Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/j5YCCNzMNBvtd9Knq7zw8FFBaoc.roa
File: j5YCCNzMNBvtd9Knq7zw8FFBaoc.roa (raw, json)
Hash identifier: dDXi0xQB/RUWSw3xUWZkaUrTzTr+klNVSz28/+CDolU=
Subject key identifier: 8F:96:02:08:DC:CC:34:1B:ED:77:D2:A7:AB:BC:F0:F0:51:41:6A:87
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEA4099943DB7C53EE7FA3774BBF64D43
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/j5YCCNzMNBvtd9Knq7zw8FFBaoc.roa
Signing time: Wed 17 Apr 2024 04:11:25 +0000
ROA not before: Wed 17 Apr 2024 04:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:40:99:94:3d:b7:c5:3e:e7:fa:37:74:bb:f6:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 04:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f960208dccc341bed77d2a7abbcf0f051416a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:29:47:7b:4a:13:d7:d0:e3:08:9e:3d:ad:
68:7c:3f:f0:7d:aa:f0:81:44:a0:a9:a2:ab:0f:4b:
80:32:7c:e5:01:b0:b4:62:2a:6b:12:f2:9c:fc:f1:
d1:23:7a:61:6d:38:01:a7:0f:6a:e2:4e:bf:c2:6c:
da:d5:6f:14:f6:5e:9c:6e:7b:71:e6:f9:3b:5a:63:
ba:60:93:d5:5c:31:36:3d:76:4b:a9:90:3b:9c:95:
52:c9:62:2b:34:e7:c7:30:78:9e:26:9e:78:e2:4e:
1a:25:96:33:a1:89:38:cf:f2:4d:58:fc:3b:b4:97:
1a:5d:99:1b:c2:14:44:a5:85:f6:53:44:77:e0:2e:
f6:7d:76:31:b4:46:5b:6a:68:55:cd:5f:b2:11:d2:
59:f2:81:03:6a:fb:f7:95:dc:fe:95:55:c6:49:87:
02:42:0a:99:98:e5:f1:16:5d:cf:fb:43:a3:0d:b9:
22:ba:7f:64:82:3d:b2:88:9e:58:3e:67:32:d5:af:
b8:70:d9:73:c4:ac:29:49:e9:a7:41:ea:32:6c:72:
a5:4f:86:60:66:ef:e7:e8:13:de:63:95:8e:e0:fa:
57:6d:a1:20:04:e7:29:84:d2:dd:ef:dd:74:ba:82:
f6:b6:c1:10:88:04:95:a1:b3:8a:1a:b3:97:6a:ab:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:96:02:08:DC:CC:34:1B:ED:77:D2:A7:AB:BC:F0:F0:51:41:6A:87
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/j5YCCNzMNBvtd9Knq7zw8FFBaoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:98:c7:11:e5:16:e2:f6:8e:08:c6:b7:c6:ad:73:ab:81:24:
15:3d:55:62:09:e0:f1:83:f5:a4:fa:4e:1d:c3:f0:b3:30:4f:
28:f9:e5:fb:4a:52:2e:4e:d2:e3:00:d9:b4:34:da:87:13:fb:
c6:13:63:19:c0:5f:09:ad:58:de:91:49:97:ee:54:72:ba:c6:
65:f1:ce:ba:7a:f5:53:d4:c4:20:95:89:ad:95:96:01:2e:d6:
80:2a:39:b4:91:ea:20:2a:18:3b:08:3c:36:ac:98:2c:dc:0f:
5e:35:97:e3:7e:fe:aa:83:f3:59:f9:85:fc:99:e1:3d:8c:bf:
a1:34:04:4a:b8:5b:bc:ea:a3:80:02:69:9e:b9:da:f9:14:b3:
3e:c6:f0:85:65:30:ae:19:d1:05:ef:a8:54:b6:27:8e:a8:dd:
d2:09:6a:26:70:93:c9:95:c9:c8:f3:75:b3:c5:23:2c:7d:2c:
12:83:48:5d:8d:3b:83:3c:aa:51:fe:87:5f:60:5d:cf:a2:ea:
04:ec:e8:b1:7b:e0:7a:b8:78:76:fe:4f:27:ee:cf:0a:7e:8b:
20:ee:a9:4c:1b:8f:cb:3e:cf:48:60:97:26:bf:9f:35:86:0b:
05:86:c2:9c:0e:d2:3b:5c:5d:a8:7b:a0:46:49:f4:94:93:cb:
62:cb:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:18 2025 by rpki-client