Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sqY66hHMEWBrlI3CgVteh3aPzVY.roa
File: sqY66hHMEWBrlI3CgVteh3aPzVY.roa (raw, json)
Hash identifier: PutftdCnTRTC8QZl8NT4MW82x2txO8j+I7Ee7m+3X/k=
Subject key identifier: B2:A6:3A:EA:11:CC:11:60:6B:94:8D:C2:81:5B:5E:87:76:8F:CD:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D05F33236DBF864BAEA6FDA7419E6D021
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sqY66hHMEWBrlI3CgVteh3aPzVY.roa
Signing time: Sun 14 Jan 2024 03:10:40 +0000
ROA not before: Sun 14 Jan 2024 03:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:f3:32:36:db:f8:64:ba:ea:6f:da:74:19:e6:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 14 03:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2a63aea11cc11606b948dc2815b5e87768fcd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:aa:3b:c4:88:35:36:cc:d3:e8:71:a6:10:
b3:15:63:ac:d2:39:a6:27:0e:c8:c9:52:37:16:10:
cb:29:0a:82:b4:e9:15:05:24:86:bb:59:d1:33:41:
4a:6c:73:77:e4:69:08:5b:0a:ad:87:9b:96:14:40:
25:4d:d5:ab:99:14:61:04:82:3e:cc:e7:e8:69:9a:
da:79:0f:eb:98:25:54:06:04:88:a0:32:cb:7a:7c:
8d:b5:17:bd:f6:99:db:92:ed:75:60:6b:62:63:70:
e6:a8:9f:7c:10:8e:61:ac:df:28:17:43:41:27:0f:
08:ee:3a:cf:9c:77:91:c0:34:2b:aa:9e:63:b5:4c:
3f:8a:9a:c7:9f:0f:ce:92:d4:f7:10:16:a3:a1:67:
b8:05:3e:8a:25:07:64:79:0d:34:12:7b:69:36:9d:
f7:3c:dc:e0:13:60:61:c9:98:f4:2a:3b:9e:76:37:
52:cd:31:7c:c6:8f:82:dd:7f:98:25:df:4f:6c:f5:
b8:0c:23:79:c7:81:12:ea:a3:fd:43:0e:ca:a8:b9:
3f:2f:c2:14:ff:fb:65:59:35:c3:12:ec:23:71:05:
b9:e5:66:e7:b0:3f:38:28:49:53:52:6b:2d:f9:26:
4f:e9:07:a0:e4:63:3a:0f:c0:b4:a3:cf:71:82:e8:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:3A:EA:11:CC:11:60:6B:94:8D:C2:81:5B:5E:87:76:8F:CD:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sqY66hHMEWBrlI3CgVteh3aPzVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:d0:fa:5f:eb:dd:b8:bf:a7:17:3c:ab:b1:4c:7f:97:df:19:
bf:45:0b:da:c5:98:aa:4c:59:31:69:55:cd:bd:e9:1f:10:ca:
08:cf:3f:c4:54:f3:d9:a2:e7:36:e1:4b:2c:6c:c7:f3:3a:39:
b7:7f:ef:76:51:0d:dd:c0:c5:e9:b2:5b:e0:3a:14:5c:7e:38:
5f:21:a5:ab:8c:70:84:60:94:f7:ef:d5:db:4a:6c:9e:06:48:
c9:0c:5b:42:c2:f8:5f:04:e9:0a:f8:6b:71:b9:d3:6a:92:9f:
dc:d7:b3:50:f7:98:ad:6d:26:bf:e5:34:7e:98:dc:4a:77:c5:
0e:c8:3c:cb:66:7d:d3:55:1a:17:8b:6f:1b:11:bb:ae:12:68:
d1:f3:be:ac:dd:57:78:c3:fa:f1:ba:31:f9:93:e9:22:6b:37:
2e:9d:68:bd:43:fd:4e:30:b1:6a:1c:3b:f8:be:bd:4d:49:96:
66:da:20:9d:41:ec:d5:f8:31:bf:a5:7a:ae:98:b6:52:23:e4:
c2:b7:d1:19:a2:26:1e:fa:4e:31:c9:74:fb:38:74:ec:48:62:
f7:f3:5e:e9:fb:2f:96:3a:db:2d:31:bc:20:99:88:69:41:2b:
5e:7f:c7:01:0f:30:dd:e1:de:1e:33:ba:e3:95:98:9a:1f:15:
d1:56:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:03 2025 by rpki-client