Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QMuydnneA7SCEMk21nsbbK3kC0E.roa
File: QMuydnneA7SCEMk21nsbbK3kC0E.roa (raw, json)
Hash identifier: FUbITvsLjjtIkvRZ6m2obLshWhcgnhIrO6QJU9DBmwE=
Subject key identifier: 40:CB:B2:76:79:DE:03:B4:82:10:C9:36:D6:7B:1B:6C:AD:E4:0B:41
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F231D7FBF8A4618A351E77C52CB08F04A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QMuydnneA7SCEMk21nsbbK3kC0E.roa
Signing time: Sun 28 Apr 2024 05:11:26 +0000
ROA not before: Sun 28 Apr 2024 05:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:1d:7f:bf:8a:46:18:a3:51:e7:7c:52:cb:08:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 28 05:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40cbb27679de03b48210c936d67b1b6cade40b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:24:79:1e:42:ee:5e:45:33:0f:a3:e0:62:
c2:4d:be:8d:54:9d:ee:6e:15:71:b2:d3:20:62:76:
c0:de:7f:a1:70:91:3e:02:c0:d0:ab:ac:d1:71:93:
92:09:9e:09:e8:43:f5:ef:f7:2a:99:67:ec:99:8c:
34:c9:1a:69:e1:94:94:10:21:83:c9:10:d7:a9:f4:
d4:a6:4b:b4:64:03:c3:67:d3:23:50:c1:2e:47:89:
5d:ea:ce:9d:6c:30:01:ba:cb:77:66:02:d3:27:c8:
fe:81:65:6b:c3:49:f7:63:02:0d:dc:04:91:47:be:
72:a2:39:c7:d1:db:81:5e:44:b0:1e:30:59:60:6a:
50:da:88:52:18:19:90:05:60:9b:79:00:41:da:51:
79:8b:3c:ab:ef:e0:c6:96:24:8e:da:be:33:6f:0a:
ba:76:50:0c:6c:a5:1d:82:5a:8c:4b:7b:4b:2a:dc:
08:64:8a:87:f0:bb:d2:4b:aa:f2:91:7b:61:e3:d2:
a5:e5:ce:1a:6f:6e:36:0c:0e:39:c9:11:49:88:ff:
44:fb:d0:81:39:9a:af:d7:cd:88:c1:b2:b2:8a:68:
fb:c7:1f:50:f8:73:fe:71:68:ad:00:81:2c:2e:fc:
98:40:2f:c2:be:1c:17:9f:bf:d9:6e:e7:28:d6:2b:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:B2:76:79:DE:03:B4:82:10:C9:36:D6:7B:1B:6C:AD:E4:0B:41
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QMuydnneA7SCEMk21nsbbK3kC0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
ac:d1:b4:32:86:9c:a1:2a:6c:b6:fb:af:35:98:df:78:c2:11:
86:9d:38:05:83:6f:37:ad:e8:83:e6:ff:a1:dd:30:97:b9:3c:
18:0b:67:06:6f:47:d6:83:42:6e:02:dc:13:97:11:16:fa:20:
a7:29:72:4c:84:10:a5:dc:81:14:8e:fd:3f:bc:c9:3b:df:23:
39:8d:fb:3a:36:5e:36:fd:e9:32:f7:4c:a6:fb:55:2c:14:40:
da:2b:ac:98:90:12:dc:0b:17:f8:65:02:54:78:35:75:99:c8:
d7:b6:2c:ab:16:5a:56:ad:f0:d3:3f:d9:d2:0f:72:10:c4:ad:
b4:3f:2f:02:fc:eb:23:13:f3:a5:e6:1c:67:5d:10:ac:66:6d:
ce:1e:44:19:bc:7e:f0:a6:b9:88:d8:11:7a:d0:a5:8f:c5:4d:
02:08:b6:aa:33:df:1d:4e:e4:2b:0d:13:22:28:63:f2:8d:0c:
6f:33:e6:d2:07:f2:a9:72:23:0a:22:cb:15:05:04:4b:c3:53:
e6:fd:92:ae:14:ba:fc:5f:b5:10:88:ae:e6:e0:8b:a8:dc:fe:
c3:c4:9d:8d:b2:a5:b2:b5:29:3a:56:cc:8e:bd:f1:d7:45:25:
4d:aa:83:ac:24:b8:4c:17:30:ca:e2:de:6a:13:43:2a:c1:50:
49:ec:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:12:39 2025 by rpki-client