Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q746fq8v-r8UfI-5cw_vcz3jLYI.roa
File: Q746fq8v-r8UfI-5cw_vcz3jLYI.roa (raw, json)
Hash identifier: fziP3lFGCorcBetwQVJaaz552+97NfbvFPpMe/NFjpU=
Subject key identifier: 43:BE:3A:7E:AF:2F:FA:BF:14:7C:8F:B9:73:0F:EF:73:3D:E3:2D:82
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA66E49E4F6E2E77B8C73FDE1BA4DD66E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q746fq8v-r8UfI-5cw_vcz3jLYI.roa
Signing time: Wed 14 Feb 2024 07:04:22 +0000
ROA not before: Wed 14 Feb 2024 07:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:a66e:3c4d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:6e:49:e4:f6:e2:e7:7b:8c:73:fd:e1:ba:4d:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 07:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43be3a7eaf2ffabf147c8fb9730fef733de32d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:76:9e:3b:c5:76:cb:22:43:fb:08:fb:a9:
ee:8b:be:15:80:48:70:1f:7b:1e:6f:fd:39:56:d6:
8c:42:ce:b2:b6:0b:05:17:bb:2b:39:52:1b:0d:f2:
07:51:3e:87:11:2c:78:44:22:c4:57:c0:62:3d:fe:
a3:cc:e0:6c:cf:99:14:9a:cd:3a:28:a3:1d:fc:30:
ec:8e:89:a7:2a:0f:00:8f:70:2c:3d:77:83:fa:9c:
58:f0:9d:fb:fb:bc:8a:ae:32:2f:c2:4b:bd:0a:5b:
31:ff:77:d3:e7:f5:f6:ea:17:3e:2d:3e:16:4d:75:
48:e8:c4:59:c6:d6:17:e9:da:fd:c5:76:d7:c7:5a:
30:e3:44:b8:d2:e9:b7:a4:8a:c7:e1:a9:8a:a3:44:
f4:c0:7f:5a:67:7e:fd:3c:bb:7e:1a:41:6b:20:34:
7d:45:bf:ed:86:b5:79:fc:9a:62:59:34:54:2a:de:
95:57:6d:03:c0:0e:1e:c3:f2:3c:b0:59:b8:83:de:
0f:13:04:45:11:f7:f9:a5:86:f8:38:a5:0d:59:70:
b2:4b:c5:78:a4:8a:5f:8f:70:cd:2e:1f:6c:b3:05:
d4:39:85:46:e6:d2:ff:77:ca:27:94:bf:e8:7e:7d:
de:5d:86:0d:30:2d:28:9f:a7:bd:4c:08:4f:3b:d6:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:3A:7E:AF:2F:FA:BF:14:7C:8F:B9:73:0F:EF:73:3D:E3:2D:82
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q746fq8v-r8UfI-5cw_vcz3jLYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:7b:2a:5c:e6:85:f4:1d:7c:0b:ec:64:8c:b6:7b:eb:aa:d5:
7c:e4:a7:c2:ce:c5:ab:50:e2:53:ba:a0:12:78:79:bc:d1:f8:
94:76:f3:48:4f:b6:1d:f8:03:68:41:37:e9:e6:83:59:71:38:
a9:ae:dd:93:6f:fd:a5:f5:1f:0d:7c:4e:74:26:67:53:9e:48:
da:bb:87:90:9c:f4:39:90:93:4b:51:df:95:d7:82:77:3f:28:
4b:cf:38:81:dc:12:14:a9:96:5a:a5:4c:5e:d4:b0:e1:59:bf:
17:90:b5:c1:13:f0:fa:24:97:17:6f:3d:9d:29:0f:44:d8:59:
99:8d:77:15:61:5b:6a:13:59:6f:a7:b4:f1:49:d3:c9:28:d5:
d6:f0:b5:d2:74:d1:20:92:6b:db:93:f6:cf:38:34:ad:2d:54:
eb:ba:16:12:f3:17:bb:92:20:8e:a0:a1:4e:06:bc:47:7e:e4:
e7:5a:1d:c4:28:08:44:22:ef:ed:16:3f:58:49:4f:20:05:3e:
23:cb:c9:56:90:8d:bb:62:04:89:71:b6:99:ae:1f:6a:19:67:
96:b3:de:8f:f4:ae:0c:11:f5:b3:83:1e:31:1a:6d:2b:c2:5d:
2c:2d:58:4f:36:3d:7e:b6:32:b6:97:dc:a4:ca:c2:61:84:7f:
b1:6e:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:35 2025 by rpki-client