Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Q1T6renNinWGsRnm7asF3t7PBw.roa
File: 7Q1T6renNinWGsRnm7asF3t7PBw.roa (raw, json)
Hash identifier: s+iPLFUG+nxao1w6i1jfhFlTVzyOBejuxcyoRtUEL0M=
Subject key identifier: ED:0D:53:EA:B7:A7:36:29:D6:1A:C4:67:9B:B6:AC:17:7B:7B:3C:1C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D41274F0F95158BDEAC2F03C9FC46E558
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Q1T6renNinWGsRnm7asF3t7PBw.roa
Signing time: Thu 25 Jan 2024 15:05:11 +0000
ROA not before: Thu 25 Jan 2024 15:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:4126:951e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:27:4f:0f:95:15:8b:de:ac:2f:03:c9:fc:46:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 15:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed0d53eab7a73629d61ac4679bb6ac177b7b3c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:7a:24:10:ce:56:05:97:9c:50:ed:dc:aa:
58:a6:08:e1:ba:23:39:02:9c:f7:1a:3f:78:d5:8f:
c2:5b:cd:68:ed:24:7d:02:bb:ed:50:65:a6:60:03:
90:3b:9f:00:c2:c3:f3:77:80:a1:76:9b:59:cb:9d:
b1:63:3f:ad:51:57:d6:d8:6f:38:ed:0f:32:88:e5:
4b:1d:ac:d7:29:5e:6d:11:38:2e:d4:04:dd:fe:18:
1e:10:69:03:95:3f:71:0a:65:4f:f7:70:00:d3:a0:
97:2c:e6:e8:9a:6e:e6:ec:d7:86:38:83:95:84:74:
a2:59:2f:f3:ad:22:23:5d:6c:87:ee:24:6f:11:02:
9f:80:e0:f8:2e:25:75:f8:8b:4d:5c:bb:72:51:5e:
d8:e9:b0:5e:da:1c:97:40:3b:69:e1:28:a0:a0:54:
f7:50:9e:dd:37:b3:af:de:e8:d4:87:13:da:8f:28:
0e:04:27:26:cf:f2:3e:52:a3:ac:5f:b4:04:39:e7:
41:d8:48:c5:c3:e8:22:4c:59:73:f6:55:d9:f7:09:
14:b2:47:a7:1b:47:9e:c9:3d:60:f9:0b:2d:0f:89:
88:b6:bd:04:c5:27:1a:f5:4a:48:f6:b6:32:4c:84:
9c:fc:97:16:b3:34:3a:67:9d:7c:b1:29:dc:70:ca:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:53:EA:B7:A7:36:29:D6:1A:C4:67:9B:B6:AC:17:7B:7B:3C:1C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Q1T6renNinWGsRnm7asF3t7PBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:eb:95:de:82:22:2f:3d:56:fc:e3:8c:6b:0e:1f:fe:41:c0:
0f:08:23:1a:2c:3f:84:cc:8b:e7:f7:bd:52:06:88:38:66:06:
4b:b8:7a:b1:1d:c4:cf:ac:10:b3:f8:ba:c6:11:29:3f:2b:ce:
5d:96:57:30:82:a9:30:dc:d2:29:d6:26:a8:a5:8e:b4:9e:a7:
18:2b:f4:31:f9:09:03:d8:fd:66:a5:67:7c:ed:14:83:5a:1c:
3f:0b:26:64:6f:ee:0d:76:bf:d6:25:d6:c1:5a:55:d5:df:0b:
aa:a4:35:22:a7:0b:65:d4:f8:0b:fd:ce:d5:c0:e6:20:da:32:
e0:85:4f:d5:c9:e1:99:dc:d8:77:e8:90:57:e3:5d:4f:ab:1b:
1b:7e:ba:61:18:bb:bc:6b:8e:2a:10:59:93:49:76:b4:0f:a1:
e8:8e:26:bf:eb:69:e2:a5:f6:8b:28:f4:4a:cc:97:21:5e:fc:
cb:20:51:21:97:18:7b:ba:a0:6a:c2:ce:68:2d:40:8e:28:a5:
2b:1b:3b:4b:49:63:14:cb:e5:24:e1:58:53:85:bf:9a:1d:53:
c0:e0:5f:e0:e8:4c:da:48:a3:73:54:b2:1a:31:e2:d5:ed:ed:
af:aa:79:4f:1f:75:23:cd:4f:f8:bb:16:99:52:78:3c:8c:80:
67:43:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:14 2025 by rpki-client