Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/I0cSfmMk94nQAx7AFtbdWBrdQsU.roa
File: I0cSfmMk94nQAx7AFtbdWBrdQsU.roa (raw, json)
Hash identifier: 9XUTLJ8S+DTx7XIUxxVs5NYOOsY/uMoktlT72SRf0Tg=
Subject key identifier: 23:47:12:7E:63:24:F7:89:D0:03:1E:C0:16:D6:DD:58:1A:DD:42:C5
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEE8C25EC1CA8B812C9B8684490D39290
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/I0cSfmMk94nQAx7AFtbdWBrdQsU.roa
Signing time: Thu 18 Apr 2024 00:12:25 +0000
ROA not before: Thu 18 Apr 2024 00:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:8c:25:ec:1c:a8:b8:12:c9:b8:68:44:90:d3:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 00:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2347127e6324f789d0031ec016d6dd581add42c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:88:4b:b3:5b:9a:85:60:ae:05:ed:07:0f:
6b:a9:26:90:0d:66:99:a4:bb:aa:9f:f0:98:07:3f:
82:57:2d:be:a3:66:7b:78:8c:96:0e:8d:f1:90:42:
4b:d2:ec:18:c4:5c:90:cc:9b:7f:fc:03:94:21:26:
d8:4b:21:a0:9c:85:ae:10:57:50:97:20:70:73:7b:
ac:87:f4:2d:7c:d2:b4:c3:ba:9b:d5:88:94:ff:ba:
b9:5b:46:ac:66:86:49:9a:f2:33:3c:d3:cf:97:dc:
49:30:1e:9a:69:92:46:7c:9e:ec:3e:5b:63:bf:bf:
e0:41:5a:85:7e:a9:f0:4f:08:6f:e2:e4:92:99:96:
ba:b9:8f:d4:e1:ef:9a:1b:ba:49:1c:92:6e:c6:1f:
2f:e4:4a:0d:ab:88:9b:19:87:eb:f2:95:20:6c:2b:
21:ea:87:51:74:a1:e9:b6:f1:34:d4:b7:f5:bf:c9:
53:b6:00:3c:7f:92:3d:0c:eb:12:10:8a:65:7a:57:
fc:3e:d9:16:f4:99:ab:d2:df:34:59:bf:31:af:94:
ca:4e:8d:5f:db:7b:e1:14:b3:ab:27:36:2b:d8:41:
b1:da:37:3b:82:18:a1:8d:40:5e:40:1c:55:85:2a:
76:9e:2f:b6:cc:1f:46:e2:be:c9:9e:4c:ff:e1:10:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:12:7E:63:24:F7:89:D0:03:1E:C0:16:D6:DD:58:1A:DD:42:C5
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/I0cSfmMk94nQAx7AFtbdWBrdQsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:e9:18:7d:7f:d6:04:34:6e:9a:76:36:d6:2b:71:42:db:d7:
04:9b:96:72:7b:e2:49:63:bd:1a:3c:1b:77:3c:68:2e:16:d3:
84:a0:b2:03:01:ac:77:33:e0:17:ff:c3:09:c7:ee:20:99:45:
0e:8d:83:89:01:99:79:a3:50:86:a7:f8:2f:c4:d3:fd:79:24:
1a:e7:de:13:c6:22:3c:ec:c6:ac:96:2a:b0:5e:b6:69:fa:ab:
a2:c8:c0:3b:f1:e5:93:68:94:b7:2c:02:0e:4c:b5:b4:16:77:
21:47:63:70:cc:35:c2:7f:a5:9b:39:5f:aa:0c:aa:10:7b:9f:
25:90:d3:2f:e5:16:4b:f9:42:db:8b:b8:87:b2:bf:36:62:1f:
55:30:22:ec:4a:26:0c:92:72:68:fe:ab:d9:1d:d8:e8:5c:1c:
9e:68:6e:40:c5:d7:83:3b:85:90:22:f6:38:d4:96:dc:cf:f2:
30:d9:aa:04:96:4f:55:7a:87:4d:79:bc:ba:06:e1:2a:f7:64:
a1:90:78:1b:be:8a:7e:3f:ab:a3:57:b1:49:f2:a0:ea:0f:ab:
36:36:67:e6:1b:e9:03:c1:5f:fc:85:c3:35:e6:4f:06:16:66:
d0:a4:98:b9:34:fc:ec:dd:06:04:af:6b:18:54:c0:75:a0:97:
0e:8a:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:04 2025 by rpki-client