Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/14QDqOmXlKBZAUev87vKkuSVYzM.roa
File: 14QDqOmXlKBZAUev87vKkuSVYzM.roa (raw, json)
Hash identifier: otCsXkcnngVtZSiEUvS+vJPc0R/A6EjKmUaQsOt3d1g=
Subject key identifier: D7:84:03:A8:E9:97:94:A0:59:01:47:AF:F3:BB:CA:92:E4:95:63:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D34107B04FF4B2C8EDB9E55D5DCDF3F54
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/14QDqOmXlKBZAUev87vKkuSVYzM.roa
Signing time: Tue 23 Jan 2024 02:05:11 +0000
ROA not before: Tue 23 Jan 2024 02:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:340f:975b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:10:7b:04:ff:4b:2c:8e:db:9e:55:d5:dc:df:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 02:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d78403a8e99794a0590147aff3bbca92e4956333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:dd:ab:35:28:9c:89:a4:42:ac:0b:ea:5e:
48:e2:38:95:bd:7b:eb:97:c4:c8:3a:39:5e:78:ae:
75:3b:04:88:d9:d3:65:7f:c1:a8:0b:ab:e9:bd:10:
69:8c:ff:0d:f0:42:44:72:ba:eb:9c:64:8a:b2:7b:
3b:f3:5e:84:ce:f9:50:0d:74:fe:14:62:3d:f1:16:
56:36:e5:96:6d:7c:d5:c9:5c:03:5c:9d:d0:00:a8:
c9:12:40:ca:7f:25:94:c1:e3:9f:2c:c1:03:29:e5:
4b:b1:4b:85:39:99:7e:4c:d5:a8:03:15:be:a1:ac:
a6:e0:61:f7:78:1f:d4:c6:b3:a3:39:f7:21:ef:cb:
f4:fa:17:04:b3:0c:c5:09:04:2f:14:de:47:5a:ce:
e9:ae:54:b5:58:e3:b1:23:18:c6:a6:17:fc:20:4f:
f6:bb:5b:ec:0e:fc:4e:bb:24:a5:bb:a4:84:f2:c9:
0b:09:cf:9d:75:80:7a:95:db:a3:05:27:b3:37:34:
7a:b4:da:5e:98:fe:12:fb:77:38:50:2b:ae:50:a5:
f6:d8:5e:a2:47:9c:50:a4:ee:8d:8b:af:43:c7:c9:
fb:be:7d:0d:f7:07:ba:99:c6:70:b1:9c:d4:05:4b:
62:42:1c:a3:6f:9b:8e:ac:3c:9e:dd:57:15:c6:c1:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:03:A8:E9:97:94:A0:59:01:47:AF:F3:BB:CA:92:E4:95:63:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/14QDqOmXlKBZAUev87vKkuSVYzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:10:6a:a0:7b:2b:69:8c:c6:da:80:ac:48:91:a9:17:b9:19:
97:c6:54:ee:1c:d0:71:1c:28:ef:e8:47:69:71:3b:63:b1:7c:
f0:56:a3:fe:58:29:d4:d8:64:40:1a:f9:11:41:63:87:e1:8f:
1b:8e:0e:2a:68:f5:19:86:f2:30:9b:49:f2:a2:c8:ef:27:fe:
81:d5:4a:6d:8f:27:a1:cd:f5:c8:77:58:08:4e:7c:8f:7b:75:
14:30:66:ec:4f:be:da:0e:40:78:4f:f9:8b:af:68:c6:43:30:
94:e0:71:cd:26:6e:b5:22:f1:ba:05:03:6e:75:8f:71:d1:e0:
98:16:4f:0d:2e:5b:38:83:b0:60:a3:b0:7d:b7:c1:aa:bd:58:
f5:d5:3d:b5:83:e7:b6:4c:20:5b:07:5a:08:ee:c2:c4:d4:ed:
ee:f1:0b:02:1b:76:e4:e9:dd:3a:60:0a:72:83:76:4a:73:86:
3c:8d:41:07:86:2b:c6:ff:cf:b7:86:3c:c9:da:ee:ce:ec:a6:
12:f1:f3:eb:e2:9c:df:6e:df:74:63:72:95:fa:f0:ae:22:ae:
58:78:83:5b:79:0d:14:84:4b:b8:b1:61:47:da:21:68:2a:23:
55:8b:71:6b:06:ae:14:dc:1d:83:1a:fe:14:9b:ec:24:5d:76:
4d:d4:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:15 2025 by rpki-client