Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q-45YK63jhQsHhravr9kOv7LftE.roa
File: Q-45YK63jhQsHhravr9kOv7LftE.roa (raw, json)
Hash identifier: RvwjQjVPN0KE0dJx3TcTETOmqSimXx4WFe4fhfBEPuk=
Subject key identifier: 43:EE:39:60:AE:B7:8E:14:2C:1E:1A:DA:BE:BF:64:3A:FE:CB:7E:D1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3DF1DECD175CBC8AEAE8CE80026D4833
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q-45YK63jhQsHhravr9kOv7LftE.roa
Signing time: Thu 14 Mar 2024 17:10:45 +0000
ROA not before: Thu 14 Mar 2024 17:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:f1:de:cd:17:5c:bc:8a:ea:e8:ce:80:02:6d:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 17:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43ee3960aeb78e142c1e1adabebf643afecb7ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:a3:d2:01:9b:fb:ea:1c:95:c7:d9:b1:c6:
f8:30:e3:ab:c3:d1:65:7a:92:2a:5a:8a:5e:08:76:
f6:46:ed:ca:17:6b:fb:98:7f:a2:ff:bc:e0:bf:b5:
9c:49:6f:8a:a2:9c:aa:1a:c5:e7:85:03:cc:ff:f6:
f3:24:ba:4f:26:ed:1d:69:d9:e2:a9:e5:e2:b0:e4:
81:6a:b3:ad:00:6a:22:ee:a0:e1:d8:75:55:0e:f7:
e2:f0:35:d2:7d:16:68:db:a3:4c:d0:0c:ae:26:ae:
ab:dd:78:63:eb:fc:74:fb:82:1a:e2:3d:15:a6:a5:
8f:e2:70:0f:c5:5b:9d:c1:62:3b:df:ef:47:c4:82:
56:af:5b:e6:25:7b:0d:7c:85:10:b6:17:78:fd:72:
82:7e:c2:f1:96:b9:98:0f:f8:a0:f3:bb:7b:15:a9:
c0:c1:98:2a:be:21:7d:ed:cb:d9:48:bb:93:b7:08:
69:ab:4c:08:9c:0e:2b:45:76:bc:da:92:84:74:13:
c2:a8:24:e0:33:b1:c0:90:84:36:9d:d4:14:6a:46:
e6:aa:23:a5:24:8e:9b:26:67:1f:ea:dc:d5:a1:ac:
e9:22:53:9e:a2:f6:d9:5c:5b:19:74:87:56:05:77:
38:52:48:39:76:48:5a:38:d5:94:c4:a5:13:99:b7:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:39:60:AE:B7:8E:14:2C:1E:1A:DA:BE:BF:64:3A:FE:CB:7E:D1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q-45YK63jhQsHhravr9kOv7LftE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:31:f9:ec:b8:1d:e3:d8:e1:3b:97:d0:71:e6:e9:32:6f:95:
eb:90:76:60:80:22:4a:94:26:e6:09:71:cc:ad:3c:20:0f:78:
4d:53:a4:63:7a:a7:95:25:d1:de:26:d1:d5:fe:cb:49:3b:ac:
1c:3c:4e:d3:62:2f:00:ba:4d:17:9e:37:c8:ab:10:bb:c9:fb:
8f:77:a7:d4:de:12:b3:3f:c9:d5:a9:76:84:85:d0:0a:09:26:
33:8b:3d:df:cc:50:f5:ee:cf:3e:9e:51:7a:f2:b2:a7:20:8b:
1e:2d:11:e7:93:a4:e2:d5:b3:75:b0:d5:bf:92:e7:dc:d1:8f:
94:3d:f2:05:b7:14:d7:82:b3:f6:34:b5:83:b5:a4:d2:c2:36:
28:79:58:c9:06:48:6b:fb:b8:db:70:0f:c1:fa:2a:f0:ae:bf:
0b:6a:ac:38:93:41:0b:af:04:f6:00:51:76:1e:d5:46:46:2e:
51:ad:58:95:46:17:2f:ff:c0:d9:96:4a:72:9a:74:da:af:03:
a3:fe:44:e1:0d:59:f5:ea:26:08:6f:35:6b:24:2c:17:dc:6b:
ef:08:99:b0:c4:82:83:66:04:0b:08:e1:1d:e0:06:00:94:dc:
55:97:e0:8d:4a:e1:d6:37:e9:af:53:95:1c:8a:43:53:f0:98:
45:13:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:54 2025 by rpki-client