Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/UQdl_ZRH0YU08PPBtyl7EbUBQec.roa
File: UQdl_ZRH0YU08PPBtyl7EbUBQec.roa (raw, json)
Hash identifier: o3nA3UdY/bWYxIGRIkm5toa+eHM4YamHFvfH4UMd2NQ=
Subject key identifier: 51:07:65:FD:94:47:D1:85:34:F0:F3:C1:B7:29:7B:11:B5:01:41:E7
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF4BEC20CF298D1BC1247DD04D0E466A9
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/UQdl_ZRH0YU08PPBtyl7EbUBQec.roa
Signing time: Fri 19 Apr 2024 05:05:25 +0000
ROA not before: Fri 19 Apr 2024 05:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:f1f3:8b1f/128 maxlen: 128
2001:67c:64:ffff:0:18e:f4bd:fd4f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f4:be:c2:0c:f2:98:d1:bc:12:47:dd:04:d0:e4:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 19 05:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=510765fd9447d18534f0f3c1b7297b11b50141e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:96:56:2f:b2:18:be:75:ce:eb:79:20:42:
77:64:a7:02:a1:0a:88:9a:cf:7c:68:30:1c:c6:b7:
39:85:ac:cc:15:30:b6:d8:29:21:9c:71:86:c0:98:
f1:c3:38:c1:65:a4:75:e0:01:cd:f1:bc:c2:9a:8c:
00:78:bc:b9:0b:c3:2b:fb:c8:11:60:1a:13:40:25:
76:5b:b2:cb:e3:d5:4d:79:a5:c2:b0:a2:7f:65:08:
02:9e:94:88:b1:b3:93:6f:7f:a3:41:5d:f6:91:ab:
10:9b:bc:0c:2b:5e:06:f6:64:e0:a0:e9:f4:a8:9c:
ec:d0:9a:38:9f:34:de:6f:79:7b:fa:9b:e0:13:2e:
59:6e:e3:bc:ce:b0:9b:6a:c9:0b:f9:33:be:15:77:
77:82:60:db:7c:68:50:3b:d3:3f:98:12:a9:87:f7:
f6:6f:01:3a:36:f8:9e:80:b8:fd:d0:cc:80:7b:f4:
62:6f:f0:7e:e5:bd:78:6b:5c:b4:13:cc:da:cc:b8:
f4:15:10:ac:c9:e6:62:d0:76:14:29:ab:72:db:54:
c6:3c:1f:de:27:08:96:bc:24:31:b2:06:b0:76:2b:
ca:c6:7b:2f:63:5e:7d:71:b5:46:84:53:35:40:53:
d0:59:5c:e3:ba:f5:17:39:90:4b:a6:fc:f2:c0:ac:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:65:FD:94:47:D1:85:34:F0:F3:C1:B7:29:7B:11:B5:01:41:E7
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/UQdl_ZRH0YU08PPBtyl7EbUBQec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:68:64:46:85:ac:c1:0e:87:fa:67:ff:e2:8f:93:4a:93:c1:
e6:87:eb:f8:51:89:64:96:8e:f6:e4:c3:31:76:db:4e:1b:87:
69:ed:98:cd:82:03:23:e8:b4:ba:ed:54:7a:37:79:d4:ba:30:
5a:5a:cd:b1:7d:c3:a6:33:84:cc:05:74:76:f4:d8:98:51:9f:
38:ed:79:18:db:f6:ef:b0:b3:59:10:95:14:4c:93:65:23:55:
5f:2c:44:59:39:3e:7a:9d:0b:e9:e0:8d:bf:e7:31:5c:14:f3:
64:db:e8:5a:f3:74:84:a5:70:a3:7c:b0:6b:ad:aa:28:66:de:
a4:3a:69:08:b3:b3:64:25:46:52:d4:b9:0c:41:43:de:a3:b5:
ba:f6:a2:02:78:db:f7:f7:4a:1c:d2:66:4a:41:c1:61:65:3b:
2c:80:3f:92:ed:39:a6:8a:dc:1f:d9:f7:db:74:8a:ea:6b:40:
5e:78:30:84:26:75:92:ae:12:9a:da:85:ce:2f:ed:43:a8:d2:
74:e8:f8:f7:e4:bf:de:43:47:1f:6a:99:9f:da:94:ad:78:a7:
c2:85:76:51:ae:c3:3d:fa:64:d3:d7:e5:bf:df:1d:54:ee:35:
56:5e:f2:62:80:62:5f:11:8a:1f:c3:f7:40:84:ac:8b:08:ee:
fe:ae:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:13:11 2025 by rpki-client