Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wq5WL5kyjr9t9chJXuWN7Ky3RZw.roa
File: wq5WL5kyjr9t9chJXuWN7Ky3RZw.roa (raw, json)
Hash identifier: Scq/f9ZsL3QfS9lSJmm4WMplnuB9HnYSgWOMTyMCph0=
Subject key identifier: C2:AE:56:2F:99:32:8E:BF:6D:F5:C8:49:5E:E5:8D:EC:AC:B7:45:9C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D41D4588AB691E3691C6908C40A042D07
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wq5WL5kyjr9t9chJXuWN7Ky3RZw.roa
Signing time: Thu 25 Jan 2024 18:14:11 +0000
ROA not before: Thu 25 Jan 2024 18:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:d4:58:8a:b6:91:e3:69:1c:69:08:c4:0a:04:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 18:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ae562f99328ebf6df5c8495ee58decacb7459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:3b:27:39:3d:96:dc:ba:ac:1d:c5:7c:16:
3b:51:3c:9e:1f:36:d7:00:24:9c:e4:80:d4:c8:f0:
67:2a:67:f7:24:a4:00:ec:1b:38:51:e9:36:83:9c:
db:55:7c:85:61:05:7a:93:da:96:97:57:39:3d:98:
46:93:60:bc:56:53:5c:bc:1b:fb:19:73:d7:b8:1f:
05:d0:aa:4c:98:53:ad:aa:37:f1:29:18:fd:e6:12:
2f:a6:b3:f1:98:1b:ef:cf:44:49:9e:de:11:39:bc:
9e:eb:a3:15:72:18:f6:ec:e0:7a:ff:f2:ae:29:97:
8c:2c:7d:a0:d2:2b:8d:c3:d3:c1:f9:66:73:e3:8a:
05:2d:79:65:87:7c:08:10:ae:c7:98:88:6f:2d:68:
e8:19:38:2e:87:8a:94:e5:80:4e:76:46:5f:d0:67:
fb:90:61:b8:74:fb:be:58:f9:0d:2b:72:32:0d:a8:
e0:5b:bd:f7:93:ba:10:de:c1:b9:94:32:3c:53:27:
d3:59:30:e1:4c:c3:21:b2:84:05:25:82:c8:e4:c5:
ce:d4:30:93:75:ec:1a:bc:4c:ce:1b:1d:72:4d:e6:
1e:cd:06:7e:ec:a2:d3:9c:b6:d4:8a:c3:45:ec:b4:
8b:a6:26:61:0f:fb:ad:88:a6:fb:35:95:dd:4e:19:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:56:2F:99:32:8E:BF:6D:F5:C8:49:5E:E5:8D:EC:AC:B7:45:9C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wq5WL5kyjr9t9chJXuWN7Ky3RZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:83:79:7a:62:5a:ee:d1:ef:8d:0b:0c:15:3c:08:c2:2f:df:
bd:da:12:41:31:fb:cc:5f:ba:00:23:15:ff:32:cd:a7:bc:74:
8b:cf:8a:8e:51:32:d3:03:35:c9:66:5b:bf:26:09:8d:c7:5d:
d7:e9:6b:9e:65:b8:d2:b3:2d:13:66:ef:13:ee:3a:88:c3:64:
22:e7:a6:85:18:da:c2:8a:3e:59:f7:0a:af:59:d7:e0:14:2c:
d9:6b:a9:ce:75:55:18:f7:b8:8f:9a:da:66:a9:21:31:1d:35:
60:4a:20:85:a5:bc:12:1f:4d:86:39:c6:d2:ae:93:45:64:26:
44:20:12:57:16:26:05:88:d1:d4:c1:9c:b4:20:79:93:8a:6d:
c4:3a:b1:e5:af:fc:0d:ef:2d:10:d7:c8:fc:35:ee:55:b0:23:
99:5e:9f:a0:04:70:2e:cd:e2:59:0b:3c:63:81:7b:94:d8:3d:
a8:2c:78:b6:55:9b:e6:13:90:e9:48:1d:1f:7a:70:08:e3:37:
16:90:c4:9f:0b:84:4f:72:f4:b2:fa:eb:24:a0:94:06:78:32:
e9:a1:73:93:16:e1:18:98:cb:47:97:3d:c4:76:b4:1a:4f:5d:
65:a4:6b:cf:0a:3d:27:89:c2:69:4b:0e:e9:dd:0f:be:a2:54:
01:ab:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:49 2025 by rpki-client