Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uyJGEIY1-eYvyvGLXfruUm4lkdo.roa
File: uyJGEIY1-eYvyvGLXfruUm4lkdo.roa (raw, json)
Hash identifier: 0Wsa11zENuvVPYjfqp2Y2gsCaMKXwsBxFhsmDlDjKwo=
Subject key identifier: BB:22:46:10:86:35:F9:E6:2F:CA:F1:8B:5D:FA:EE:52:6E:25:91:DA
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF3EA5A77735DA39BBAD342DCF89666D1
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uyJGEIY1-eYvyvGLXfruUm4lkdo.roa
Signing time: Fri 19 Apr 2024 01:13:25 +0000
ROA not before: Fri 19 Apr 2024 01:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:f1f3:8b1f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f3:ea:5a:77:73:5d:a3:9b:ba:d3:42:dc:f8:96:66:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 19 01:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2246108635f9e62fcaf18b5dfaee526e2591da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:b2:0e:df:80:8b:1f:cd:5d:f1:1f:62:dc:
f5:1d:9e:8f:76:e9:44:c0:74:4a:f1:fa:c7:52:13:
f0:04:bb:2c:92:a4:bc:1f:cd:29:cc:14:b5:64:65:
f0:3b:20:1d:cb:25:2d:10:da:42:7d:3a:c8:cc:2c:
9b:26:74:23:d7:47:46:3f:cc:ca:8d:2f:b6:60:a5:
6e:0c:b0:fe:d9:2c:7a:b3:d4:62:6c:67:59:02:97:
91:88:db:08:a2:5c:ea:6c:d3:0d:be:98:66:98:51:
a0:8e:dc:ae:65:3e:a6:8d:9c:68:74:05:0b:99:fa:
a0:88:78:f3:c1:6c:35:09:ed:19:5e:a6:36:f4:0e:
cf:ca:a1:ea:69:61:b1:78:3c:1d:38:18:83:a0:74:
4b:ea:b7:e9:eb:12:0f:c6:37:19:40:d9:19:e6:1a:
7a:06:99:8c:35:30:02:e8:5e:ce:9f:6a:4b:a9:9f:
f5:a2:51:59:09:ac:aa:28:d6:23:fc:b2:77:8d:5c:
45:6b:56:35:38:e1:e3:bc:7f:bb:cc:ee:41:1f:de:
91:64:85:9d:93:67:75:c9:66:81:85:9e:46:2e:5d:
31:3e:3f:82:e4:70:d8:e9:72:91:3c:86:b1:67:35:
aa:03:fd:f6:19:b0:00:ae:ba:c0:32:67:2b:e6:74:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:46:10:86:35:F9:E6:2F:CA:F1:8B:5D:FA:EE:52:6E:25:91:DA
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/uyJGEIY1-eYvyvGLXfruUm4lkdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:90:84:12:43:ca:f4:ab:7b:60:df:6e:0d:3b:c9:93:f7:1d:
72:6e:e4:29:f4:51:cf:b5:c7:34:d8:3b:f2:c3:d1:f2:63:ef:
8f:e6:9e:fe:6f:11:e7:76:0c:a8:e6:f7:26:11:04:4f:30:e9:
a4:6e:dd:e4:de:71:76:1e:90:fa:cc:f7:08:5e:22:d5:50:fd:
36:57:d9:74:91:c5:b2:8f:12:b7:9f:24:40:ac:ca:6e:0f:95:
26:e5:38:72:b1:6f:33:b2:ec:94:86:34:2f:e2:56:c6:04:40:
44:c7:39:3d:30:65:32:07:7c:1e:4e:f6:de:d4:df:c4:1a:51:
67:05:7d:56:c0:9e:da:0e:68:05:77:c5:f8:23:12:7a:24:d5:
81:f0:40:0e:0c:36:ba:b3:f5:dd:7a:90:fb:bb:73:e3:f4:dc:
02:b9:ff:95:2e:88:27:a3:a6:aa:29:0a:43:80:d8:af:34:d4:
c9:c4:2c:7c:e8:9a:3c:be:4d:2d:4f:99:83:7b:42:0d:56:0b:
6b:de:35:b2:9f:85:f9:d9:ac:6a:c6:a2:69:9a:de:35:ae:21:
f6:4d:5b:5a:67:bc:86:bb:a7:69:4f:b4:14:f3:7b:24:60:e7:
a3:c5:49:3f:d6:ea:ee:71:bf:78:0a:bf:5e:9b:23:da:c1:b3:
06:6d:4e:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7z6lp3c12jm7rTQtz4lmbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjEzMmMxN2U1OThmMTFiNmExMGY0MmVmM2JjZTk2MWUx
OGU4ZWYwHhcNMjQwNDE5MDExMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjIyNDYxMDg2MzVmOWU2MmZjYWYxOGI1ZGZhZWU1MjZlMjU5MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31GyDt+Aix/NXfEfYtz1HZ6PdulE
wHRK8frHUhPwBLsskqS8H80pzBS1ZGXwOyAdyyUtENpCfTrIzCybJnQj10dGP8zK
jS+2YKVuDLD+2Sx6s9RibGdZApeRiNsIolzqbNMNvphmmFGgjtyuZT6mjZxodAUL
mfqgiHjzwWw1Ce0ZXqY29A7PyqHqaWGxeDwdOBiDoHRL6rfp6xIPxjcZQNkZ5hp6
BpmMNTAC6F7On2pLqZ/1olFZCayqKNYj/LJ3jVxFa1Y1OOHjvH+7zO5BH96RZIWd
k2d1yWaBhZ5GLl0xPj+C5HDY6XKRPIaxZzWqA/32GbAArrrAMmcr5nTR5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLsiRhCGNfnmL8rxi1367lJuJZHaMB8GA1UdIwQY
MBaAFECxMsF+WY8RtqEPQu87zpYeGOjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzIt
OGM4ZWJmNTg4OWRhLzEvdXlKR0VJWTEtZVl2eXZHTFhmcnVVbTRsa2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzItOGM4ZWJmNTg4OWRh
LzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEKQhBJDyvSre2Dfbg07
yZP3HXJu5Cn0Uc+1xzTYO/LD0fJj74/mnv5vEed2DKjm9yYRBE8w6aRu3eTecXYe
kPrM9wheItVQ/TZX2XSRxbKPErefJECsym4PlSblOHKxbzOy7JSGNC/iVsYEQETH
OT0wZTIHfB5O9t7U38QaUWcFfVbAntoOaAV3xfgjEnok1YHwQA4MNrqz9d16kPu7
c+P03AK5/5UuiCejpqopCkOA2K801MnELHzomjy+TS1PmYN7Qg1WC2veNbKfhfnZ
rGrGomma3jWuIfZNW1pnvIa7p2lPtBTzeyRg56PFST/W6u5xv3gKv16bI9rBswZt
Tvc=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:44 2025 by rpki-client