Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qZlKIc94pULTAWnDXFDEN8dB9x8.roa
File: qZlKIc94pULTAWnDXFDEN8dB9x8.roa (raw, json)
Hash identifier: SCMMWsh8LsXpCbBcJaCj4KDjGdLBFj11gltPLbHQytM=
Subject key identifier: A9:99:4A:21:CF:78:A5:42:D3:01:69:C3:5C:50:C4:37:C7:41:F7:1F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9402F376105E8E40272ED7454E0C8B06
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qZlKIc94pULTAWnDXFDEN8dB9x8.roa
Signing time: Sun 31 Mar 2024 10:16:45 +0000
ROA not before: Sun 31 Mar 2024 10:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:94:02:f3:76:10:5e:8e:40:27:2e:d7:45:4e:0c:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 10:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9994a21cf78a542d30169c35c50c437c741f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:94:8c:5c:8b:fd:f0:46:07:3b:c4:5e:fc:
e9:90:53:4e:99:0b:b4:f5:aa:90:2a:fe:a4:00:e1:
c3:f0:5b:01:33:59:77:76:8e:de:fd:b0:a0:7a:50:
6e:49:fd:4d:cd:7c:a9:fa:6e:56:a5:47:22:80:3b:
2a:2b:4e:99:e6:78:a4:4a:fc:f4:ad:4b:76:72:5e:
f2:49:ea:ba:87:8a:33:53:9c:5e:5f:e4:bd:0d:b6:
e3:eb:41:00:bd:5a:37:9b:b3:b8:aa:10:98:93:29:
d6:89:19:17:23:03:30:d3:72:18:b8:f6:c2:31:97:
69:70:b5:1b:1a:26:9b:8b:83:cd:b6:ed:3a:8a:2b:
cb:0e:ab:f9:53:3e:89:be:96:70:1f:d9:f2:0d:2c:
24:88:6a:d0:55:70:f1:22:f8:30:74:8f:4e:7e:17:
bd:31:51:f8:63:fc:20:5d:ed:24:68:1a:42:2c:80:
ed:5d:89:85:9a:80:2c:a7:ed:a0:1b:4f:10:16:14:
b2:e1:78:2b:53:af:76:c2:f1:c7:a5:d5:cd:0c:7d:
7a:bc:b9:f7:c1:8a:28:9d:dd:6a:bb:58:af:19:ec:
70:94:d8:4f:e5:60:90:fa:f0:98:34:f9:35:41:af:
5f:e5:7c:f8:7b:c3:83:ed:2b:40:1d:1f:15:7a:aa:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:4A:21:CF:78:A5:42:D3:01:69:C3:5C:50:C4:37:C7:41:F7:1F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qZlKIc94pULTAWnDXFDEN8dB9x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f9:2d:7d:33:d1:e8:92:41:33:d4:53:fb:1d:f0:86:2d:2c:
58:07:f2:be:7d:96:71:b3:59:25:fe:cb:ec:3f:13:d5:21:81:
07:c1:4f:8c:28:28:21:25:71:c8:13:fe:dd:4f:13:23:c7:e9:
c8:0a:ae:b5:d3:04:d2:19:98:3f:5f:6b:97:a4:38:d0:b5:e7:
26:b6:d5:5e:34:ab:02:34:c4:99:c8:56:75:f6:fe:a1:5d:eb:
f1:8f:ca:e4:45:dd:e4:71:e3:47:e9:4f:c0:04:03:28:81:47:
24:d2:4c:27:c1:81:ff:b8:2c:e5:ba:43:62:48:81:7e:e0:d9:
54:3e:82:fa:4d:e1:3c:ff:18:a6:d6:10:6e:83:0a:57:eb:d4:
70:19:d8:26:fb:c0:66:e6:f0:c5:23:e2:ae:99:9a:94:44:fa:
11:76:12:a6:5f:37:9a:0d:76:6d:25:7d:85:3f:6b:da:55:c9:
1e:a1:12:94:74:14:ff:71:44:e1:87:15:39:e1:ae:de:ca:9b:
1c:8a:0d:92:5d:e2:7e:b4:57:47:b3:35:30:ae:c0:15:3a:e0:
22:30:43:d9:62:c3:f9:ac:7a:fe:8e:7d:4b:59:22:ab:91:b1:
e8:1c:ab:14:6a:bc:17:48:d8:87:c7:88:69:6d:4b:de:5c:b3:
ea:3d:b1:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6UAvN2EF6OQCcu10VODIsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMxMTAxNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTk5NGEyMWNmNzhhNTQyZDMwMTY5YzM1YzUwYzQzN2M3NDFmNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjCUjFyL/fBGBzvEXvzpkFNOmQu0
9aqQKv6kAOHD8FsBM1l3do7e/bCgelBuSf1NzXyp+m5WpUcigDsqK06Z5nikSvz0
rUt2cl7ySeq6h4ozU5xeX+S9Dbbj60EAvVo3m7O4qhCYkynWiRkXIwMw03IYuPbC
MZdpcLUbGiabi4PNtu06iivLDqv5Uz6JvpZwH9nyDSwkiGrQVXDxIvgwdI9Ofhe9
MVH4Y/wgXe0kaBpCLIDtXYmFmoAsp+2gG08QFhSy4XgrU692wvHHpdXNDH16vLn3
wYoond1qu1ivGexwlNhP5WCQ+vCYNPk1Qa9f5Xz4e8OD7StAHR8VeqqmJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKmZSiHPeKVC0wFpw1xQxDfHQfcfMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcVpsS0ljOTRwVUxUQVduRFhGREVOOGRCOXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADv5LX0z0eiSQTPUU/sd
8IYtLFgH8r59lnGzWSX+y+w/E9UhgQfBT4woKCElccgT/t1PEyPH6cgKrrXTBNIZ
mD9fa5ekONC15ya21V40qwI0xJnIVnX2/qFd6/GPyuRF3eRx40fpT8AEAyiBRyTS
TCfBgf+4LOW6Q2JIgX7g2VQ+gvpN4Tz/GKbWEG6DClfr1HAZ2Cb7wGbm8MUj4q6Z
mpRE+hF2EqZfN5oNdm0lfYU/a9pVyR6hEpR0FP9xROGHFTnhrt7KmxyKDZJd4n60
V0ezNTCuwBU64CIwQ9liw/msev6OfUtZIquRsegcqxRqvBdI2IfHiGltS95cs+o9
sUU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:32 2025 by rpki-client