Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q72k1S9vVaxTZ6iBTYasOAq9I0g.roa
File: q72k1S9vVaxTZ6iBTYasOAq9I0g.roa (raw, json)
Hash identifier: G/cpzO1Ape5jt1pclHbyX7wJJzrioBzy0dfdgCoT/Mw=
Subject key identifier: AB:BD:A4:D5:2F:6F:55:AC:53:67:A8:81:4D:86:AC:38:0A:BD:23:48
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C946B22780D5A9B6ABDF4B870BDCC0755
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q72k1S9vVaxTZ6iBTYasOAq9I0g.roa
Signing time: Sat 23 Dec 2023 02:04:58 +0000
ROA not before: Sat 23 Dec 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:946a:afaa/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:94:6b:22:78:0d:5a:9b:6a:bd:f4:b8:70:bd:cc:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abbda4d52f6f55ac5367a8814d86ac380abd2348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:a1:65:c2:fd:47:fe:4c:97:62:b9:11:6f:
ca:74:6f:83:65:50:4e:14:23:1e:76:aa:97:47:f0:
12:86:90:2b:b6:06:df:44:61:64:48:32:53:00:6c:
96:52:4b:8d:a7:e1:d1:d9:de:20:dd:c8:51:c5:6d:
c9:95:99:cf:d9:98:11:5c:e8:71:d3:d3:1d:36:da:
a0:df:67:4d:f4:ee:11:4f:28:6e:9a:32:fa:e9:b3:
d3:8c:0e:9e:74:b1:8c:cd:4b:68:99:cc:30:83:a0:
74:22:e8:ed:a7:8c:dc:19:db:45:bc:bc:b6:78:db:
b5:f0:62:f7:09:51:e1:81:2d:b6:49:5d:c1:dd:3b:
91:60:37:5c:5f:a5:8a:9c:5f:f4:71:0a:a5:5e:3a:
5b:60:da:10:c5:1d:cb:ef:a1:56:05:7d:bf:45:a6:
7e:82:a6:03:62:f7:fe:88:53:41:47:97:55:a4:29:
b3:7a:b8:ba:6b:83:db:41:c1:38:6f:22:66:e4:df:
9c:ce:50:7f:b6:6a:70:b5:71:60:27:71:ff:86:48:
e6:3f:52:ad:ca:9d:6c:2f:bb:8d:b0:e8:67:ba:51:
6b:34:7b:a8:c9:60:27:d4:9b:db:02:22:2b:95:92:
c3:f7:18:31:cb:b1:0e:b0:63:0b:7e:3e:ae:60:5a:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:A4:D5:2F:6F:55:AC:53:67:A8:81:4D:86:AC:38:0A:BD:23:48
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q72k1S9vVaxTZ6iBTYasOAq9I0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:29:72:43:81:0d:7c:94:11:46:0c:03:73:52:1d:6e:7a:ee:
03:2b:d5:e0:bd:b8:5c:1e:a0:0e:0b:14:4e:68:74:80:89:fa:
04:61:96:29:7a:ca:af:33:78:f3:a0:f7:8b:a2:a0:91:94:5f:
0b:07:da:00:8d:ad:ce:90:99:20:bf:7c:fa:ea:ad:a9:06:fa:
db:20:ae:5f:1e:62:ec:5f:55:cf:9d:3f:9b:3d:57:02:0b:70:
89:bb:cc:e2:85:93:9a:25:4c:5c:45:bf:b6:ea:3b:c2:1d:34:
4e:61:39:c2:48:a4:f5:8d:60:ab:84:3c:00:c1:20:f8:7b:91:
94:28:5b:6f:5e:81:91:5a:15:e8:bd:57:52:1e:20:c8:22:8d:
fc:f6:70:bb:e8:54:ec:98:20:34:1d:d5:97:bd:95:4f:69:b9:
2b:a0:44:64:0e:c7:c7:ee:57:12:5d:15:de:da:13:36:0d:91:
3b:0c:ee:e4:c7:49:f4:ae:8a:70:2b:62:72:af:4f:8b:29:78:
b1:c9:55:eb:03:cf:83:f1:b2:d8:7c:d7:18:8b:7e:23:96:04:
40:be:3d:94:a2:8c:96:dc:19:d1:a0:ec:6f:4f:e6:98:28:f9:
7d:90:3b:ce:34:3f:09:f6:c1:29:55:e9:ca:6f:1f:2f:30:48:
ca:b7:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:52 2025 by rpki-client