Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gqvqcQzwmytlGrFgFFhrVc1QiOY.roa
File: gqvqcQzwmytlGrFgFFhrVc1QiOY.roa (raw, json)
Hash identifier: YaSjp6ukj284iTSbW6Gxd2Ws97labb95+cm15EFrneQ=
Subject key identifier: 82:AB:EA:71:0C:F0:9B:2B:65:1A:B1:60:14:58:6B:55:CD:50:88:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8E0282EFEFBE66F2C7EBC94AD504379D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gqvqcQzwmytlGrFgFFhrVc1QiOY.roa
Signing time: Thu 21 Dec 2023 20:12:58 +0000
ROA not before: Thu 21 Dec 2023 20:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:02:82:ef:ef:be:66:f2:c7:eb:c9:4a:d5:04:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 20:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82abea710cf09b2b651ab16014586b55cd5088e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:ee:29:61:06:be:84:3e:af:f9:e7:cb:d3:
d2:f5:25:2e:9b:b6:b8:bc:6d:af:23:f3:50:dc:f4:
ce:52:e1:e4:e1:ac:18:2f:b3:12:57:98:44:3e:89:
61:9b:44:3b:55:67:b9:5c:70:b7:9a:3d:ab:39:59:
b5:28:c6:bb:f4:1e:9d:71:0a:35:0b:55:09:34:61:
c8:34:fe:19:5c:07:2f:9f:ca:4e:e9:a7:d1:a0:a7:
5e:b5:e0:5e:f1:2b:df:4d:2e:11:5e:55:47:38:f3:
6d:70:2d:23:14:9f:2e:e0:b2:8b:39:c3:4a:59:dc:
66:61:d9:31:3c:2f:a5:5a:14:64:ca:5a:03:3d:91:
ef:5d:1e:a3:89:74:10:f0:de:a2:c6:79:45:8d:6c:
c4:97:a7:46:d0:cc:00:8a:09:25:6e:65:f4:93:b3:
00:d4:0b:38:45:df:eb:16:f3:c7:cf:01:b9:9c:38:
f7:91:5f:3e:19:12:2a:92:39:0d:86:34:61:47:d2:
10:b6:7d:69:ae:1f:3c:41:8c:de:4d:41:47:7f:3d:
fe:5a:c9:53:5e:60:d7:a8:7e:2e:60:a4:7c:1f:82:
0a:b2:f6:61:39:0a:b7:8d:2d:f5:c3:68:43:dc:53:
e0:ea:d1:7c:99:c6:55:ee:f7:a1:e4:ce:5e:2f:2c:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:EA:71:0C:F0:9B:2B:65:1A:B1:60:14:58:6B:55:CD:50:88:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gqvqcQzwmytlGrFgFFhrVc1QiOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:a7:04:4f:b6:dd:77:f6:b2:bc:3f:fe:af:6d:50:f3:f5:fb:
7c:d0:03:19:ff:37:76:99:d0:8b:df:75:fa:9c:0f:d1:de:75:
ba:07:78:b0:d3:d3:f6:ec:a7:f7:70:df:51:a4:e5:87:b5:a0:
2c:b4:8b:b1:84:99:d2:78:ef:30:e0:e1:d7:04:86:48:96:8b:
c4:e6:f3:71:41:55:ca:93:38:11:30:8f:a8:d7:9f:d9:c3:8c:
6e:bd:d2:98:ca:ff:34:4b:ad:17:1d:23:3c:e8:e6:52:69:8a:
f3:67:e5:27:9b:16:08:34:55:f0:23:91:bf:f8:7d:e7:06:da:
42:05:84:8a:31:f6:f2:4b:e0:ee:31:de:b6:6f:96:c2:f4:1d:
4f:89:8d:21:2d:db:6b:5f:16:3f:5d:62:b3:82:b4:81:42:02:
7c:a9:bc:78:89:9f:8a:4d:05:ba:01:1a:b4:c9:ed:62:25:a8:
0d:df:c5:55:76:66:cb:ae:09:01:53:c3:5c:d5:9f:99:52:ea:
fb:5e:15:86:cc:6c:d6:1c:23:fe:68:4b:d0:e5:1b:db:98:8c:
0a:1d:a2:e7:05:a3:36:a2:78:65:c4:f2:80:18:d7:ef:5d:bf:
6d:ef:85:fa:67:82:f8:11:b8:70:4f:0b:58:83:80:12:d4:ee:
5f:13:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:17 2025 by rpki-client