Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nqztUIBFKx46nkSCfDYgZzBJleM.roa
File: nqztUIBFKx46nkSCfDYgZzBJleM.roa (raw, json)
Hash identifier: zDEMuu61iwSvVgjaHvDwudUhKdESOm4V9MRTL+5Vf3c=
Subject key identifier: 9E:AC:ED:50:80:45:2B:1E:3A:9E:44:82:7C:36:20:67:30:49:95:E3
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF22AAA7DCEC74BF8BC63E1AE2B4197FD
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nqztUIBFKx46nkSCfDYgZzBJleM.roa
Signing time: Thu 18 Apr 2024 17:04:26 +0000
ROA not before: Thu 18 Apr 2024 17:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:f1f3:8b1f/128 maxlen: 128
2001:67c:64:ffff:0:18e:f22a:7c51/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:2a:aa:7d:ce:c7:4b:f8:bc:63:e1:ae:2b:41:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 17:04:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9eaced5080452b1e3a9e44827c362067304995e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:3d:c7:5b:fb:f5:5a:f6:7b:0f:39:3e:78:
ce:b3:fc:5b:32:d8:f5:1d:41:4e:38:d2:73:8d:83:
0f:cc:4a:83:60:8f:09:ae:32:b5:7b:31:ee:f7:e8:
4b:59:07:32:3e:cf:2c:cd:6e:35:e9:22:64:0a:11:
43:8a:1f:d7:fa:2e:9c:5d:9a:42:e5:91:5d:43:5a:
94:e5:57:e9:49:20:e1:58:48:7a:e9:6c:85:9a:23:
57:98:7c:ff:6c:35:8c:c8:32:3b:f1:58:b7:f3:ea:
e5:7b:69:36:70:d1:79:67:b5:ec:3c:73:ff:5a:02:
d2:39:c7:da:31:75:4e:dc:fc:a8:24:36:95:f1:55:
2c:f0:90:f0:8c:ba:a9:00:2c:53:80:81:7a:0e:a1:
2e:6e:0e:bf:5b:80:9a:57:fa:56:31:62:b7:d8:22:
3e:98:39:a1:52:00:05:b1:31:d3:ab:80:46:5e:29:
6c:f5:8c:7c:c1:63:bd:b9:99:80:8f:b7:12:62:d5:
25:4b:8e:42:9d:d5:f4:82:74:08:fe:c5:13:b9:f1:
24:0c:0f:05:97:40:a2:9f:3d:a8:2a:27:13:ba:4b:
47:87:3c:84:ba:e8:4d:77:5d:55:43:04:c8:5d:42:
0d:9c:9b:b8:d0:7b:79:e0:25:06:78:48:6f:4d:eb:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:ED:50:80:45:2B:1E:3A:9E:44:82:7C:36:20:67:30:49:95:E3
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nqztUIBFKx46nkSCfDYgZzBJleM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:5e:25:bc:00:80:c4:5d:e6:95:96:a0:aa:97:1c:00:c0:6a:
31:a3:83:a7:22:b1:24:ec:6d:ad:0f:6d:24:b4:f1:97:f4:0e:
27:65:6c:46:6e:9f:7d:5f:cf:89:29:ab:b5:a9:cc:9f:41:ed:
9a:a5:34:96:80:47:e6:10:b2:94:eb:90:9f:6a:3c:e9:38:ea:
29:2e:5c:a2:f2:57:b0:04:84:f7:fc:a7:4a:60:1b:66:9d:88:
12:5b:fa:c6:c5:b2:1e:94:e4:a8:55:e7:a6:9f:f9:3c:66:1a:
0a:6c:7c:a2:82:ed:b1:a5:fc:56:bc:77:19:72:6b:d5:5a:44:
69:11:23:0c:d6:ec:d4:e2:cb:9b:24:f0:ec:cc:de:98:35:5b:
1d:ca:e0:6c:95:14:8b:ab:00:74:2d:40:83:9a:75:30:1e:34:
7e:44:b9:4d:c9:4c:72:05:32:c9:31:3e:db:a1:6a:b8:86:60:
7e:96:cb:d3:7b:04:75:e4:9e:ec:40:7c:9a:8f:85:e5:cb:a1:
ec:3a:69:27:5a:f4:04:32:21:de:33:35:3b:69:6a:7a:9c:e3:
e7:57:95:12:76:87:13:ae:e6:43:3b:14:a7:50:36:aa:94:81:
03:ed:c6:2c:87:d7:68:99:9c:f8:99:73:15:9d:ce:44:cf:f0:
3a:25:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:35:13 2025 by rpki-client