Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/DfeLNgx0QVOQM4kzyiOIcSEHtt4.roa
File: DfeLNgx0QVOQM4kzyiOIcSEHtt4.roa (raw, json)
Hash identifier: ZWDD+Nrou3e7IJLSX/BQ0yt8NNfNlHVCEkoHZcazASs=
Subject key identifier: 0D:F7:8B:36:0C:74:41:53:90:33:89:33:CA:23:88:71:21:07:B6:DE
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEBF72360AD0B1FFF6AC94C2D6B99F0A6
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/DfeLNgx0QVOQM4kzyiOIcSEHtt4.roa
Signing time: Wed 17 Apr 2024 12:10:25 +0000
ROA not before: Wed 17 Apr 2024 12:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:f7:23:60:ad:0b:1f:ff:6a:c9:4c:2d:6b:99:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 12:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0df78b360c74415390338933ca2388712107b6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:93:a4:3f:c4:f6:57:7e:83:cc:a7:64:f8:
92:ad:8c:a0:f3:07:b7:93:87:59:97:07:b0:23:b8:
9e:6b:ff:c6:c2:a3:15:61:a3:d9:c6:49:3c:a5:57:
42:6c:bf:0f:47:ab:39:66:59:51:00:65:a3:0d:f2:
90:68:00:79:26:0c:af:f9:94:67:da:be:41:14:1a:
9d:40:f9:0f:38:3c:a6:e9:4e:00:da:1e:6f:79:a7:
a1:dd:6a:83:2b:c1:5e:7f:5b:8f:98:ad:75:05:37:
fe:8e:a4:ae:28:b0:30:b8:72:e9:cc:95:95:32:81:
60:55:94:ef:6e:8c:34:6e:3f:5c:15:3b:de:09:c1:
09:cd:65:bc:f8:40:62:48:8e:81:f4:36:9a:99:30:
ce:b2:be:6c:04:f8:e5:e9:f0:d1:25:ce:4d:56:c8:
b5:be:1d:19:fa:66:05:88:71:5a:73:81:88:e6:db:
a8:b4:81:47:b3:d1:16:c2:85:18:08:3a:e0:6e:1d:
aa:9a:98:42:70:46:27:3e:3b:55:42:c6:c1:cb:ff:
ad:14:bc:e9:f9:ab:72:bd:3a:6a:74:25:23:68:ab:
f9:1f:e9:38:93:a8:5d:d2:ef:2c:a8:35:d7:e2:ed:
ef:76:48:22:b8:28:d8:35:a2:eb:be:56:80:af:23:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:8B:36:0C:74:41:53:90:33:89:33:CA:23:88:71:21:07:B6:DE
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/DfeLNgx0QVOQM4kzyiOIcSEHtt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:f8:e1:76:c5:c1:eb:0a:40:7e:a8:78:07:06:19:c5:04:5d:
83:50:cc:18:aa:72:2b:fe:e2:70:0c:c0:c0:e2:c2:46:6a:cb:
48:5b:76:0f:87:bf:3f:c2:f1:51:9c:38:2e:59:df:8e:1e:53:
fb:6e:28:0d:f9:87:7c:0c:e0:47:1c:13:9c:34:bd:3c:0b:f9:
8b:f9:38:02:58:33:ac:dd:6a:d4:a0:fe:17:a9:3f:d7:87:52:
26:3c:3b:27:e6:fd:7f:9a:55:1d:2e:40:9b:4d:b5:81:8f:b7:
69:59:ce:5d:66:0b:8f:94:bd:dd:d9:1d:75:f2:19:78:71:35:
b1:eb:f5:b1:37:85:d6:a3:69:26:77:04:ce:30:a8:b2:4d:ad:
02:f8:72:98:64:7d:ed:2f:4a:08:0e:56:9f:73:c1:b6:a1:4b:
35:33:7c:9f:c6:b8:91:de:1d:42:7e:8c:9f:de:00:3b:c6:25:
6e:22:1a:83:ac:97:88:92:51:5d:4e:a5:85:09:8b:fc:95:fa:
e4:51:d1:84:ed:1a:e7:3f:97:97:2f:14:48:d9:2d:81:71:59:
b1:27:c6:7e:27:0b:77:65:e7:df:35:8b:b5:83:d5:f8:a7:9b:
17:52:15:8b:cd:6f:a1:55:82:c7:ac:b4:04:eb:1a:6a:8c:8c:
fb:75:73:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:22 2025 by rpki-client