Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QuU1JbRAU4fLfc0DNWnfZpzb3Yk.roa
File: QuU1JbRAU4fLfc0DNWnfZpzb3Yk.roa (raw, json)
Hash identifier: trePjuYWzKqdJC8w86H+Tx/OVw68OEpQ47SRiqDBNLo=
Subject key identifier: 42:E5:35:25:B4:40:53:87:CB:7D:CD:03:35:69:DF:66:9C:DB:DD:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0F9BA128C4EC80F177BE91D46BC41AF7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QuU1JbRAU4fLfc0DNWnfZpzb3Yk.roa
Signing time: Tue 05 Mar 2024 17:14:01 +0000
ROA not before: Tue 05 Mar 2024 17:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:9b:a1:28:c4:ec:80:f1:77:be:91:d4:6b:c4:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 17:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e53525b4405387cb7dcd033569df669cdbdd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:66:1c:3d:e9:af:c0:e6:7f:b6:64:8d:49:
76:70:12:56:d5:dd:b5:89:38:9e:84:46:79:6d:29:
c7:2c:dc:34:82:de:cc:e3:f2:d7:d3:b5:b1:3c:c4:
48:c7:c2:10:54:e4:ab:d8:6d:df:59:e3:7f:30:4d:
ff:22:dc:c9:02:41:10:25:fd:05:b1:42:01:48:db:
76:c7:cd:9c:76:11:62:99:a1:1e:87:d1:f3:4d:c2:
d3:33:77:6b:d6:a9:55:a3:15:73:27:9c:32:65:c3:
ae:bc:c1:56:ae:7b:e3:dc:fd:82:f3:01:f5:ae:a0:
e2:77:ef:30:7f:38:a8:af:3d:79:58:a5:af:74:3b:
b8:00:e3:cf:6a:8c:f2:7e:0b:1f:a5:53:c7:9e:e9:
27:79:da:ae:c8:4f:52:c9:5a:83:9c:e6:eb:16:01:
54:b4:2a:ff:05:46:5e:1b:38:9f:0e:bd:2f:e9:91:
7d:4f:03:70:0a:36:39:f8:03:07:11:2c:2c:d5:d4:
47:a1:62:0d:f9:3c:8d:7a:aa:9b:36:b5:de:71:29:
4c:08:81:f6:5f:0a:5d:9d:c6:4e:f3:80:2a:1c:d7:
4f:d0:31:ff:75:cd:87:0e:a4:64:9d:f7:15:d2:d4:
e1:d3:ae:60:6f:63:ea:e6:ca:60:b0:f3:cb:f3:03:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:35:25:B4:40:53:87:CB:7D:CD:03:35:69:DF:66:9C:DB:DD:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QuU1JbRAU4fLfc0DNWnfZpzb3Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:e3:fd:e0:50:50:d3:a9:eb:ad:c6:ba:e7:90:5d:d8:62:8a:
ab:96:89:c9:e3:76:5c:62:7f:36:c7:fb:8f:24:b6:28:72:a0:
7d:c6:fa:45:6a:5b:bf:eb:19:03:3c:23:59:a7:af:8c:47:17:
08:07:eb:ae:64:aa:0d:45:a3:5e:e1:8e:08:0d:a0:28:8b:62:
99:72:84:a4:88:eb:3b:51:80:9b:01:c0:bd:7d:bd:14:ec:6f:
fa:d3:f9:b4:9c:a4:da:25:c7:a5:56:05:ec:ad:ca:2d:04:4a:
39:d9:5b:eb:aa:35:11:25:a0:c3:f3:73:ba:1c:cb:08:20:ac:
68:c3:63:87:55:4b:8e:13:2e:4e:e9:70:c4:f3:27:61:2f:60:
25:cf:9f:e4:6b:00:0a:16:51:f8:dc:a7:df:45:2b:4d:39:f6:
bd:09:48:17:df:1e:d3:57:98:9e:fd:f2:c2:e2:00:46:19:a5:
96:f4:49:72:71:33:3b:99:f9:dd:44:93:23:5d:e3:5f:7c:c6:
74:d9:3e:4d:45:49:d6:b4:de:c2:68:ce:fd:42:e6:d8:fe:1c:
4f:3f:8d:fa:1a:88:83:e4:07:e9:82:f5:fa:94:78:0f:b1:f6:
e4:76:04:1a:86:5f:e1:ce:46:01:a8:3f:61:47:49:71:8e:45:
d8:62:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:58 2025 by rpki-client