Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sEJLb5QV0xLPQOMjlBjr0Pj6QCc.roa
File: sEJLb5QV0xLPQOMjlBjr0Pj6QCc.roa (raw, json)
Hash identifier: eaky7M+TJd2QRfcSpZeh6vR6BFNSFj65ZmR/tqE5UTY=
Subject key identifier: B0:42:4B:6F:94:15:D3:12:CF:40:E3:23:94:18:EB:D0:F8:FA:40:27
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EED0AB65D6E4414D0848AACF560BC5D8A
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sEJLb5QV0xLPQOMjlBjr0Pj6QCc.roa
Signing time: Wed 17 Apr 2024 17:11:25 +0000
ROA not before: Wed 17 Apr 2024 17:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:0a:b6:5d:6e:44:14:d0:84:8a:ac:f5:60:bc:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 17:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0424b6f9415d312cf40e3239418ebd0f8fa4027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:1b:87:4d:8e:ae:72:f7:89:e2:e3:42:f8:
ba:28:8f:b6:5d:aa:e8:6a:ff:f9:e7:50:0d:e8:3d:
22:ef:3f:a7:0a:62:0d:8f:29:99:bb:d3:d9:a7:c5:
07:35:58:a8:7e:6c:8c:47:c8:9c:53:8e:3c:47:9a:
e3:df:bf:62:89:57:22:c3:3e:4e:fe:0f:22:0f:6a:
e6:29:d5:e6:30:f2:6f:8c:18:37:31:88:40:f0:ca:
a0:9d:78:f6:5a:1e:45:cf:78:ea:28:78:10:71:8a:
6b:2d:3b:53:a5:9b:2e:9b:ac:18:e6:8b:cf:5e:87:
a9:09:ef:1a:6b:c5:6b:bd:bf:55:e4:2d:59:51:f3:
35:16:e4:26:16:79:a0:a6:e6:f5:db:c2:45:40:e6:
a3:ce:d4:f5:92:70:1c:45:4a:16:e9:08:8a:3a:63:
10:ca:54:78:dc:9d:a4:f1:ab:63:31:16:0e:6a:4d:
10:46:9b:bc:fe:05:d9:10:d1:85:b5:f6:e4:8c:59:
9b:a4:c0:50:65:78:4c:ee:18:12:69:a4:0a:34:e4:
67:31:a2:ad:e8:15:75:68:5e:6e:e7:31:4d:83:af:
41:ca:78:f0:17:8f:46:39:f2:2c:f9:01:ce:61:cc:
74:04:4c:03:90:82:39:bb:2c:54:11:0e:76:c5:17:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:4B:6F:94:15:D3:12:CF:40:E3:23:94:18:EB:D0:F8:FA:40:27
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/sEJLb5QV0xLPQOMjlBjr0Pj6QCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:96:ac:30:0e:2c:56:95:dd:5c:d2:54:85:62:5a:c3:b2:02:
18:0b:03:c4:e5:da:14:9a:31:60:30:4c:58:7b:fe:5c:c8:85:
70:bb:59:04:04:a8:48:51:03:c1:cf:f2:19:84:36:7c:52:40:
ba:19:6b:a8:f8:d3:95:f9:bb:fb:92:a7:36:39:92:60:c3:4a:
cd:4f:fb:81:65:32:f0:aa:f1:3a:d7:5c:5c:44:f6:b4:a1:4a:
4d:34:20:dc:95:30:00:25:bc:f7:bf:c2:ae:09:ff:4d:b9:3e:
81:44:82:75:bb:6c:30:64:a4:eb:98:f6:2d:9b:12:d7:3a:e4:
70:70:5c:ce:50:8c:66:0b:46:7b:c9:63:23:c6:c7:6c:cb:2c:
c2:d9:89:dc:cd:bc:73:c3:fa:17:27:d9:2c:98:d1:89:0d:8b:
9c:ad:09:40:52:27:2f:65:28:aa:a4:e4:c7:6e:25:3a:ef:53:
ed:92:87:0e:11:b9:00:e8:d3:36:0d:b7:06:6a:96:91:01:2f:
6d:a6:21:23:d3:dd:53:89:87:80:b0:92:dd:ed:09:4a:e6:72:
b2:83:5d:c3:3f:06:65:3a:bb:dc:07:0f:d7:8c:54:c4:c4:6b:
90:62:11:1d:a9:ad:9b:e0:76:82:06:c3:e4:9d:19:0b:85:e2:
1f:df:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:49:12 2025 by rpki-client