Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_BsX64j0r1A3rpmQTbKrvzyIF6Q.roa
File: _BsX64j0r1A3rpmQTbKrvzyIF6Q.roa (raw, json)
Hash identifier: bGPhoNpqgvB7BwWMAeYLPWjb3c8rk4tstDfhu6jl4I4=
Subject key identifier: FC:1B:17:EB:88:F4:AF:50:37:AE:99:90:4D:B2:AB:BF:3C:88:17:A4
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF59991A34217410D5C295E71EBD2EED3
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_BsX64j0r1A3rpmQTbKrvzyIF6Q.roa
Signing time: Fri 19 Apr 2024 09:04:25 +0000
ROA not before: Fri 19 Apr 2024 09:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:f1f3:8b1f/128 maxlen: 128
2001:67c:64:ffff:0:18e:f599:5593/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:99:91:a3:42:17:41:0d:5c:29:5e:71:eb:d2:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 19 09:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc1b17eb88f4af5037ae99904db2abbf3c8817a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:b3:14:5e:d8:bc:e6:4c:b3:a1:b3:db:ca:
df:e6:94:d2:8a:a3:cc:a7:d7:ae:04:a6:1d:93:bf:
bb:d5:f2:93:24:a0:9b:92:4f:0a:07:44:5c:40:47:
a1:c5:bb:bd:eb:1d:90:dc:4b:25:7e:72:a8:da:41:
e6:3a:1f:77:29:98:57:1a:58:0e:90:15:0e:33:fe:
a4:6a:5e:62:89:29:40:cb:a0:7e:1c:05:da:44:ae:
c3:81:e3:b4:d3:c1:51:8d:1a:8c:32:38:70:11:12:
03:92:1f:a6:b7:3c:97:47:b7:7a:cd:d9:08:27:a6:
97:65:15:37:f5:04:72:b2:27:91:7d:84:29:53:af:
76:32:67:23:92:67:f3:23:11:d6:d3:88:59:4c:4e:
15:5f:5c:49:e9:a7:e0:8d:74:67:02:f4:33:ca:14:
f5:14:18:04:7b:61:a9:12:2a:f4:fa:bf:db:5c:ec:
c1:93:de:62:2b:7d:51:a4:4f:a1:d3:08:96:6e:3e:
22:e6:85:24:db:3a:03:e2:17:57:66:10:23:aa:7a:
ea:b9:9d:f3:1e:b5:ea:fc:e9:8e:86:7d:58:b6:f1:
01:3a:34:c4:43:56:4c:64:d6:6d:69:c7:fa:5a:3b:
68:40:19:35:45:cb:47:21:6c:28:7b:7a:32:53:81:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:17:EB:88:F4:AF:50:37:AE:99:90:4D:B2:AB:BF:3C:88:17:A4
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_BsX64j0r1A3rpmQTbKrvzyIF6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:3b:b5:26:e1:b9:f0:15:0a:4c:1d:60:5f:03:b6:14:c8:3d:
30:7a:ef:80:71:97:37:70:1c:b8:c9:f5:c3:45:bf:31:f9:58:
3d:91:bd:76:d1:c2:fe:78:16:be:08:60:2c:80:9f:65:86:7b:
ff:76:9d:1e:56:36:c5:f3:85:96:4b:27:9c:12:64:c4:c1:ea:
85:73:b0:96:ff:1a:30:88:9c:7e:7d:5c:35:c3:05:21:68:01:
fd:7f:70:70:a3:81:c9:d7:6e:15:79:e7:23:45:8a:a0:42:b7:
5c:a9:34:ed:a0:04:42:37:75:52:a0:28:cd:df:45:ee:3d:73:
72:6f:08:ea:92:e0:36:33:1d:6b:0f:e1:7b:a9:7d:b9:64:fc:
8e:77:a2:ab:0f:96:09:63:ed:90:d5:c8:86:3e:53:3c:e2:09:
c1:24:b5:7b:77:1f:41:cc:c8:0b:da:65:5b:1d:5a:db:2c:b8:
5f:fd:9b:24:85:b0:45:cf:cc:1c:1d:47:7f:f7:b7:c5:12:f8:
48:ef:d6:40:92:05:98:c0:61:0c:dc:2d:bf:31:f7:92:a8:49:
af:1d:78:33:3d:9d:89:b8:d7:a5:11:29:7c:d8:e7:24:b9:d2:
e2:ab:af:48:08:31:52:77:03:83:d6:8f:fe:32:d3:12:58:27:
4e:8b:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:17:55 2025 by rpki-client