Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/0Jh2fSV-hA0O21yh0TR2rlFevV8.roa
File: 0Jh2fSV-hA0O21yh0TR2rlFevV8.roa (raw, json)
Hash identifier: vHLTwO+twP523AQ46MogJLIbor7Isp+aygPYXf44AmY=
Subject key identifier: D0:98:76:7D:25:7E:84:0D:0E:DB:5C:A1:D1:34:76:AE:51:5E:BD:5F
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEAAF6102DCA806C36E4ADD2BACD3C623
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/0Jh2fSV-hA0O21yh0TR2rlFevV8.roa
Signing time: Wed 17 Apr 2024 06:12:25 +0000
ROA not before: Wed 17 Apr 2024 06:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:af:61:02:dc:a8:06:c3:6e:4a:dd:2b:ac:d3:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 06:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d098767d257e840d0edb5ca1d13476ae515ebd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:90:41:20:c8:7d:72:c0:5a:2c:44:7a:8e:
c2:a6:6f:82:51:e0:15:5c:d2:b5:86:54:aa:44:2f:
03:37:8b:df:aa:2e:60:be:0e:f1:9b:31:27:8f:eb:
26:b5:2e:41:c3:83:79:94:f7:f8:9c:2b:bb:7b:15:
0a:56:61:92:3b:88:26:3b:a1:d3:d7:2f:ce:72:60:
bf:21:f7:d0:6e:91:91:89:28:6c:e6:b4:d9:ae:c6:
ee:fc:d1:c2:a2:08:da:23:16:ae:f7:36:7a:fb:fb:
1b:74:43:d6:a2:5c:e9:0f:34:2d:9a:95:bb:df:49:
20:e8:ee:66:78:74:cd:83:16:69:2f:92:0a:6b:28:
b3:e3:b8:7a:08:e3:97:8e:af:51:ed:3d:89:49:a7:
8e:55:25:a2:67:1d:a3:82:2a:47:2c:2b:21:d2:4c:
68:9b:bd:ee:42:df:26:bc:07:8f:6f:99:1c:5b:82:
31:de:0e:08:67:c5:ff:6e:56:81:45:13:72:0d:2c:
e6:71:97:a7:88:88:ba:ad:59:8e:35:b2:02:01:38:
f7:8f:94:c1:fb:54:20:be:84:2d:ae:5d:ac:f9:b1:
76:c3:9b:44:e7:4e:cb:a2:6e:2c:d3:58:a4:3e:f2:
07:50:88:b0:41:0f:4a:05:c9:63:73:55:9b:40:f8:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:76:7D:25:7E:84:0D:0E:DB:5C:A1:D1:34:76:AE:51:5E:BD:5F
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/0Jh2fSV-hA0O21yh0TR2rlFevV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:9e:1f:30:19:3e:30:f4:67:30:5f:e4:7f:9f:fc:a0:da:9a:
3c:a1:3f:f4:c8:3e:f7:16:78:ed:50:3c:7f:0c:3c:2a:fe:64:
15:6b:27:86:6c:43:fd:2c:87:7a:ec:59:9c:85:5b:8a:e8:60:
9d:b0:c5:fa:cb:14:3f:8d:5a:28:49:1c:22:d1:57:39:3e:43:
3d:f0:54:9d:ca:c2:f4:c3:a2:e4:fd:7b:21:f8:e3:40:6f:7c:
ba:7b:3e:fa:81:96:e4:18:b3:65:4f:cc:85:aa:f0:d1:d0:56:
89:ab:e0:5a:6e:28:80:5c:ad:04:1a:1e:0f:ae:bf:f0:b6:0d:
ab:8f:d9:83:bc:a8:a7:b4:7c:f4:b1:0b:26:67:4f:7a:2b:c1:
18:b3:94:c7:0d:2c:be:f5:d1:e9:a2:21:e6:7a:96:37:5b:59:
e6:e7:24:55:1c:e1:4e:68:55:fa:75:50:fc:76:55:94:ad:68:
c8:b2:4e:f2:44:69:89:11:36:47:35:73:6b:4f:70:6e:40:6d:
ce:29:7b:5f:9b:2b:0f:15:4b:09:c9:56:ec:5e:cd:e4:92:42:
ba:fc:c2:30:53:92:0d:35:a9:56:21:b3:bf:39:fc:31:65:c5:
43:77:7f:e3:f0:f2:0b:68:f4:d2:3a:aa:49:f8:61:ae:30:12:
4e:60:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:24 2025 by rpki-client