Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/40-II_rnfxQW39bCQEsMqlSwCN4.roa
File: 40-II_rnfxQW39bCQEsMqlSwCN4.roa (raw, json)
Hash identifier: QJ0j03m41qcEFn4hi3L3cWbjsLkYsN5gxI+3sw3azOw=
Subject key identifier: E3:4F:88:23:FA:E7:7F:14:16:DF:D6:C2:40:4B:0C:AA:54:B0:08:DE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDC48421A2F0D880C04DFE46AC29B333F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/40-II_rnfxQW39bCQEsMqlSwCN4.roa
Signing time: Sun 14 Apr 2024 11:05:06 +0000
ROA not before: Sun 14 Apr 2024 11:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:dc47:8c37/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:48:42:1a:2f:0d:88:0c:04:df:e4:6a:c2:9b:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 11:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e34f8823fae77f1416dfd6c2404b0caa54b008de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:2b:f8:3f:af:00:36:cd:16:8a:76:ff:0a:
97:5a:7c:af:02:75:bb:d6:f6:3e:a3:e0:37:44:82:
37:6c:3c:5c:d2:a3:19:75:e1:2d:b2:65:43:9d:2d:
17:8f:c2:84:88:92:33:fc:3f:bd:11:b4:a6:f1:0a:
3c:54:d8:53:c6:36:91:c9:fe:f2:c2:b5:f9:50:97:
a7:7b:23:5a:4f:f6:3d:21:df:d1:ef:56:67:5f:5e:
b2:a0:d9:2a:24:42:5a:fa:2b:20:6d:93:cc:bb:7f:
21:6a:ef:03:3d:dd:ec:06:28:6d:85:e5:74:81:b9:
22:ad:23:cc:cb:ed:f5:af:38:4c:f0:c5:2d:37:bc:
da:76:31:16:5a:2b:40:12:95:c6:01:94:d6:25:06:
8e:61:46:03:62:d1:8e:92:b5:75:f3:9a:91:d7:c0:
67:b1:4f:46:66:c2:05:28:8c:24:d1:4b:ed:6b:c4:
97:07:b4:f9:c8:25:e1:ac:af:04:65:88:ab:11:6e:
e3:2d:62:0a:cd:88:46:c3:ca:fb:72:b7:ec:f7:be:
12:29:3e:e4:52:81:38:03:bf:90:09:ff:d6:ae:39:
35:a7:a9:d8:ec:43:18:cf:56:3f:b6:ec:eb:67:b6:
8c:31:9d:dd:1d:b3:2f:26:bb:bd:c8:19:ae:bc:b1:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:88:23:FA:E7:7F:14:16:DF:D6:C2:40:4B:0C:AA:54:B0:08:DE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/40-II_rnfxQW39bCQEsMqlSwCN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:61:21:55:8c:c9:ae:83:ef:b8:9c:00:d2:48:fc:03:a4:ec:
2c:05:76:81:34:68:3a:34:be:41:1d:98:0c:57:63:87:13:1a:
9f:16:9d:12:13:08:35:db:0e:bf:77:20:bb:46:78:af:2c:cb:
13:93:09:b1:04:37:89:47:77:b5:e1:8c:3d:e9:8e:f7:41:fc:
ae:54:ff:f6:ed:93:75:d5:ae:1c:75:75:35:18:a0:90:26:44:
2a:36:2e:9f:0a:7a:6e:65:00:06:60:40:90:bb:b5:c1:02:d7:
4b:36:f2:b0:fa:32:8e:08:9d:f6:fa:1c:fd:3a:cb:fc:2d:22:
8f:13:91:63:fa:f9:ec:be:8e:15:b9:f3:90:80:35:b3:83:2c:
09:59:d9:4d:d1:51:0b:6a:5d:aa:2a:72:95:a4:1d:71:b0:17:
5a:ce:fe:9f:3d:be:31:38:c1:8f:95:97:85:86:db:a3:65:70:
f0:67:98:a6:40:e8:56:a1:7b:86:5a:b9:d5:ef:37:da:78:17:
34:08:18:04:27:06:33:a9:20:48:10:ec:15:c6:e3:1d:f2:38:
29:86:ac:a7:18:00:7c:42:f6:96:73:44:55:5d:d8:29:13:f4:
4b:41:4f:db:da:cb:1e:e8:44:35:f6:57:a8:7e:af:08:0c:50:
5c:61:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:06 2025 by rpki-client