Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/Kvhui7MFJTM7vSqEbCGpZ_p0f30.roa
File: Kvhui7MFJTM7vSqEbCGpZ_p0f30.roa (raw, json)
Hash identifier: IzyP+o1tF3HRfTf4zj6D6SD1f86rcjd+BQh11UfFE8o=
Subject key identifier: 2A:F8:6E:8B:B3:05:25:33:3B:BD:2A:84:6C:21:A9:67:FA:74:7F:7D
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF078B44FD3C076090DA16106A7911C76
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/Kvhui7MFJTM7vSqEbCGpZ_p0f30.roa
Signing time: Thu 18 Apr 2024 09:10:25 +0000
ROA not before: Thu 18 Apr 2024 09:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:78:b4:4f:d3:c0:76:09:0d:a1:61:06:a7:91:1c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 18 09:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2af86e8bb30525333bbd2a846c21a967fa747f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:f6:87:1e:39:4d:c0:2c:5f:fc:b9:72:b6:
12:bb:ba:7a:73:2e:1f:32:18:fa:9d:a4:79:14:06:
ee:63:22:56:f3:9d:3f:02:f3:0e:71:e3:0e:69:6e:
6e:70:b1:fa:17:55:22:44:82:62:d2:1b:66:4d:92:
54:0e:39:b0:1f:b1:1d:63:55:1a:e3:34:f4:d6:a4:
b1:7e:b8:dd:8e:5e:9b:6c:8b:bc:47:42:04:7f:37:
c9:9f:1f:c9:61:94:1f:9e:08:74:55:6c:56:bf:c2:
38:39:12:10:ff:67:d2:90:98:63:71:f3:b6:45:6f:
06:01:66:55:cc:40:98:dc:4e:d0:a3:36:06:d7:d3:
d6:fd:79:78:39:18:a5:13:3f:f9:af:82:d1:99:fa:
6b:20:2d:e4:89:ef:62:e7:b4:49:0d:9e:3a:a9:80:
5e:89:80:f1:de:0e:b3:50:9c:66:8e:3f:ec:bb:52:
09:1c:0e:1e:84:0f:5e:da:51:b9:50:20:c1:87:84:
e9:78:32:51:6d:2d:55:92:bb:3b:10:b3:71:3c:1e:
25:94:17:e2:b2:5c:90:82:c6:da:53:60:ba:5a:21:
72:f0:ee:a0:17:3c:14:a1:fa:a1:e8:6c:2a:84:86:
bf:0a:6e:e5:f5:6d:ee:6b:1e:bc:00:91:3a:32:85:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:6E:8B:B3:05:25:33:3B:BD:2A:84:6C:21:A9:67:FA:74:7F:7D
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/Kvhui7MFJTM7vSqEbCGpZ_p0f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:05:2d:8c:6a:89:e8:57:13:e0:21:f4:de:db:6e:5c:55:f6:
dd:fc:b5:ab:b8:aa:78:56:d1:e9:58:e3:97:2a:b2:b0:70:83:
7b:68:70:f8:a4:bb:5f:fb:86:ee:d7:1e:21:25:7a:d1:7a:fb:
6d:ac:91:20:69:c9:58:5f:f4:b3:58:af:8a:1f:d7:0a:76:f8:
ef:05:13:96:88:bb:0a:b9:a6:07:d4:8e:8f:2e:47:a1:7d:79:
20:75:29:db:c5:fa:cd:a1:75:2a:68:e2:ec:ad:5b:40:a5:20:
6d:94:48:e2:fe:1d:00:58:6d:27:06:b0:11:97:8f:8b:49:20:
82:8c:1e:b9:a8:16:57:4e:fc:40:75:80:0b:b8:3f:93:fc:90:
b0:77:a7:de:1c:f5:68:86:d3:09:4c:39:1e:a3:43:ec:2a:35:
8e:78:cc:53:07:28:4c:e9:1f:9a:e2:f5:81:ef:5a:ee:44:8f:
11:37:48:f0:dc:e2:64:66:3b:47:c0:42:33:65:c5:fb:5c:2d:
84:a2:03:18:fe:0d:62:79:2d:e6:90:ab:7a:49:51:32:1c:04:
d0:fa:c3:19:4f:f1:d8:86:f1:d9:0b:f3:4d:94:da:a5:7e:e8:
8a:e6:30:b7:ed:b5:fb:4e:33:0b:44:51:12:92:aa:54:c9:11:
75:f0:ee:af
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7weLRP08B2CQ2hYQankRx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjEzMmMxN2U1OThmMTFiNmExMGY0MmVmM2JjZTk2MWUx
OGU4ZWYwHhcNMjQwNDE4MDkxMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWY4NmU4YmIzMDUyNTMzM2JiZDJhODQ2YzIxYTk2N2ZhNzQ3ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2n2hx45TcAsX/y5crYSu7p6cy4f
Mhj6naR5FAbuYyJW850/AvMOceMOaW5ucLH6F1UiRIJi0htmTZJUDjmwH7EdY1Ua
4zT01qSxfrjdjl6bbIu8R0IEfzfJnx/JYZQfngh0VWxWv8I4ORIQ/2fSkJhjcfO2
RW8GAWZVzECY3E7QozYG19PW/Xl4ORilEz/5r4LRmfprIC3kie9i57RJDZ46qYBe
iYDx3g6zUJxmjj/su1IJHA4ehA9e2lG5UCDBh4TpeDJRbS1Vkrs7ELNxPB4llBfi
slyQgsbaU2C6WiFy8O6gFzwUofqh6GwqhIa/Cm7l9W3uax68AJE6MoW53wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCr4bouzBSUzO70qhGwhqWf6dH99MB8GA1UdIwQY
MBaAFECxMsF+WY8RtqEPQu87zpYeGOjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzIt
OGM4ZWJmNTg4OWRhLzEvS3ZodWk3TUZKVE03dlNxRWJDR3BaX3AwZjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzItOGM4ZWJmNTg4OWRh
LzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF4FLYxqiehXE+Ah9N7b
blxV9t38tau4qnhW0elY45cqsrBwg3tocPiku1/7hu7XHiEletF6+22skSBpyVhf
9LNYr4of1wp2+O8FE5aIuwq5pgfUjo8uR6F9eSB1KdvF+s2hdSpo4uytW0ClIG2U
SOL+HQBYbScGsBGXj4tJIIKMHrmoFldO/EB1gAu4P5P8kLB3p94c9WiG0wlMOR6j
Q+wqNY54zFMHKEzpH5ri9YHvWu5EjxE3SPDc4mRmO0fAQjNlxftcLYSiAxj+DWJ5
LeaQq3pJUTIcBND6wxlP8diG8dkL802U2qV+6IrmMLfttftOMwtEURKSqlTJEXXw
7q8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:32:08 2025 by rpki-client