Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/eZG6FfZKzYZKVwF-kihLnK-Pf1c.roa
File: eZG6FfZKzYZKVwF-kihLnK-Pf1c.roa (raw, json)
Hash identifier: +E6RgyN28RN26z45Cg5HSvDPBufVHosuQtEWWLwnKfU=
Subject key identifier: 79:91:BA:15:F6:4A:CD:86:4A:57:01:7E:92:28:4B:9C:AF:8F:7F:57
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEF66F568F9CEC7B4DB175D7EBD0F94E6
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/eZG6FfZKzYZKVwF-kihLnK-Pf1c.roa
Signing time: Thu 18 Apr 2024 04:11:25 +0000
ROA not before: Thu 18 Apr 2024 04:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:66:f5:68:f9:ce:c7:b4:db:17:5d:7e:bd:0f:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 04:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7991ba15f64acd864a57017e92284b9caf8f7f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:dc:27:5e:2e:84:b3:57:c2:e0:16:35:fd:
95:4e:d3:41:0d:4b:95:5a:c7:88:d7:59:14:d7:c8:
59:71:2a:da:75:b4:14:34:10:0a:55:b3:e1:08:4e:
8f:99:cb:95:05:63:c2:37:37:ae:38:82:6f:f3:59:
7f:a2:11:9b:35:64:f5:85:77:0a:cd:32:98:1c:d8:
ef:e9:fc:5e:fc:8a:0e:56:fe:96:37:a9:33:80:ec:
a4:15:31:dd:a3:a9:44:f1:02:df:ba:88:7e:ee:06:
4e:11:7c:69:cc:ac:30:6f:4b:8e:cf:e7:85:79:1d:
f7:ba:0b:80:9a:dc:c6:40:b5:70:ed:9c:8c:10:df:
ee:01:9d:87:1f:98:7a:40:88:3a:30:20:25:55:0e:
13:de:80:80:0f:36:e3:56:b9:1e:01:db:c2:0f:04:
6e:e1:19:82:ff:b8:59:ff:76:4a:44:9a:9b:31:73:
90:7b:13:79:81:a8:c6:c5:f6:d1:00:0e:ff:fd:92:
d0:39:f9:58:48:09:a1:90:0b:09:d2:44:e5:89:43:
90:7e:a4:35:2c:14:0b:63:09:12:90:4b:6a:81:04:
2b:bd:df:a8:2d:6c:b5:d9:37:3a:ce:60:09:38:2d:
76:1b:1d:2f:69:c3:60:a9:a1:60:80:c8:59:e0:96:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:BA:15:F6:4A:CD:86:4A:57:01:7E:92:28:4B:9C:AF:8F:7F:57
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/eZG6FfZKzYZKVwF-kihLnK-Pf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:e7:2a:8a:c1:8a:85:24:6a:67:42:e4:3d:f3:59:79:42:95:
47:ba:74:c7:90:42:bb:97:6e:92:1f:94:0b:b4:18:ad:a7:86:
82:55:c8:7b:14:bc:d3:78:12:2f:e8:66:7a:1d:21:0c:ab:5d:
ab:de:8b:1e:86:5d:48:34:18:7f:2f:bb:62:2b:a2:b9:4e:5f:
b0:80:f9:a5:4d:ad:7a:a4:5e:db:64:b8:b1:b7:9d:1c:66:8f:
2d:69:43:b7:5b:ff:c0:e5:a4:7b:df:12:09:69:98:62:ef:5f:
41:f0:87:43:58:6e:d0:82:01:ed:8a:bb:ab:b2:71:a8:d8:a3:
ce:50:75:2c:88:c7:58:f3:57:c6:9b:c0:b8:34:59:54:22:db:
59:48:e7:55:77:f3:fd:f0:c6:c2:53:0f:a2:89:29:b3:06:28:
04:38:26:00:f0:ae:b5:8d:bc:0c:b2:b0:1a:87:2c:e7:7b:1d:
e6:24:43:c8:1c:4a:ba:76:10:e5:51:a9:92:81:30:53:d9:e9:
d4:9f:13:0c:8e:98:14:fa:7c:ba:14:a6:ec:59:76:a9:55:c5:
1f:b4:e2:71:99:c1:02:0e:9a:85:a4:3f:61:37:63:89:f9:0c:
14:2a:fc:a6:17:67:f4:fa:49:05:6c:42:39:45:03:d5:f0:00:
66:31:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org