Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7qwAX_s02M6s1yVChYIk6mqpr6M.roa
File: 7qwAX_s02M6s1yVChYIk6mqpr6M.roa (raw, json)
Hash identifier: 5EnUEhRHQyeArGxmXit3CN1YpyFwMP7Z0oKkdPBWboo=
Subject key identifier: EE:AC:00:5F:FB:34:D8:CE:AC:D7:25:42:85:82:24:EA:6A:A9:AF:A3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E85CE79AC8049B507F6544B856EEDBF4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7qwAX_s02M6s1yVChYIk6mqpr6M.roa
Signing time: Thu 28 Mar 2024 16:04:44 +0000
ROA not before: Thu 28 Mar 2024 16:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:85cd:f63e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:ce:79:ac:80:49:b5:07:f6:54:4b:85:6e:ed:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 16:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeac005ffb34d8ceacd72542858224ea6aa9afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:b9:48:4f:fa:3c:ce:5c:e2:a1:b4:b1:bf:
83:6c:4a:74:69:32:8f:02:82:d8:8e:ad:ec:c2:40:
41:ce:00:a7:00:c3:74:8a:8a:be:df:22:0e:6e:11:
5c:1a:8e:f3:55:cd:d9:95:96:f7:f6:22:e8:de:45:
bd:b5:71:5f:69:64:f5:ed:d2:d2:30:66:4b:81:f7:
d0:a1:1d:3c:cd:ad:61:fb:26:41:1f:80:9a:5c:bc:
9e:d6:23:38:0a:cd:0f:64:22:b5:9e:ed:0f:de:ee:
5d:e6:39:f6:0b:2e:fe:0f:92:9e:dd:3f:68:12:9b:
16:35:9f:31:f4:5c:58:67:2a:97:05:13:5f:50:40:
49:ca:4e:bf:5a:cc:28:5c:45:28:25:f1:bd:b3:5a:
3d:80:0e:d4:26:e9:07:27:e4:db:8b:6b:e1:9e:96:
92:a7:54:c1:81:13:fc:54:a7:2e:9f:02:18:e3:2a:
4d:dc:04:e6:69:ab:9f:f4:fc:00:79:df:83:21:db:
6f:1a:ef:a3:e4:a9:62:4c:a6:1c:6d:37:09:a6:37:
18:99:e4:58:d9:c5:94:60:81:a7:54:d7:19:af:97:
2f:d3:55:ea:23:26:8d:32:95:90:1a:25:ec:3e:23:
8d:03:6d:68:0e:f6:f5:1a:ed:1d:63:5f:17:16:02:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:00:5F:FB:34:D8:CE:AC:D7:25:42:85:82:24:EA:6A:A9:AF:A3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7qwAX_s02M6s1yVChYIk6mqpr6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:64:0c:a8:b5:46:97:d7:7c:74:0b:70:8e:09:84:ac:03:5e:
29:bc:e9:50:1e:b0:39:4e:22:02:2c:70:13:7c:f3:35:dc:4f:
6b:0c:14:ab:03:ce:9a:ee:95:ff:30:c9:d3:c8:6b:e1:00:61:
12:7d:94:af:66:8f:81:05:8d:bc:10:c0:93:60:6b:80:95:51:
50:1c:42:a1:c2:36:bf:0f:30:3f:0d:65:12:9b:c2:b4:e2:b5:
13:29:fc:63:59:7f:33:04:d7:40:30:15:13:26:6a:be:8d:c3:
62:cb:71:a6:05:81:9a:91:d4:59:cb:c3:a1:99:7e:23:99:96:
9c:73:6b:d9:14:53:e0:a9:25:8c:71:3d:cc:20:ea:69:22:af:
15:47:10:3d:f4:e8:be:67:34:fc:6c:06:68:3e:9f:8c:4c:00:
aa:43:d5:99:d1:c9:2d:1e:ea:bb:45:cf:26:da:28:ef:58:78:
72:27:88:76:69:1f:4a:6c:c8:d6:da:5a:3e:bf:43:de:02:e2:
23:ae:a8:bc:85:74:66:df:27:36:55:56:c3:c5:8b:27:03:41:
8a:53:de:33:24:0d:0c:6b:23:2b:96:dc:e3:f9:99:09:9a:01:
6d:f9:d4:82:39:bc:58:8f:4a:f4:38:98:3b:85:d0:2f:9c:43:
5c:ae:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:16 2025 by rpki-client