Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cquAMIivKn-VdSj0xqi1vboXrAg.roa
File: cquAMIivKn-VdSj0xqi1vboXrAg.roa (raw, json)
Hash identifier: wPBWrQCvZLBIX79Bp7Sz0h1dSU19dvOTcHpMV1/21Mw=
Subject key identifier: 72:AB:80:30:88:AF:2A:7F:95:75:28:F4:C6:A8:B5:BD:BA:17:AC:08
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D63B35F8B3A9B0C612929AA0DB6053D55
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cquAMIivKn-VdSj0xqi1vboXrAg.roa
Signing time: Thu 01 Feb 2024 08:05:16 +0000
ROA not before: Thu 01 Feb 2024 08:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:63b2:e648/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:b3:5f:8b:3a:9b:0c:61:29:29:aa:0d:b6:05:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 08:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ab803088af2a7f957528f4c6a8b5bdba17ac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1b:98:28:3a:af:ee:7e:d5:89:9b:2b:4d:ff:
c3:22:ac:6d:35:53:a6:d7:f9:4b:9b:cf:a6:84:3a:
18:28:d5:4f:69:34:16:e2:a7:04:0a:b9:b9:35:52:
9f:70:a0:52:89:66:97:65:c0:f1:51:8b:4e:43:f2:
b0:83:1e:f5:35:72:c6:75:8a:ca:85:6a:0d:c1:c5:
4b:67:34:10:09:ae:c9:78:d7:a3:94:56:da:b6:e1:
31:94:a2:7c:5b:e6:32:3c:44:b2:20:85:20:17:d1:
22:d7:1e:69:03:40:86:9d:06:42:aa:ef:c9:b9:1a:
f6:2a:06:ae:4b:cd:f7:5c:87:7f:86:f3:d8:a7:c6:
11:60:23:67:95:cc:ea:f8:f1:a2:ea:6f:df:aa:0d:
1c:15:92:95:63:3d:0a:b1:b0:44:77:9a:2d:b5:cc:
c8:7d:e2:a6:4d:a4:7a:5d:8d:5b:9e:08:49:37:9f:
2d:a4:4c:10:45:3f:cc:de:01:83:4a:68:08:a9:ac:
59:19:6a:01:dc:cf:5d:de:57:01:87:3a:eb:b2:04:
78:1e:c5:54:50:21:c8:57:ff:01:ba:57:8f:54:01:
f7:c2:e2:86:4e:1c:33:c0:17:96:3c:cc:dc:d6:bb:
6a:9a:08:ef:74:f3:51:e0:7e:12:9d:e8:86:bc:d2:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:80:30:88:AF:2A:7F:95:75:28:F4:C6:A8:B5:BD:BA:17:AC:08
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cquAMIivKn-VdSj0xqi1vboXrAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:12:07:24:88:d6:7a:4a:3f:77:23:88:38:58:15:a3:86:9b:
25:fc:0c:b8:21:98:3b:8e:c2:72:23:d7:65:32:5e:76:4d:a8:
75:cd:eb:c4:e4:2d:1b:17:d1:88:af:b5:69:fe:03:b4:14:da:
c9:2d:0e:be:01:81:47:c3:5f:14:4e:a0:d2:14:dc:b1:f7:07:
d8:36:c4:7b:8e:e0:d6:58:f9:79:af:df:1a:e8:db:c9:32:bd:
c5:83:82:b7:ab:7e:3a:c0:97:73:ae:1a:f9:b6:a8:53:c7:06:
4d:3b:ba:27:2b:4e:50:28:ee:78:58:61:6a:df:e1:d8:47:2c:
27:d5:4a:af:e0:2e:fb:31:01:61:bb:48:1a:bf:dc:2f:a0:2e:
62:6a:fa:8a:90:46:f6:15:a0:5f:be:cf:13:4b:15:ca:63:f6:
b1:5b:03:c0:5b:33:7b:8c:0c:98:cd:0c:dd:65:0f:a2:f2:c4:
6c:61:31:79:43:6c:ed:a7:b2:34:16:d4:44:07:9e:73:ab:09:
04:da:d3:15:18:f9:ca:f2:c2:49:59:8e:ee:e1:58:d1:18:c1:
87:b5:7c:02:f8:58:96:df:57:61:16:43:42:86:3d:63:ab:62:
9d:8a:01:f4:cc:d4:35:e4:35:7d:d0:b7:88:2c:f1:24:2f:d6:
2a:aa:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:12 2025 by rpki-client