Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aQhzjBK0_NJ5NofvtLYli6_pnzI.roa
File: aQhzjBK0_NJ5NofvtLYli6_pnzI.roa (raw, json)
Hash identifier: qpFSx0tFWGGeuE4FDHYM+PPkwfcSeeFKCv2HhJWFJ9M=
Subject key identifier: 69:08:73:8C:12:B4:FC:D2:79:36:87:EF:B4:B6:25:8B:AF:E9:9F:32
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6E3A674BA5B4EF074C53643AAD2DF5FB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aQhzjBK0_NJ5NofvtLYli6_pnzI.roa
Signing time: Sun 24 Mar 2024 02:11:45 +0000
ROA not before: Sun 24 Mar 2024 02:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6e:3a:67:4b:a5:b4:ef:07:4c:53:64:3a:ad:2d:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 02:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6908738c12b4fcd2793687efb4b6258bafe99f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:49:5e:cf:aa:41:6d:ca:76:a3:69:81:6e:
27:27:9c:df:b0:97:b2:c5:7d:fd:d2:ba:e6:b1:4e:
cd:f0:8a:99:78:ce:cb:05:57:22:ac:33:9d:0d:e5:
a0:69:1e:2c:68:98:b3:cd:73:d2:d3:7d:ec:c6:40:
e8:59:4a:d0:0d:56:6c:84:3f:b4:94:32:17:af:82:
be:4e:2c:d4:14:23:40:d4:51:af:71:f7:7a:83:e3:
95:c1:9d:8d:b2:c0:cd:69:38:08:26:bf:71:eb:ce:
3e:8c:c6:f6:c1:b8:b4:83:d4:41:f1:7b:ef:40:0f:
c5:2b:dc:ab:26:d2:41:20:58:e6:84:52:a2:4e:33:
af:1b:23:a0:9c:00:03:c0:66:ca:83:02:17:f4:2b:
5e:a5:b4:37:f4:6d:95:6f:b8:fe:f9:2a:e2:a6:00:
4e:d0:3f:1e:a1:5f:24:3c:2e:18:89:8b:16:ca:5c:
37:3b:16:8d:f8:e6:d1:7c:7a:b2:f7:96:95:63:a7:
fe:3d:f9:d2:dd:ce:7f:94:a1:53:64:a2:a3:66:5c:
01:36:41:fb:17:34:a6:21:9f:39:fd:38:cd:b5:f8:
12:eb:56:ac:74:a2:45:bf:56:8b:ad:7b:db:f7:07:
a1:8f:8b:29:f3:a9:aa:8c:b8:2e:c8:f1:99:b2:b2:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:08:73:8C:12:B4:FC:D2:79:36:87:EF:B4:B6:25:8B:AF:E9:9F:32
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aQhzjBK0_NJ5NofvtLYli6_pnzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:56:f9:b1:9d:31:28:ca:15:39:32:c8:4d:5b:45:af:a3:8c:
59:15:c8:99:85:69:a5:14:92:b6:ff:32:a1:0b:36:59:81:8f:
23:65:96:c9:97:02:21:bb:d6:97:98:d4:8d:b7:a6:0c:1c:27:
66:4b:48:ba:c7:3b:ee:a9:98:bd:f5:07:f6:32:95:c4:a7:67:
ce:fc:4c:89:1c:56:3c:0f:fd:b3:09:4a:ce:81:e4:1b:4d:67:
db:6b:1e:e9:58:4c:42:1d:e3:fe:ff:a7:96:ee:b7:30:09:b0:
46:ac:8f:23:78:1a:d8:cf:c5:ea:09:0a:18:9b:ae:f0:fc:3e:
4c:36:b0:3e:16:8c:7b:67:72:57:a5:e5:81:7f:3a:38:68:79:
7d:bd:f1:6f:52:93:74:9d:85:29:33:32:96:49:55:b8:df:bd:
b1:a3:45:f4:0e:64:1d:fd:91:9d:ab:23:3e:7b:41:37:cd:a0:
2d:f1:73:73:b2:e7:23:46:04:b7:77:ce:87:06:c7:15:1a:8a:
dc:f2:2e:d8:48:7a:58:ff:ac:e8:20:01:a6:14:46:b8:b4:df:
00:7a:7c:23:d4:52:32:27:8b:88:1f:37:78:33:e5:87:a4:d9:
9c:be:58:15:a5:d0:5b:58:7d:54:cf:03:a0:5e:88:89:5c:8a:
9c:84:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:08 2025 by rpki-client