Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FQZtUbvssURMwIQGCw8uEHzZd4U.roa
File: FQZtUbvssURMwIQGCw8uEHzZd4U.roa (raw, json)
Hash identifier: XllI/LkiyQcT08n+g0R7ARjn/yEHLUa5i+tCs/JLw9I=
Subject key identifier: 15:06:6D:51:BB:EC:B1:44:4C:C0:84:06:0B:0F:2E:10:7C:D9:77:85
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEB83C86A9E78C93807F044EF42B91E1E
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FQZtUbvssURMwIQGCw8uEHzZd4U.roa
Signing time: Wed 17 Apr 2024 10:04:25 +0000
ROA not before: Wed 17 Apr 2024 10:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:eb83:9181/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:83:c8:6a:9e:78:c9:38:07:f0:44:ef:42:b9:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 10:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15066d51bbecb1444cc084060b0f2e107cd97785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:24:91:b4:d9:53:b2:35:2b:6f:d7:98:be:
d9:0c:4f:53:0f:86:01:c9:dc:4f:73:23:7f:0c:63:
63:1b:3d:e1:fa:ab:70:53:bd:ce:ae:c5:6a:52:d9:
85:19:1d:2c:54:37:bb:a6:38:56:9d:04:58:4b:55:
8f:b9:65:15:37:59:57:bb:6f:d6:be:f1:a0:8f:c9:
d4:f3:1a:38:cc:8d:1c:0f:5d:86:43:03:b2:b3:42:
6a:f7:de:f9:5f:97:89:d6:a8:78:ac:cc:98:d2:ac:
57:7a:00:aa:32:ff:1b:ad:ee:46:4f:70:9b:1a:b8:
4c:00:76:8c:4b:13:bb:57:1b:7c:33:7f:09:19:a6:
90:b6:10:df:25:c2:8c:b7:7d:7a:96:42:3a:90:1e:
ad:f8:49:f4:cf:5b:b8:45:9d:30:f5:79:ab:8d:28:
2c:59:80:73:6c:95:02:48:a6:b4:87:df:8e:56:cd:
14:31:22:78:9d:6d:7e:9f:04:1f:be:8d:39:0e:5f:
41:37:a7:91:d6:78:37:d9:bb:05:e2:f7:31:14:c2:
c7:15:a6:41:67:0e:59:df:f4:81:f6:8a:19:83:28:
db:e9:01:6a:0a:4e:e0:a8:50:2f:24:0d:73:72:01:
26:09:b9:39:d0:73:5b:b1:53:28:be:ef:b8:c5:1e:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:6D:51:BB:EC:B1:44:4C:C0:84:06:0B:0F:2E:10:7C:D9:77:85
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/FQZtUbvssURMwIQGCw8uEHzZd4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:04:32:ff:85:2a:ea:7f:f8:48:03:ba:70:c2:5e:1e:2f:b6:
32:88:e1:90:6d:ed:25:79:66:24:f2:9b:b3:8c:21:8b:5c:d7:
14:8b:45:a3:df:cb:f0:a7:e7:f4:1b:54:ae:19:8e:67:9b:6b:
b7:cb:dc:11:7d:6f:8a:9f:6d:fd:7e:0d:53:f5:b5:6f:32:32:
ed:b9:95:fc:1d:ba:fc:9a:52:eb:78:cd:f4:ea:72:d9:2f:c4:
53:1d:18:1a:2e:53:e9:e8:5a:ef:1b:7b:d5:6f:ba:f5:40:55:
5a:e2:d9:4b:5d:31:f8:77:19:fd:c0:61:b6:29:11:4a:5a:ce:
d8:31:8a:db:e3:9b:b9:98:89:31:73:65:2c:0d:67:22:3c:f0:
00:56:65:15:60:50:c6:95:bb:1c:4b:9a:47:81:ae:2e:1e:1c:
b9:f4:7e:d8:ea:de:16:0c:51:95:65:48:49:9b:f1:33:99:88:
ce:17:3d:ab:56:da:46:fc:29:f2:fd:cf:69:51:38:f1:e8:88:
bb:20:aa:9f:22:14:3b:a8:4d:05:73:aa:cf:8a:3b:7a:e1:d5:
b6:f3:cf:f0:b6:d1:ce:73:d7:81:2f:2e:43:97:fd:b8:ea:70:
3c:99:d5:ee:6c:c0:62:95:c9:dc:9b:f6:2c:56:0a:99:23:e7:
57:5d:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org