Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qIGRUd9BWESOKpDKLPlaMLrhDYE.roa
File: qIGRUd9BWESOKpDKLPlaMLrhDYE.roa (raw, json)
Hash identifier: jqfJB728RmoGz0wN9lmFtFKoB/ZgAFWQfOODWaWr92w=
Subject key identifier: A8:81:91:51:DF:41:58:44:8E:2A:90:CA:2C:F9:5A:30:BA:E1:0D:81
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDA9CF379FF118AFF940CA66B7BE3480C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qIGRUd9BWESOKpDKLPlaMLrhDYE.roa
Signing time: Fri 05 Jan 2024 17:12:48 +0000
ROA not before: Fri 05 Jan 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:9c:f3:79:ff:11:8a:ff:94:0c:a6:6b:7b:e3:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8819151df4158448e2a90ca2cf95a30bae10d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:e0:e7:22:ae:98:15:ab:bb:a5:7c:4d:8c:
7b:c1:17:51:38:d6:50:79:0a:7e:03:e6:0f:76:56:
6a:a5:55:66:c3:e2:2e:90:de:ca:44:70:84:a7:26:
ec:16:ea:09:ba:99:1e:9c:88:6d:be:be:75:3a:38:
f1:10:20:cc:ae:95:a2:fd:e8:fe:da:fc:fc:ba:2c:
d4:ce:5d:80:4f:a3:93:c1:86:60:a8:bb:67:74:b8:
8c:47:1c:48:82:b6:d8:48:17:75:2c:de:89:85:2e:
ad:45:fb:d6:ea:36:a5:0b:ec:7c:9b:89:8f:fa:8e:
1f:b3:74:94:ea:5e:99:39:ed:23:42:cf:61:de:7b:
83:3b:e9:57:62:fa:7d:cb:b3:0e:27:a5:9b:be:0a:
6b:e1:05:8d:8e:f8:ce:2f:db:8c:47:05:6f:68:fc:
0a:78:72:bc:e5:4e:92:12:6a:a1:b3:a5:e7:03:54:
f9:dd:c9:9c:c9:d1:89:fa:db:cb:6b:b1:4e:ef:f3:
0b:d9:e9:89:16:c1:c4:be:05:4e:4b:b6:b7:0b:1e:
fe:e0:e3:dd:40:48:a5:ff:e7:ef:1c:4c:89:2e:06:
ca:6e:15:c8:94:78:38:ca:f0:0b:54:fb:2c:a8:03:
ce:55:d1:c8:a3:a5:d5:c8:d4:d6:7f:f6:98:cc:29:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:91:51:DF:41:58:44:8E:2A:90:CA:2C:F9:5A:30:BA:E1:0D:81
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qIGRUd9BWESOKpDKLPlaMLrhDYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:c2:6d:2d:3e:68:c2:af:86:55:ee:3c:99:b4:41:3e:d2:bd:
31:96:a2:c1:9b:e2:59:15:1c:97:41:91:8d:c7:c5:18:1a:38:
81:fe:15:ca:5c:44:fb:1c:e2:d1:87:09:c8:bf:7d:44:c3:56:
d7:7c:2d:55:0a:0b:af:a7:d4:d8:af:a0:81:e1:89:9a:03:62:
ef:c2:11:fe:e4:93:f6:1b:2f:dc:6a:7b:a7:78:71:5c:60:5c:
34:19:65:1d:98:30:fc:17:d0:f2:b8:be:cc:3d:4c:b2:2d:a2:
cc:86:4e:f1:88:ee:ce:0d:ed:1d:f4:e0:00:9c:45:9f:34:29:
3d:06:99:fe:6c:e1:63:ac:b8:c2:06:8e:3e:f5:0a:62:74:a3:
fa:2a:6f:b5:8f:76:4c:c1:d6:c7:a0:2f:ae:8a:6c:fa:a0:d4:
86:62:c3:b4:c8:96:e5:0b:2a:12:3d:65:9e:b0:44:59:ec:02:
cf:44:5c:f9:2c:84:f7:26:67:9c:20:f1:2c:f3:51:07:69:f7:
a7:47:7f:a4:36:a3:97:bb:d3:bf:89:71:07:4b:cd:01:b6:d4:
6c:86:43:98:66:b8:81:9d:47:1b:7c:6c:dd:38:88:54:4b:ee:
ff:e0:27:bd:a4:37:53:bc:1f:fc:06:b8:6a:1f:f5:de:08:19:
ee:95:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:33 2025 by rpki-client