Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uByRQYC8XgR7aoDuBkq8Eu4bViE.roa
File: uByRQYC8XgR7aoDuBkq8Eu4bViE.roa (raw, json)
Hash identifier: 6HtuWKt3wP46UHzdo83/p9SCp2uJhKEKta7HQQfpjCo=
Subject key identifier: B8:1C:91:41:80:BC:5E:04:7B:6A:80:EE:06:4A:BC:12:EE:1B:56:21
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF29E04DB5627DF603020413BCEAFCB65
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uByRQYC8XgR7aoDuBkq8Eu4bViE.roa
Signing time: Thu 18 Apr 2024 19:10:25 +0000
ROA not before: Thu 18 Apr 2024 19:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:f1f3:8b1f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:9e:04:db:56:27:df:60:30:20:41:3b:ce:af:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 19:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81c914180bc5e047b6a80ee064abc12ee1b5621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:89:78:37:35:f9:92:e9:c5:0e:3b:55:e9:
81:51:0d:c0:69:b2:08:d9:62:06:c7:92:87:05:0a:
58:a1:b8:51:c2:b1:7a:52:bb:8a:d2:1c:51:21:0d:
2c:20:36:0e:8c:97:6a:f3:63:34:ef:f1:77:e8:f8:
0d:51:fb:08:42:cd:16:e0:57:7c:b3:65:f3:7d:8d:
a4:2e:e5:f0:12:b1:b3:36:c2:6f:e0:cd:7b:c4:45:
6a:b9:64:95:9c:ab:d2:2f:1c:f7:a7:15:53:27:38:
63:c6:aa:60:ae:e5:3a:90:1f:40:18:a9:ef:a8:d3:
a5:f0:8d:2a:a4:a0:4c:70:28:2f:ac:b6:75:28:b0:
e7:03:bd:a5:e9:9b:d6:bf:fb:07:12:56:a2:44:cb:
22:69:f6:c5:0f:7a:70:9a:16:e4:dc:db:10:04:26:
35:00:d0:b8:fb:68:ba:e6:a9:ee:7e:b5:54:1f:84:
9d:7c:b4:79:05:43:75:9e:80:4f:aa:d1:38:c1:ea:
82:12:2e:5c:a4:aa:c8:92:ab:40:44:76:38:10:37:
06:25:05:08:19:97:d4:95:ba:c7:c4:f4:46:a9:94:
c6:7e:9a:30:46:10:b0:35:c3:00:4a:24:47:96:f1:
5c:e5:4d:5b:44:87:bd:ce:f4:ce:54:4a:d1:19:1e:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:91:41:80:BC:5E:04:7B:6A:80:EE:06:4A:BC:12:EE:1B:56:21
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uByRQYC8XgR7aoDuBkq8Eu4bViE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:d6:9c:42:4e:cb:2e:21:20:95:b4:73:ea:4d:b2:3d:e1:1e:
7e:13:5b:0b:bd:c0:91:6c:7f:18:69:97:7e:b8:c3:1b:53:18:
cc:f0:79:67:5d:e4:71:22:3c:7b:05:7e:ee:06:c3:02:fe:dd:
aa:bb:fb:05:46:06:d5:2f:2b:cc:2e:83:af:f7:ae:6a:36:ae:
3f:ce:66:10:43:45:d4:7b:8a:7e:86:09:57:9a:77:9f:80:a1:
3d:ae:65:a5:02:7d:46:63:20:1c:64:8d:75:99:f0:2a:da:47:
0e:9d:69:1d:e9:6e:7d:3f:63:57:61:3c:9a:8e:28:28:63:4d:
80:d9:6a:83:ad:29:6f:35:b8:1c:03:b9:37:8a:5a:30:2d:aa:
90:9a:fb:44:0d:59:1b:b0:75:da:c7:41:75:48:15:98:6d:15:
d2:fc:a0:27:fc:f2:58:29:38:17:63:73:f2:4e:df:85:ab:dc:
1b:ae:4f:4d:80:d6:6d:fc:97:38:0f:de:ba:e0:ca:40:bb:fa:
af:33:63:09:46:f9:4b:01:18:7a:12:5f:f2:a1:de:a4:cc:b1:
29:db:ce:1b:d6:82:8a:2d:b6:d2:9d:ff:aa:72:a7:4f:b2:f8:
22:43:af:62:4b:d7:68:91:41:61:75:89:fc:67:15:27:77:bd:
6c:d9:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:19 2025 by rpki-client