Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q-CsDL9ARpsKzhYpalXGMn7rrEY.roa
File: q-CsDL9ARpsKzhYpalXGMn7rrEY.roa (raw, json)
Hash identifier: FpCQUAHeY+vt/M3sJrWZzCM83ehnMGCmtWhrl+/oBJQ=
Subject key identifier: AB:E0:AC:0C:BF:40:46:9B:0A:CE:16:29:6A:55:C6:32:7E:EB:AC:46
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D261D020781C140ABB8E7E9C84DEC36B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q-CsDL9ARpsKzhYpalXGMn7rrEY.roa
Signing time: Sat 20 Jan 2024 09:04:11 +0000
ROA not before: Sat 20 Jan 2024 09:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:261c:fc09/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:1d:02:07:81:c1:40:ab:b8:e7:e9:c8:4d:ec:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 20 09:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe0ac0cbf40469b0ace16296a55c6327eebac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:45:57:75:f2:01:73:4f:d1:17:b1:1e:03:
8c:74:3f:3d:81:eb:9a:20:58:89:7d:30:8a:90:10:
77:8a:1e:fe:b4:23:04:85:f8:6c:5e:67:b6:88:cb:
9e:df:96:99:f3:45:4e:a8:e6:0d:4d:59:9d:f2:d7:
55:3c:0a:ae:b0:a9:af:0e:93:34:fd:6a:ea:1b:29:
63:c8:5c:fd:28:57:8b:e9:23:d6:06:65:54:27:22:
78:c3:23:6c:46:17:26:85:e1:50:5c:8a:5a:1e:d2:
dc:eb:9b:a8:c8:80:4f:65:7a:ba:bb:d9:00:97:fe:
9b:28:fb:da:de:41:f4:06:fa:70:02:96:6e:65:eb:
2c:0a:46:89:72:f6:4d:ee:e1:97:51:8b:76:e9:b7:
60:3d:0a:55:83:fb:41:ce:9e:f8:29:07:1c:aa:eb:
84:d5:04:4c:6f:a0:24:5a:2d:ea:fe:50:b0:b0:2f:
b1:19:37:fb:19:33:bb:77:5c:9a:ad:f9:c3:4d:14:
2c:47:ef:63:d9:47:46:13:3e:86:1c:83:3e:f1:5f:
8d:48:db:b0:7a:0f:3a:e9:19:57:1c:7b:26:1c:cd:
31:72:13:c5:79:99:1a:2c:df:e8:1f:98:5a:2b:ef:
3f:d4:e3:1d:c8:c4:4a:73:22:17:67:bc:f3:5c:3a:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:AC:0C:BF:40:46:9B:0A:CE:16:29:6A:55:C6:32:7E:EB:AC:46
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q-CsDL9ARpsKzhYpalXGMn7rrEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:25:09:ec:87:f1:b7:7f:52:67:c4:a0:40:0c:fc:44:a4:e3:
05:f3:da:7d:0a:49:9b:2a:24:21:c7:89:bc:64:d8:fc:36:4c:
a1:74:ed:c8:47:a0:9f:2d:6e:41:62:f8:1a:d4:47:df:91:9a:
16:1d:83:49:5f:16:69:61:4b:99:b4:9f:87:ab:af:73:53:d3:
94:93:36:e7:24:98:fa:53:7c:fa:3f:5b:0d:98:bf:b5:65:6a:
f0:60:37:fc:5e:8e:72:9c:1a:c0:8c:9f:44:56:77:73:58:9a:
3b:e7:a0:07:ce:45:06:13:d2:cc:96:a5:7e:1b:bc:e0:d6:5d:
4f:cf:e6:4b:e3:e0:59:c2:a1:31:7b:3c:0c:00:67:28:90:2c:
75:0e:9e:9b:3a:24:f3:a6:9a:22:17:cb:27:d7:70:d6:ee:59:
e5:6f:6b:4a:30:b9:96:fa:f3:26:da:09:b1:fe:b5:f1:cd:98:
b1:77:19:2b:b1:3f:d3:5e:4d:fc:28:73:61:25:6f:56:31:a2:
59:98:61:cf:a8:bf:f8:9e:f8:0a:c4:67:c3:40:80:5c:cd:d4:
21:0a:08:cf:01:c9:ad:e0:4e:51:20:e1:1d:52:4f:0b:68:60:
2c:a3:ce:1f:1c:79:51:b7:4d:03:c6:59:d4:b4:6d:c5:1d:7b:
35:1e:c6:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0mHQIHgcFAq7jn6chN7Da1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTIwMDkwNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmUwYWMwY2JmNDA0NjliMGFjZTE2Mjk2YTU1YzYzMjdlZWJhYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnZFV3XyAXNP0RexHgOMdD89geua
IFiJfTCKkBB3ih7+tCMEhfhsXme2iMue35aZ80VOqOYNTVmd8tdVPAqusKmvDpM0
/WrqGyljyFz9KFeL6SPWBmVUJyJ4wyNsRhcmheFQXIpaHtLc65uoyIBPZXq6u9kA
l/6bKPva3kH0BvpwApZuZessCkaJcvZN7uGXUYt26bdgPQpVg/tBzp74KQccquuE
1QRMb6AkWi3q/lCwsC+xGTf7GTO7d1yarfnDTRQsR+9j2UdGEz6GHIM+8V+NSNuw
eg866RlXHHsmHM0xchPFeZkaLN/oH5haK+8/1OMdyMRKcyIXZ7zzXDo//QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKvgrAy/QEabCs4WKWpVxjJ+66xGMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcS1Dc0RMOUFScHNLemhZcGFsWEdNbjdyckVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADElCeyH8bd/UmfEoEAM
/ESk4wXz2n0KSZsqJCHHibxk2Pw2TKF07chHoJ8tbkFi+BrUR9+RmhYdg0lfFmlh
S5m0n4err3NT05STNuckmPpTfPo/Ww2Yv7VlavBgN/xejnKcGsCMn0RWd3NYmjvn
oAfORQYT0syWpX4bvODWXU/P5kvj4FnCoTF7PAwAZyiQLHUOnps6JPOmmiIXyyfX
cNbuWeVva0owuZb68ybaCbH+tfHNmLF3GSuxP9NeTfwoc2Elb1YxolmYYc+ov/ie
+ArEZ8NAgFzN1CEKCM8Bya3gTlEg4R1STwtoYCyjzh8ceVG3TQPGWdS0bcUdezUe
xgo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:51 2025 by rpki-client