Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQmfuMkBbY1JSgTnRDyQiy_Wx54.roa
File: cQmfuMkBbY1JSgTnRDyQiy_Wx54.roa (raw, json)
Hash identifier: wX/4DIkdOO6oYUB9tWHU7fqgWvb/BXxR/stGQPcmIm4=
Subject key identifier: 71:09:9F:B8:C9:01:6D:8D:49:4A:04:E7:44:3C:90:8B:2F:D6:C7:9E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD49BC834F05951A03DF4A528D9C9AD9E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQmfuMkBbY1JSgTnRDyQiy_Wx54.roa
Signing time: Thu 04 Jan 2024 13:13:48 +0000
ROA not before: Thu 04 Jan 2024 13:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:9b:c8:34:f0:59:51:a0:3d:f4:a5:28:d9:c9:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 13:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71099fb8c9016d8d494a04e7443c908b2fd6c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:ae:dc:82:6b:0b:c0:de:71:13:c8:03:be:
ed:26:66:df:90:23:93:4a:cf:56:77:8c:f4:d0:7b:
11:1c:7a:44:81:ef:51:74:8a:37:1d:d4:4d:e1:92:
ed:95:ad:09:04:85:7e:a7:ce:94:3e:88:3c:85:57:
d7:b2:29:24:c8:0d:15:ca:3c:43:9e:19:fc:e8:be:
25:8a:37:84:13:37:5a:27:8f:2b:5b:bd:22:5a:89:
0b:f7:f0:99:f0:fb:54:7f:5d:68:78:ac:60:42:8a:
54:8d:be:cd:1c:0d:c6:5c:7a:d8:fd:6e:19:44:ae:
ec:4e:03:6c:f4:14:49:1c:6f:61:72:3e:40:8e:16:
46:ca:2c:19:e2:78:02:e9:56:d9:94:fd:d0:d9:01:
bd:c5:0c:85:fb:75:d4:3f:a4:b5:a2:ce:52:10:97:
99:7d:68:43:6c:9f:da:aa:e4:6c:c2:8e:ae:39:26:
37:e7:a7:06:6f:29:f2:e3:86:09:22:ff:db:de:b2:
b2:30:90:73:3b:4f:c7:59:68:8e:6f:0f:89:78:b8:
e3:ed:1c:aa:9e:ee:0a:5e:5f:0a:5a:41:8a:a5:69:
41:32:4d:ea:a3:5d:c0:e7:35:91:57:54:c2:40:6d:
9e:ff:60:8d:f4:9f:3a:30:e4:4a:19:04:71:6b:b5:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:9F:B8:C9:01:6D:8D:49:4A:04:E7:44:3C:90:8B:2F:D6:C7:9E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQmfuMkBbY1JSgTnRDyQiy_Wx54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:48:f8:77:10:5c:f7:fb:7c:9e:19:90:4d:70:53:46:ae:01:
bb:b4:5f:4c:51:5c:52:6b:f2:29:3b:5a:cd:46:a5:32:3a:1c:
5a:4a:31:0e:95:cf:4e:dd:92:a5:2e:cb:7b:5c:3b:9f:fc:3e:
0f:56:fe:f6:35:e2:94:a0:db:e4:75:be:e8:15:ca:b5:60:80:
25:1d:a1:89:0d:70:e6:f8:4c:51:30:38:70:3b:34:ca:bc:b0:
3c:a7:4c:76:8d:8d:0e:ff:25:ce:d5:ef:28:a9:a4:e3:70:d4:
ad:7c:14:3f:d5:ec:e0:af:f7:47:d9:2b:d0:a6:c7:f6:e0:08:
ff:84:ae:87:2e:03:61:92:59:f9:dd:08:c8:90:22:c5:8b:1e:
86:2d:8d:18:90:10:a9:31:ca:8a:8d:51:85:d4:48:bc:3f:d8:
e3:94:aa:ae:85:40:61:d4:14:aa:0f:e1:d2:92:41:b7:1b:c2:
c0:1d:be:3c:c4:63:08:27:10:d1:d1:05:a7:08:bc:e5:00:8b:
59:72:62:f1:31:f4:64:5f:50:6b:0a:3f:1f:0d:b8:02:11:23:
6c:98:77:c4:0a:17:cc:28:4a:2d:19:ae:fe:d6:65:06:07:f6:
32:40:95:c2:2c:65:3d:a3:59:0e:6e:d4:c0:ab:9a:84:42:1b:
84:ef:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:14 2025 by rpki-client