Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/xY84q2GVwsRzxzw4SJY_OKQPEI0.roa
File: xY84q2GVwsRzxzw4SJY_OKQPEI0.roa (raw, json)
Hash identifier: 1cH8STBQ0BXCc4UnbaPeUAmuiekJKQn3C5GLeJv9WMs=
Subject key identifier: C5:8F:38:AB:61:95:C2:C4:73:C7:3C:38:48:96:3F:38:A4:0F:10:8D
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF15642ABF56C8D7FDCD666E4CDF8BFB8
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/xY84q2GVwsRzxzw4SJY_OKQPEI0.roa
Signing time: Thu 18 Apr 2024 13:12:25 +0000
ROA not before: Thu 18 Apr 2024 13:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:56:42:ab:f5:6c:8d:7f:dc:d6:66:e4:cd:f8:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 13:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c58f38ab6195c2c473c73c3848963f38a40f108d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:6b:3c:c4:9d:fc:bb:88:47:c4:9d:e9:cb:
ee:fe:92:04:ff:7d:43:71:2e:c9:76:4e:74:c1:87:
67:8c:d6:60:ed:1e:77:2a:ae:4b:75:5a:a4:1c:4d:
0b:a0:a9:bf:07:46:1b:df:54:61:cb:c9:0b:75:1e:
01:a4:b2:43:d7:2e:3e:ae:44:34:3f:59:46:61:92:
03:8e:e1:11:e4:6d:71:3a:6d:c7:66:8a:bd:bb:8b:
5f:78:74:47:37:6a:8f:dc:48:00:f8:a7:c5:c0:5d:
5f:17:21:ee:86:d0:32:c5:fd:33:08:52:02:4b:ca:
bd:14:ed:8b:ae:a5:fd:ac:ab:4b:38:b6:30:64:b9:
1f:96:7b:58:84:57:15:d1:2e:f0:6c:b8:7a:d8:94:
23:ca:24:15:18:f0:58:22:5e:67:7d:2f:d8:b3:64:
6c:de:e9:2b:e9:e4:90:4e:f3:f6:0d:f3:f0:4f:6a:
11:06:d4:cb:cd:bd:8f:17:33:88:7a:14:9f:46:34:
bc:68:84:d7:44:42:40:2d:ff:23:25:4d:3c:ed:e2:
17:f9:71:fd:6b:0f:18:a4:9d:fe:df:04:ca:fb:5a:
c9:a3:75:5e:81:80:8e:07:8b:36:ae:a7:c6:de:5e:
ac:9e:cc:82:b6:d3:cb:63:68:be:7f:07:6b:91:d2:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:38:AB:61:95:C2:C4:73:C7:3C:38:48:96:3F:38:A4:0F:10:8D
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/xY84q2GVwsRzxzw4SJY_OKQPEI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:62:e1:58:cb:58:d5:57:13:d3:f3:4f:8b:66:e1:58:17:25:
a0:61:90:db:db:31:80:d8:cf:6a:11:d1:86:9d:33:d2:50:f1:
94:94:4a:c3:07:fa:37:9f:ee:57:38:cc:94:f4:59:a5:e5:bd:
5d:fd:32:d2:fe:6c:ba:fc:ac:2b:d1:46:39:90:ed:c9:10:b5:
6b:f9:0b:96:c9:55:3a:1c:c1:ef:71:0e:70:07:f0:7e:d2:95:
35:e3:50:c3:03:d2:4c:ba:8d:68:80:2a:ad:66:4d:a6:65:2b:
f5:d4:8f:5e:88:eb:94:d5:7b:c1:c2:56:43:77:d0:c4:a5:8a:
51:5c:80:60:83:16:14:be:6d:29:1f:2e:b6:42:d1:59:41:32:
0e:c5:94:d5:e9:6b:f9:fe:fc:ce:22:06:4c:ec:6f:90:c6:c7:
2e:03:d3:a7:3b:54:9a:1e:12:3d:3b:53:26:25:1c:be:29:06:
94:7f:46:9d:c6:8b:6e:dc:d2:59:ac:20:83:be:01:03:4f:41:
07:71:9e:e6:7d:dd:22:2e:c9:df:59:a3:56:7d:5b:cb:41:b1:
8a:39:05:b3:8f:af:65:be:ba:8e:1f:65:9f:a8:8a:59:df:e4:
da:16:29:6c:90:04:1a:ad:54:f7:fd:ac:3c:02:b2:88:e5:ac:
ce:ea:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:05:05 2025 by rpki-client