Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/fd6l8WHsIieWzz4QTQLLkGF0sqU.roa
File: fd6l8WHsIieWzz4QTQLLkGF0sqU.roa (raw, json)
Hash identifier: ZSz/iu8zdjAjY3GOXrSRwybpl/cXzHaa/li7awdm8mk=
Subject key identifier: 7D:DE:A5:F1:61:EC:22:27:96:CF:3E:10:4D:02:CB:90:61:74:B2:A5
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EE7E45B234BF32BD84AA76988726DD23F
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/fd6l8WHsIieWzz4QTQLLkGF0sqU.roa
Signing time: Tue 16 Apr 2024 17:11:26 +0000
ROA not before: Tue 16 Apr 2024 17:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:e4:5b:23:4b:f3:2b:d8:4a:a7:69:88:72:6d:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 16 17:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ddea5f161ec222796cf3e104d02cb906174b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:b5:71:9a:68:ef:bb:31:4b:68:86:08:b3:
3f:c7:35:77:bd:d6:4f:65:a2:44:71:28:af:af:42:
50:02:65:69:4f:00:2a:60:35:44:24:a1:99:6a:c5:
53:a2:ba:4b:70:7c:30:8e:02:bd:cf:55:53:4e:11:
44:1b:60:8c:33:3c:d7:d7:4d:87:1a:3a:4c:e4:46:
0e:25:22:57:77:d1:8a:91:67:40:0b:9b:40:ca:9a:
b6:14:35:88:18:e8:72:01:32:a7:73:06:c7:db:87:
ca:64:4d:8f:9a:08:3f:5b:e1:3f:3c:62:d9:8f:33:
2f:4b:fc:f4:da:ab:42:d2:18:bd:c9:24:93:85:5b:
1e:84:11:45:8b:8f:bf:9d:df:ce:03:3e:30:1c:3a:
f0:84:57:0c:35:df:e4:0e:aa:f2:6a:e7:f1:9c:a5:
9e:00:b5:ff:51:3f:62:fd:5b:20:66:90:43:20:a2:
72:0b:e2:8b:5f:fb:b1:7c:c5:71:24:49:4f:3a:bc:
1d:47:73:df:ab:88:ab:2e:dc:ab:b7:0b:c6:07:4d:
d0:0f:43:4f:50:dd:b4:21:3a:8c:a5:39:e5:72:4e:
10:c0:43:f4:49:6b:a8:5d:69:29:5b:19:a5:08:eb:
4d:65:1e:2f:77:0d:db:4d:10:c2:e7:d0:eb:1b:e5:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:A5:F1:61:EC:22:27:96:CF:3E:10:4D:02:CB:90:61:74:B2:A5
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/fd6l8WHsIieWzz4QTQLLkGF0sqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:6d:5a:4a:06:c5:a1:08:e8:cf:f6:7f:fd:ec:e7:e0:51:48:
e2:4d:0e:3b:98:2e:58:7b:a1:6d:a5:bc:bf:86:57:83:9a:a2:
e6:f7:33:b6:14:eb:41:99:fa:4a:45:f4:8f:59:cb:f7:48:43:
25:e6:ee:0e:f9:df:e3:d1:cf:e8:83:7f:dd:30:c0:53:87:db:
97:51:d6:8c:b9:b6:62:d5:11:ff:2e:29:c4:d9:70:87:6a:fa:
70:84:f4:d0:a3:7a:71:4f:28:a4:e9:a6:04:cc:d0:9c:58:61:
0c:3b:9d:79:2f:0f:0a:61:88:e8:68:61:e4:d9:a2:25:23:f9:
be:e6:ed:28:0e:a6:c6:39:3f:0b:e2:9c:31:b6:bd:12:e4:e7:
67:6c:b0:79:fe:cf:1a:25:d5:39:9d:3c:03:19:23:73:c7:16:
94:6a:c3:39:3b:cf:00:ec:08:73:0b:2d:b5:91:1a:18:28:a7:
18:35:0b:54:0d:b9:c6:32:24:50:51:54:eb:80:fd:67:a0:2b:
10:b4:ea:96:b3:05:0e:57:40:db:89:88:24:b3:e2:e6:6e:a2:
8e:03:d3:ec:9b:69:ed:05:5a:8c:d0:a6:4f:d5:20:08:a9:b6:
f8:c4:d3:69:f2:a9:2d:82:8f:88:02:76:22:ed:fd:e7:21:3e:
9a:f6:cd:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7n5FsjS/Mr2EqnaYhybdI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjEzMmMxN2U1OThmMTFiNmExMGY0MmVmM2JjZTk2MWUx
OGU4ZWYwHhcNMjQwNDE2MTcxMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRlYTVmMTYxZWMyMjI3OTZjZjNlMTA0ZDAyY2I5MDYxNzRiMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBG1cZpo77sxS2iGCLM/xzV3vdZP
ZaJEcSivr0JQAmVpTwAqYDVEJKGZasVTorpLcHwwjgK9z1VTThFEG2CMMzzX102H
GjpM5EYOJSJXd9GKkWdAC5tAypq2FDWIGOhyATKncwbH24fKZE2Pmgg/W+E/PGLZ
jzMvS/z02qtC0hi9ySSThVsehBFFi4+/nd/OAz4wHDrwhFcMNd/kDqryaufxnKWe
ALX/UT9i/VsgZpBDIKJyC+KLX/uxfMVxJElPOrwdR3Pfq4irLtyrtwvGB03QD0NP
UN20ITqMpTnlck4QwEP0SWuoXWkpWxmlCOtNZR4vdw3bTRDC59DrG+UIeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH3epfFh7CInls8+EE0Cy5BhdLKlMB8GA1UdIwQY
MBaAFECxMsF+WY8RtqEPQu87zpYeGOjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzIt
OGM4ZWJmNTg4OWRhLzEvZmQ2bDhXSHNJaWVXeno0UVRRTExrR0Ywc3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzItOGM4ZWJmNTg4OWRh
LzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHZtWkoGxaEI6M/2f/3s
5+BRSOJNDjuYLlh7oW2lvL+GV4Oaoub3M7YU60GZ+kpF9I9Zy/dIQyXm7g753+PR
z+iDf90wwFOH25dR1oy5tmLVEf8uKcTZcIdq+nCE9NCjenFPKKTppgTM0JxYYQw7
nXkvDwphiOhoYeTZoiUj+b7m7SgOpsY5PwvinDG2vRLk52dssHn+zxol1TmdPAMZ
I3PHFpRqwzk7zwDsCHMLLbWRGhgopxg1C1QNucYyJFBRVOuA/WegKxC06pazBQ5X
QNuJiCSz4uZuoo4D0+ybae0FWozQpk/VIAiptvjE02nyqS2Cj4gCdiLt/echPpr2
zcQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:04:52 2025 by rpki-client