Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QKK-jOKFwArWdhRVKtkNrogOAho.roa
File: QKK-jOKFwArWdhRVKtkNrogOAho.roa (raw, json)
Hash identifier: azHHKphBNmxf8kCm5VUN2Zmxu3CrH5oNWkRIZZRAqPE=
Subject key identifier: 40:A2:BE:8C:E2:85:C0:0A:D6:76:14:55:2A:D9:0D:AE:88:0E:02:1A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D89AE42B2E2ED8ACB898574A8B2289972
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QKK-jOKFwArWdhRVKtkNrogOAho.roa
Signing time: Thu 08 Feb 2024 17:05:15 +0000
ROA not before: Thu 08 Feb 2024 17:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:89ad:5858/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:ae:42:b2:e2:ed:8a:cb:89:85:74:a8:b2:28:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 17:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a2be8ce285c00ad67614552ad90dae880e021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:35:42:a9:16:0b:0e:36:11:0c:b0:c0:14:16:
8f:dc:84:5f:15:cc:b7:b8:66:7a:7f:31:7e:70:43:
ff:6c:4b:4b:c2:a2:43:d8:6a:e2:cd:62:05:6b:24:
c3:15:06:c2:35:27:0a:73:0b:49:94:49:0e:9c:77:
6e:53:be:14:30:a4:47:b0:9d:3b:6c:ec:a5:1d:f2:
72:96:85:24:12:be:41:90:6a:3f:19:2d:de:27:2a:
48:74:10:a8:61:48:f9:c5:c8:7a:3d:ff:8e:d3:50:
66:03:c5:e9:9e:6d:e6:03:48:57:83:01:60:c1:34:
99:85:bf:6b:0f:77:fa:57:d3:bd:76:8d:d5:34:27:
22:3f:03:b3:b3:a9:be:77:b8:e8:c8:77:76:4c:d9:
70:d8:60:c4:64:e9:22:de:c4:c8:72:58:e9:3b:ec:
93:93:25:2c:5d:25:b8:32:73:c4:bd:6b:20:f1:da:
f4:19:19:b4:e5:be:93:73:3a:63:b9:97:fb:6e:73:
36:d1:55:44:aa:f1:a3:ea:11:f1:b0:f7:ec:b8:c5:
09:0c:3d:71:83:ae:4e:86:6a:9d:f1:1e:75:3a:9a:
5d:73:e1:5c:51:00:12:6e:6b:6f:28:2c:86:00:7b:
d7:da:50:96:ba:da:58:cd:4b:21:a1:4e:44:59:bb:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:BE:8C:E2:85:C0:0A:D6:76:14:55:2A:D9:0D:AE:88:0E:02:1A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QKK-jOKFwArWdhRVKtkNrogOAho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:bd:76:51:d1:fb:61:d0:df:12:10:5f:a0:f5:62:41:79:02:
26:96:e9:be:13:66:38:d5:b9:a5:4c:27:57:cb:a6:5e:06:44:
7f:b7:54:ca:46:f2:5e:d7:88:47:9b:b3:c9:78:01:7d:ae:24:
0b:1d:51:fc:1f:7d:2e:1c:e7:4c:36:ef:6f:da:40:ef:5f:a1:
7f:84:33:da:60:c9:3c:04:c4:ba:6c:49:81:b3:f0:df:03:e7:
3c:e0:41:cf:c3:ff:6a:96:8d:36:2e:97:ca:07:9e:78:dc:a5:
a6:98:73:b4:f7:ad:4a:67:e3:65:65:56:9f:b5:1f:e3:c6:12:
91:94:8f:2e:3f:30:9d:26:b1:fe:20:3a:d7:95:eb:c9:27:5d:
61:02:8a:2f:e4:93:43:e8:de:2a:84:cf:9b:ab:76:35:f5:ba:
ad:e5:95:24:02:0d:38:60:c4:44:69:32:1a:e0:8f:12:bb:d9:
4d:02:b1:2c:21:0f:bb:bc:69:17:72:aa:3b:37:d3:a7:73:8b:
b9:f6:fe:ef:eb:1d:34:5b:94:26:d7:5c:22:c5:c8:ca:11:e1:
96:15:1c:b7:27:1f:d1:e1:66:e2:1f:15:12:db:2b:94:1d:8f:
cb:19:3e:59:ae:7c:48:4b:2a:ac:37:58:ed:12:fd:49:8f:dd:
d2:3c:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:58 2025 by rpki-client