:4d:1c:9a:d1:
90:ea:2a:e3:d7:99:20:12:0d:a3:8f:89:90:eb:ea:d2:4f:fa:
f4:e0:df:86:ad:21:f6:35:95:96:23:84:d9:a2:ed:52:cc:08:
56:d7:c0:6f:88:0b:6b:a2:e3:29:08:1d:a6:53:ab:69:9b:fc:
da:ad:a0:ec:d4:e2:fd:f1:31:41:81:49:9a:c3:d3:f2:fa:eb:
b1:a3:c1:a7:bf:8a:49:91:74:39:6e:80:3f:5f:22:59:69:b7:
b4:e1:3c:e4:4a:2a:7f:c1:b9:23:6f:67:19:89:a9:f3:7e:f9:
19:58:26:21:cd:f0:6a:cc:8b:57:cd:f3:73:ef:b6:73:d5:8a:
73:56:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:42 2025 by rpki-client