Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/PPmPvCnCQokxEAmQWb0fdySl1CA.roa
File: PPmPvCnCQokxEAmQWb0fdySl1CA.roa (raw, json)
Hash identifier: pZolVMEHr7rw5qwIZl8uqfr9v1klCYS3gCZ5ew6RRgk=
Subject key identifier: 3C:F9:8F:BC:29:C2:42:89:31:10:09:90:59:BD:1F:77:24:A5:D4:20
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EE99DA2538CC2356B1794C1312325BBBB
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/PPmPvCnCQokxEAmQWb0fdySl1CA.roa
Signing time: Wed 17 Apr 2024 01:13:25 +0000
ROA not before: Wed 17 Apr 2024 01:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e9:9d:a2:53:8c:c2:35:6b:17:94:c1:31:23:25:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 01:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf98fbc29c242893110099059bd1f7724a5d420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:bb:b0:9e:b3:59:9f:d6:2b:58:93:99:08:
cc:23:b3:af:d4:ee:cf:5e:3d:a9:30:6b:59:64:bb:
49:f3:90:16:cf:d8:90:1e:ff:2b:51:34:d9:fd:dd:
0b:10:03:db:04:21:4a:55:76:19:3b:f6:3b:00:97:
92:b0:d6:aa:1d:f5:1d:f2:55:8e:b4:12:a3:50:e3:
98:f0:d6:93:35:66:61:ee:18:b5:21:25:95:85:53:
b4:4c:97:e0:47:68:aa:a3:ca:01:79:d2:fb:af:8f:
be:e0:ed:18:63:a7:96:ff:e7:b3:cb:b5:d5:3c:0a:
08:73:2d:7c:2b:1d:bd:f7:03:e1:19:97:07:2e:a9:
b9:0e:dd:b7:1a:32:ae:56:9d:97:05:49:29:27:df:
fe:54:0e:6d:34:f2:fb:5b:01:5e:1e:51:8e:9a:3a:
22:11:e0:2c:95:06:df:85:60:30:2e:58:f7:46:60:
34:e2:59:1c:8e:81:36:e2:b9:ab:f6:85:73:33:07:
c2:c6:75:91:08:64:83:24:f8:7f:86:d8:ae:c8:d1:
dd:20:1b:e5:24:86:30:15:1f:27:39:1f:b5:20:66:
b8:a6:28:fd:19:7b:59:d6:b4:db:7e:92:fb:5d:bd:
df:93:a6:7d:dc:47:b3:a7:86:26:95:eb:81:0e:46:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:8F:BC:29:C2:42:89:31:10:09:90:59:BD:1F:77:24:A5:D4:20
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/PPmPvCnCQokxEAmQWb0fdySl1CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:e5:e1:1d:15:b4:00:95:ab:9a:96:26:f9:00:12:94:3e:5f:
91:58:7d:0b:f1:21:ba:e5:39:1c:4c:4a:10:5f:f0:b8:76:11:
32:18:16:d1:35:76:f2:3c:be:c4:f6:cd:97:bb:ec:02:a1:98:
d0:d8:8a:b0:ca:6d:b5:fc:25:84:57:b5:4a:25:87:8f:0d:d1:
6f:f4:1b:e0:09:00:99:4c:cc:f1:80:b7:8e:8c:ca:3a:7e:1c:
77:b9:d9:a1:e7:38:8a:67:58:5d:fe:61:bd:7b:c8:cd:fd:b4:
2e:72:c2:d4:a9:fe:c9:b7:f3:b9:1b:03:aa:b9:3c:bb:2f:b0:
99:18:63:4d:1e:16:c1:df:11:f1:19:5d:b9:cf:00:1d:ff:96:
84:a4:66:56:ea:35:10:36:53:84:48:91:d3:06:48:d4:9e:5c:
a8:07:4e:75:24:fc:6b:cd:1c:db:b7:96:4d:18:cb:64:02:2a:
ef:2e:2f:52:eb:93:e8:00:83:a3:a9:6a:1e:d4:ca:3a:55:62:
df:ca:52:fa:58:5b:97:81:0e:66:a4:27:4c:cd:81:5c:40:23:
cd:84:02:99:d8:72:8e:60:35:1f:2a:f1:35:c9:fe:16:18:85:
fc:53:f7:c9:33:b2:5c:fe:44:ec:af:f3:d8:ef:d9:30:0c:0e:
bb:73:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:44 2025 by rpki-client