Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qtLKzCcj9x2CksWQaTnPu0GIMwY.roa
File: qtLKzCcj9x2CksWQaTnPu0GIMwY.roa (raw, json)
Hash identifier: OogpstFTA1sWlJqeO3A5mGVdFYaNrhv5UxowfZFcoCg=
Subject key identifier: AA:D2:CA:CC:27:23:F7:1D:82:92:C5:90:69:39:CF:BB:41:88:33:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E74E05ED3604DCED1AA629D08895F139D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qtLKzCcj9x2CksWQaTnPu0GIMwY.roa
Signing time: Mon 25 Mar 2024 09:10:45 +0000
ROA not before: Mon 25 Mar 2024 09:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:e0:5e:d3:60:4d:ce:d1:aa:62:9d:08:89:5f:13:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 09:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aad2cacc2723f71d8292c5906939cfbb41883306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:c7:83:b1:7f:f1:7b:a9:60:02:e7:8b:88:
db:6d:27:9a:a4:e4:a3:ea:c8:55:bc:07:8a:ac:c2:
2f:d3:ad:fa:e4:30:0e:74:09:6b:41:4d:21:a3:26:
68:cf:48:4a:07:09:38:8b:22:7c:80:4f:d5:ae:74:
ad:e9:9d:9b:39:1f:a9:10:23:c4:fa:93:b5:f9:21:
3d:6c:af:e5:fa:f2:9c:f9:6d:2f:29:ef:7d:a0:66:
69:81:65:aa:5d:f9:1a:2e:71:0e:2e:f8:de:6e:c4:
6d:e8:44:f2:67:8d:c7:a3:08:4a:c1:e2:65:37:a8:
da:34:3c:63:fd:75:77:5c:ca:2b:89:b2:7d:82:10:
41:f9:71:1b:e3:32:cc:c8:db:62:52:22:80:ba:74:
7e:9b:4f:2d:1c:bb:6d:fb:3e:5a:9c:2c:c4:82:87:
cb:8f:af:bd:bd:02:75:80:d0:67:a2:6f:e5:12:85:
03:29:4d:6d:58:56:b4:82:1a:4f:5b:b5:ab:8a:b0:
1c:2b:dc:95:ac:5f:37:66:9e:f4:af:dc:02:2a:7c:
b8:20:62:43:21:51:ef:d3:8d:d7:37:f9:1e:6e:b7:
1e:b1:1c:1e:ae:60:ee:4b:75:bd:eb:f5:ad:01:c8:
44:48:89:fe:9a:9a:33:ec:78:72:ab:2f:89:72:bb:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:CA:CC:27:23:F7:1D:82:92:C5:90:69:39:CF:BB:41:88:33:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qtLKzCcj9x2CksWQaTnPu0GIMwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:e8:4a:4f:52:99:72:92:45:04:3e:b0:dd:d2:26:2f:09:cf:
19:f8:e0:e0:e7:3d:0a:f6:20:45:95:81:77:49:fd:1a:29:c1:
b1:da:ac:8c:8f:c3:dd:3c:e9:cd:ab:5c:5e:9c:ae:60:80:cb:
15:df:4a:3b:e3:33:0a:03:9c:69:50:94:54:0f:ad:83:b9:d5:
4b:ec:25:25:d8:61:a7:ab:4d:74:47:b6:78:2f:bd:ff:bf:1a:
04:3e:7b:28:40:c6:8d:85:68:68:9b:96:e4:db:f4:a2:e4:dd:
1e:bf:6f:cb:12:2c:52:9b:c1:73:7e:f9:1a:f0:4a:d4:c7:e7:
8f:cd:56:08:ca:85:b3:ec:30:c2:3e:06:95:ec:31:35:3e:55:
a0:dd:6e:e9:a8:22:ea:84:25:c6:c4:c2:7b:96:d8:7a:99:26:
17:8a:4e:2c:a0:5f:28:8a:ad:99:62:8c:0c:68:c9:a4:ef:3d:
d3:01:88:77:da:f0:fe:d3:a4:ab:97:56:32:93:bf:2b:93:bb:
20:73:55:38:5d:f9:88:87:47:38:dc:48:03:75:38:14:1e:2d:
a8:8e:81:0f:9c:45:46:cc:0b:3a:1b:b4:c5:f4:7f:c9:55:64:
48:3d:52:d0:6f:29:39:e6:a5:df:0f:39:02:ed:7f:6c:84:30:
0a:25:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:58:57 2025 by rpki-client