Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QpqWnmicMRqcjosUUVVUUMjPnAg.roa
File: QpqWnmicMRqcjosUUVVUUMjPnAg.roa (raw, json)
Hash identifier: ZTFh+gVpHm4P9vHJ0WG1bZ11LPbYgjv45AMEuqTqCic=
Subject key identifier: 42:9A:96:9E:68:9C:31:1A:9C:8E:8B:14:51:55:54:50:C8:CF:9C:08
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E837B620D0A8B2F84769077DD293DFDA6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QpqWnmicMRqcjosUUVVUUMjPnAg.roa
Signing time: Thu 28 Mar 2024 05:14:45 +0000
ROA not before: Thu 28 Mar 2024 05:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:7b:62:0d:0a:8b:2f:84:76:90:77:dd:29:3d:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 05:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=429a969e689c311a9c8e8b1451555450c8cf9c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:ca:f8:9b:51:0d:8b:88:ee:c8:e0:3e:99:
2a:cb:14:e0:be:0e:f0:57:0f:a9:59:c4:72:c0:b2:
c4:e3:ea:49:0c:8e:47:d3:6e:4c:5b:69:34:73:13:
5e:7d:2c:b2:89:44:e6:48:45:d6:0c:17:e4:60:e1:
3a:1d:18:1b:f0:85:88:a9:e6:21:a1:be:4e:df:09:
02:6e:e0:0a:b7:95:bc:d2:9b:9c:4f:68:f3:ca:a2:
57:fa:70:db:99:79:8f:91:4c:02:ea:93:69:8b:46:
d1:e9:00:d1:47:e9:fd:5c:2a:4a:05:bb:5b:e3:2c:
9f:99:c8:15:f6:81:a3:8a:40:82:f1:27:25:3c:05:
80:22:da:3a:00:79:5e:3d:ee:a2:1e:9d:62:53:dc:
d8:93:12:62:5a:43:09:21:fe:04:52:33:c8:66:72:
e1:eb:97:e7:59:b0:98:e7:83:af:ca:a7:fe:6a:6f:
ce:56:fb:43:b2:26:59:a0:af:83:8c:c4:95:0b:66:
27:e5:10:8c:ba:cc:b4:dd:b3:0e:87:bf:e1:90:08:
7f:e6:66:a6:09:2b:7c:d0:93:92:ad:58:05:3f:e1:
bc:d3:d4:5f:a1:d5:b6:b5:22:d4:48:e7:7c:61:00:
b7:3f:f1:d7:7a:2b:bb:83:fb:14:6f:46:ed:d4:fb:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:96:9E:68:9C:31:1A:9C:8E:8B:14:51:55:54:50:C8:CF:9C:08
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QpqWnmicMRqcjosUUVVUUMjPnAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:16:3c:1f:35:ec:8b:de:7d:a9:d7:8b:c5:d3:d6:a2:1c:4e:
10:dd:05:e7:a2:ee:0f:41:37:48:bb:41:ea:b3:3d:bb:26:5c:
93:71:85:86:01:95:44:ff:62:f2:a4:4d:dc:df:a7:33:0c:e1:
a4:cd:90:16:f4:92:5c:ea:6c:96:8b:ba:b3:de:dd:3d:bd:d1:
5d:ea:9a:c6:36:e2:2a:5e:8a:e8:4b:15:ba:30:cc:c1:a2:7b:
cc:5e:ca:86:be:d2:0b:b5:96:ce:08:45:f9:8a:f8:ac:15:ad:
90:68:38:87:33:54:cb:8d:84:fa:96:62:0e:b0:89:83:33:70:
59:ad:01:09:14:ba:ef:55:b7:01:24:94:2c:3c:1e:d4:7e:18:
eb:93:76:51:18:c1:58:d9:2b:98:65:2a:a0:f5:0c:85:9c:1d:
2a:01:e6:12:ff:bd:84:9a:01:a9:6c:ad:cf:c9:9f:40:80:28:
98:46:f1:a4:0a:cf:d6:1d:b8:f0:06:a9:4e:99:d1:29:f8:5e:
92:cc:81:5f:90:a3:de:b8:d8:72:fa:61:3a:48:33:4d:0e:1f:
97:85:7a:5b:78:24:60:51:fc:9c:a3:27:d0:20:08:31:c6:eb:
aa:c2:cd:b1:95:b5:ed:6d:36:d0:e0:c4:f6:fa:c5:7e:0b:46:
b4:51:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:33 2025 by rpki-client