Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q7qCVmUii2w-SU_DJpc8pQYLffs.roa
File: q7qCVmUii2w-SU_DJpc8pQYLffs.roa (raw, json)
Hash identifier: pEBnLNT4qqA9fG7Bc+YNNogh4Skb2BWw1uZJqmMaHM0=
Subject key identifier: AB:BA:82:56:65:22:8B:6C:3E:49:4F:C3:26:97:3C:A5:06:0B:7D:FB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3F0950C3332786F5D6E1A3F3D2998A1E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q7qCVmUii2w-SU_DJpc8pQYLffs.roa
Signing time: Thu 25 Jan 2024 05:13:11 +0000
ROA not before: Thu 25 Jan 2024 05:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:09:50:c3:33:27:86:f5:d6:e1:a3:f3:d2:99:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 05:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abba825665228b6c3e494fc326973ca5060b7dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:69:c5:e1:81:a1:f3:51:0e:72:0e:79:80:
93:2f:6f:23:89:0b:0c:94:00:f1:59:0f:aa:2b:e3:
68:4a:a1:33:df:d4:b9:ad:64:d3:d3:03:33:e3:b2:
4c:d0:2a:b3:0a:db:b4:2e:f4:5f:80:16:c4:e0:2e:
6e:17:84:db:24:3e:92:11:80:83:c5:31:9a:21:8f:
63:bf:eb:04:77:ce:7a:a9:75:1a:49:a6:57:4d:70:
d2:83:73:6e:30:4e:23:28:d3:32:47:e4:be:2c:59:
5b:3d:31:14:44:3a:ff:ad:fa:af:8e:a2:34:4c:0f:
06:de:7f:97:44:a9:34:1a:11:0d:27:e8:ed:13:16:
52:df:dc:70:ad:1e:2c:37:fc:2b:ae:a3:ad:72:c1:
12:f6:9b:92:5c:14:a4:53:84:d5:f8:31:60:08:0c:
a9:a1:6f:4f:5c:9f:84:e9:69:70:4f:88:c2:64:b3:
74:2e:da:98:3a:19:f0:02:d7:1d:6b:92:69:14:56:
dc:ee:75:0f:b5:1d:b7:1d:d8:f9:24:14:38:51:99:
d7:87:42:e1:d1:10:60:09:bb:12:48:81:19:27:72:
46:0d:89:3d:56:73:c7:26:74:b2:1b:32:83:0a:60:
79:07:d2:bb:8b:6a:06:83:97:0f:b2:db:0f:f0:ae:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:82:56:65:22:8B:6C:3E:49:4F:C3:26:97:3C:A5:06:0B:7D:FB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q7qCVmUii2w-SU_DJpc8pQYLffs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:95:c3:87:af:a4:c1:cd:91:2e:de:9d:43:a7:22:23:ee:12:
1c:f6:af:2b:03:be:3e:12:88:90:07:91:17:3c:3f:44:b5:12:
80:a0:40:d3:7c:81:a8:28:6b:4e:2e:60:6c:68:b3:a2:6e:aa:
73:79:c7:42:a1:20:98:8d:cf:eb:f5:e6:63:9d:eb:54:6b:3d:
f7:ae:44:55:72:64:bf:9e:73:9c:4b:5e:98:a5:ab:7f:da:a1:
82:e3:8c:df:b6:f3:47:5f:d6:f2:a4:0a:f9:08:03:98:59:db:
d7:9f:46:05:6a:f7:88:d4:4a:d4:cc:45:61:f2:9c:6c:60:c1:
0a:88:e3:39:9f:05:ce:b9:cf:ff:4c:c0:ca:62:d4:5a:1d:07:
97:1a:06:d0:a1:a1:63:db:a4:3b:3b:80:b4:8c:85:94:ad:e2:
1b:f7:e2:9b:c3:55:dd:04:d6:38:2a:6a:64:ab:57:2e:ab:41:
27:5e:66:f9:f6:62:3e:89:bb:fe:d5:0a:b9:05:62:b6:aa:8c:
ff:98:e5:81:f5:6f:df:d1:a6:71:9e:4d:ac:d5:94:95:64:4a:
b8:0a:64:a3:bb:9e:ed:66:2d:17:57:84:79:4d:cd:c0:30:88:
4e:12:41:86:c0:d1:63:dd:80:30:16:f6:22:9c:80:7c:9b:27:
47:05:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:13 2025 by rpki-client