Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_FRVfDTItM8EtkgqzJzrdslL6tg.roa
File: _FRVfDTItM8EtkgqzJzrdslL6tg.roa (raw, json)
Hash identifier: GTJG7mp2AX832K0dbO7L27iUUNiOOAIHumfkRRCXz4c=
Subject key identifier: FC:54:55:7C:34:C8:B4:CF:04:B6:48:2A:CC:9C:EB:76:C9:4B:EA:D8
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEE1B8A0BF9256B42B7F2F9853437F20E
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_FRVfDTItM8EtkgqzJzrdslL6tg.roa
Signing time: Wed 17 Apr 2024 22:09:25 +0000
ROA not before: Wed 17 Apr 2024 22:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:1b:8a:0b:f9:25:6b:42:b7:f2:f9:85:34:37:f2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 22:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc54557c34c8b4cf04b6482acc9ceb76c94bead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:20:64:19:fb:8d:1a:56:ff:fd:31:1e:b0:
6d:9a:6a:07:c6:2a:53:b6:cd:47:50:58:33:27:34:
36:a2:12:46:b0:e8:cf:9b:58:8b:1b:f7:fd:d7:ad:
02:36:66:e0:55:36:bf:13:a3:1a:04:8b:22:5b:5c:
e7:70:fd:ad:79:0f:35:83:2d:e3:42:f0:41:60:dc:
77:d9:8c:05:10:95:9a:dc:47:10:a3:2f:83:b6:3f:
11:0f:1a:cb:2c:c6:fd:3d:60:6e:97:1b:36:90:2f:
d2:0b:58:c0:93:3f:02:81:74:58:13:7d:b8:e8:bf:
72:66:20:64:b7:cf:0d:b0:47:3b:c4:09:cf:fd:6d:
02:1d:bf:27:8a:22:41:8a:d8:f3:f8:12:40:27:48:
5c:49:49:73:30:68:8f:f9:ea:39:1d:78:ed:74:03:
d6:40:af:89:2f:6a:5b:32:82:f7:3c:48:4f:17:e5:
a8:4a:20:d0:e4:b7:2c:81:b2:55:9f:a9:a9:55:1f:
86:3d:d3:19:68:a6:68:33:32:e3:50:9d:8c:ef:b1:
74:b0:9f:ea:85:d4:1c:75:e1:3d:90:e4:0c:93:f1:
51:7f:6c:bd:99:62:a4:68:d9:16:5f:4c:8b:45:dd:
d5:66:21:b1:8c:a4:c9:ac:d4:c2:6e:f7:30:7a:e5:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:55:7C:34:C8:B4:CF:04:B6:48:2A:CC:9C:EB:76:C9:4B:EA:D8
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_FRVfDTItM8EtkgqzJzrdslL6tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:c6:2c:ef:5d:45:c2:fd:36:28:9d:8f:33:ad:d1:33:c9:99:
60:65:e9:54:dd:e7:a4:08:9c:6f:f8:4c:31:79:89:c4:8c:5e:
e0:d8:41:36:a9:90:0d:c3:7b:d0:3d:24:ea:9f:2f:07:4a:c3:
e5:dc:7a:3b:f0:59:c1:09:50:7b:33:46:17:83:c9:a5:a4:fa:
ad:a2:33:f2:b4:8e:39:58:1a:05:b8:07:dc:ef:ac:94:95:52:
8a:8a:cd:4f:48:e2:5f:a8:79:d0:29:a1:d0:08:a8:0e:70:8d:
89:5b:2f:75:0f:18:6b:61:24:66:1e:b8:1c:c4:04:cb:7c:ad:
23:ab:62:0c:bc:e3:3d:07:c3:eb:4b:ab:86:32:b3:e6:9a:97:
da:8d:fc:bd:5f:04:d7:18:b5:df:d4:a9:3a:9d:b7:77:73:d6:
ad:4c:b8:9e:af:ae:f9:13:fe:c8:90:78:d0:ea:15:2b:fd:c2:
8e:95:fe:e2:71:bd:3b:72:23:68:0b:f9:cd:97:4d:b9:87:81:
3a:ab:01:4e:35:e9:b3:cd:7e:16:6d:10:92:81:cd:b7:e2:6b:
c6:cb:dc:d9:9b:18:56:3d:13:20:38:04:98:cb:eb:73:37:fe:
5d:76:56:bf:5c:cb:ed:25:c1:0e:15:ba:58:36:88:0c:7e:7d:
e7:c9:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:57 2025 by rpki-client