Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q954YnXUvU_5qY5GUiCDlrxUPQo.roa
File: Q954YnXUvU_5qY5GUiCDlrxUPQo.roa (raw, json)
Hash identifier: VonX1+6yyvfEOme74mEof8R4yaD/8vTGwsY1QN3RK9o=
Subject key identifier: 43:DE:78:62:75:D4:BD:4F:F9:A9:8E:46:52:20:83:96:BC:54:3D:0A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4F543FD9E72CD329ACEF8F7C288F4076
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q954YnXUvU_5qY5GUiCDlrxUPQo.roa
Signing time: Mon 18 Mar 2024 02:11:45 +0000
ROA not before: Mon 18 Mar 2024 02:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4f:54:3f:d9:e7:2c:d3:29:ac:ef:8f:7c:28:8f:40:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 02:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43de786275d4bd4ff9a98e4652208396bc543d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:36:db:62:54:c1:7e:78:f1:2a:e9:f3:57:
85:2e:e1:97:f7:29:9b:7e:38:95:15:86:56:9d:f8:
d7:e9:c1:af:89:af:d8:62:f8:8d:32:9f:0e:78:8c:
24:9d:8d:e4:6c:e5:d6:03:13:b8:a2:0b:a5:12:56:
a1:eb:40:97:fa:fb:0a:19:d3:75:6a:49:3a:47:ef:
71:3d:63:7a:9d:a5:9e:fb:d4:9c:a2:2c:4a:e6:20:
00:8d:4c:a2:5d:88:d8:52:b6:0f:d4:39:0f:11:a7:
2c:52:f2:16:23:a9:77:c4:98:db:c4:44:c4:48:76:
67:38:a4:91:61:ba:e4:2e:2b:67:ed:28:46:44:7d:
7b:2b:c3:09:81:e0:77:8d:34:cb:60:6c:0f:8e:24:
26:88:83:57:aa:89:55:de:3f:3e:e0:ff:52:74:bf:
eb:f2:70:20:9d:47:39:1b:23:71:fa:1e:43:80:90:
67:bc:c7:83:52:9c:c8:57:dd:e2:05:c4:63:91:1c:
67:cb:00:d7:d0:bf:36:13:9d:42:7c:83:4e:a2:22:
87:33:42:06:fd:37:85:00:49:a6:c6:e2:5b:e4:61:
73:31:73:48:92:76:3e:32:56:56:9d:7b:1a:1f:13:
85:57:1a:38:26:d4:99:84:67:f9:d2:a3:50:3f:5b:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:78:62:75:D4:BD:4F:F9:A9:8E:46:52:20:83:96:BC:54:3D:0A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q954YnXUvU_5qY5GUiCDlrxUPQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:3d:59:60:fe:9a:2a:70:da:3e:3e:2e:ac:01:31:39:a3:fd:
99:29:19:e4:2a:d7:d4:72:08:9d:26:fb:eb:59:88:b7:17:c1:
9b:46:64:2d:18:25:59:6b:94:b1:6f:1c:14:ae:ac:c0:c4:6a:
f5:88:8c:4a:5e:1f:f3:24:c8:96:9a:bb:a4:13:0f:d7:fd:3a:
59:fa:95:3c:83:2e:2f:41:4a:7f:63:bb:37:f7:08:fb:f4:34:
61:6f:48:f3:8b:06:bc:83:6c:08:67:3a:38:75:8e:ca:1f:ba:
e5:a7:68:c2:43:77:cc:f9:72:f0:d6:ba:70:d1:7c:ec:15:40:
0b:ba:b0:0e:09:6e:10:1e:86:9e:37:35:c2:8b:2f:30:12:49:
01:96:98:76:59:c5:76:b9:88:fb:18:cf:fd:7c:5d:50:54:22:
97:36:f9:02:75:f5:e3:c2:46:1a:f9:54:38:5a:d6:ff:9b:15:
4c:4a:63:4a:71:1e:fd:e2:e1:31:b7:84:5d:f2:b6:a7:1a:60:
ce:fa:61:ca:6b:1a:bb:a0:de:d0:74:0d:e0:92:bf:91:6d:83:
26:19:35:bf:11:54:16:9d:10:39:2a:2e:15:01:17:79:d6:34:
6f:b6:36:b5:be:b6:a3:a1:8c:60:0f:09:dc:38:ee:3f:0f:f7:
86:44:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:33 2025 by rpki-client