Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sOsCXtHRVKJStin_U7GIw-RmyHI.roa
File: sOsCXtHRVKJStin_U7GIw-RmyHI.roa (raw, json)
Hash identifier: y3BjemuZYjk7qujNBKxyQotd0HVD7VyQ7XblfqwBQ1g=
Subject key identifier: B0:EB:02:5E:D1:D1:54:A2:52:B6:29:FF:53:B1:88:C3:E4:66:C8:72
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEAE650043712591E8595F05E25DA5421
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sOsCXtHRVKJStin_U7GIw-RmyHI.roa
Signing time: Wed 17 Apr 2024 07:12:26 +0000
ROA not before: Wed 17 Apr 2024 07:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:e6:50:04:37:12:59:1e:85:95:f0:5e:25:da:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 07:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0eb025ed1d154a252b629ff53b188c3e466c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:6b:ec:7f:8f:27:b7:e3:56:0f:3e:25:67:
a5:c8:12:7d:10:ee:ae:09:56:4b:7e:7d:dc:3b:4e:
c8:a8:d4:f5:b8:32:cd:1d:2e:2f:6d:c1:2e:e2:28:
57:6e:9c:6c:d0:a7:98:36:91:c4:69:75:c2:91:8d:
17:60:59:50:ec:4b:40:a8:01:b9:3b:aa:82:10:89:
36:b2:d3:10:bb:17:a0:58:42:36:29:ce:99:18:fc:
3d:3a:69:71:28:5a:da:31:e5:4e:8f:16:2b:1e:ab:
17:84:53:89:3d:39:1b:10:08:76:dd:d9:b2:ec:fc:
69:84:ae:4a:4a:e0:0a:77:37:ba:a4:88:94:4b:75:
31:58:1e:5b:4b:a3:d4:72:c6:9c:78:b6:e1:68:98:
52:4c:ce:2a:ca:2d:6b:3f:c5:c0:bd:65:e9:07:a7:
73:58:54:25:cd:df:3e:74:78:10:54:90:63:bf:b7:
d1:c7:a2:39:99:b8:a7:54:4e:23:db:35:3e:67:82:
f8:77:ca:5a:16:1f:65:58:f2:47:c5:87:c1:37:50:
8b:45:bc:ed:6d:9c:6f:d6:71:e5:0e:9a:05:60:ce:
53:22:5d:84:5a:13:39:4b:d4:1e:05:8a:4e:d2:2c:
38:e6:e5:b3:8d:88:08:69:01:a5:5e:1b:65:a0:29:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:02:5E:D1:D1:54:A2:52:B6:29:FF:53:B1:88:C3:E4:66:C8:72
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sOsCXtHRVKJStin_U7GIw-RmyHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1e:36:d5:83:5a:08:fd:4c:96:3e:0f:65:c9:a0:ad:37:d0:
1c:1c:ea:a2:e6:62:eb:42:3c:8d:4d:1f:37:c6:74:09:e6:b5:
27:ab:62:18:02:14:a5:4b:4f:f9:e2:13:5e:ec:fc:c5:29:b6:
d8:2d:72:7e:df:84:43:e7:33:f6:fd:f0:33:7e:ba:61:74:67:
b9:98:8a:14:c8:d4:11:8d:95:a9:c9:28:ea:7f:4f:46:3d:21:
90:90:ca:23:fa:75:42:35:4e:6a:0c:16:9f:bd:a4:b2:2c:ec:
44:65:a6:ad:48:28:c3:33:ec:e3:1a:bc:ea:b1:4a:09:ab:e0:
48:f9:7c:92:48:54:48:eb:0b:84:dc:fa:ca:dd:d1:de:f3:8c:
c6:6c:a7:67:55:10:34:3a:db:a2:ce:6a:bb:2b:df:48:0d:a4:
b7:77:ea:40:75:39:44:75:d5:c8:14:7b:03:30:6c:59:7a:8b:
99:33:59:03:85:59:ec:23:76:4a:5f:a1:10:5f:2b:0b:07:f1:
df:9b:02:e2:25:38:2c:5c:aa:e4:a7:24:74:45:88:c1:c6:32:
94:7e:e5:ac:3d:53:88:03:b7:77:b1:d5:0e:5c:f9:fd:94:3c:
61:35:12:6a:10:a6:a0:4b:27:ea:62:b3:96:18:b9:09:76:e4:
25:02:ee:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7q5lAENxJZHoWV8F4l2lQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjEzMmMxN2U1OThmMTFiNmExMGY0MmVmM2JjZTk2MWUx
OGU4ZWYwHhcNMjQwNDE3MDcxMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGViMDI1ZWQxZDE1NGEyNTJiNjI5ZmY1M2IxODhjM2U0NjZjODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhdr7H+PJ7fjVg8+JWelyBJ9EO6u
CVZLfn3cO07IqNT1uDLNHS4vbcEu4ihXbpxs0KeYNpHEaXXCkY0XYFlQ7EtAqAG5
O6qCEIk2stMQuxegWEI2Kc6ZGPw9OmlxKFraMeVOjxYrHqsXhFOJPTkbEAh23dmy
7PxphK5KSuAKdze6pIiUS3UxWB5bS6PUcsaceLbhaJhSTM4qyi1rP8XAvWXpB6dz
WFQlzd8+dHgQVJBjv7fRx6I5mbinVE4j2zU+Z4L4d8paFh9lWPJHxYfBN1CLRbzt
bZxv1nHlDpoFYM5TIl2EWhM5S9QeBYpO0iw45uWzjYgIaQGlXhtloCld2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLDrAl7R0VSiUrYp/1OxiMPkZshyMB8GA1UdIwQY
MBaAFECxMsF+WY8RtqEPQu87zpYeGOjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzIt
OGM4ZWJmNTg4OWRhLzEvc09zQ1h0SFJWS0pTdGluX1U3R0l3LVJteUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzItOGM4ZWJmNTg4OWRh
LzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIweNtWDWgj9TJY+D2XJ
oK030Bwc6qLmYutCPI1NHzfGdAnmtSerYhgCFKVLT/niE17s/MUpttgtcn7fhEPn
M/b98DN+umF0Z7mYihTI1BGNlanJKOp/T0Y9IZCQyiP6dUI1TmoMFp+9pLIs7ERl
pq1IKMMz7OMavOqxSgmr4Ej5fJJIVEjrC4Tc+srd0d7zjMZsp2dVEDQ626LOarsr
30gNpLd36kB1OUR11cgUewMwbFl6i5kzWQOFWewjdkpfoRBfKwsH8d+bAuIlOCxc
quSnJHRFiMHGMpR+5aw9U4gDt3ex1Q5c+f2UPGE1EmoQpqBLJ+pis5YYuQl25CUC
7kE=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:58 2025 by rpki-client