Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nP_05GVPQHMC6UJ1DIKCmI1-JYA.roa
File: nP_05GVPQHMC6UJ1DIKCmI1-JYA.roa (raw, json)
Hash identifier: 5Re0HcSsP3puPFDJZJ0wouT6zosZHScZed9JBeoYdtg=
Subject key identifier: 9C:FF:F4:E4:65:4F:40:73:02:E9:42:75:0C:82:82:98:8D:7E:25:80
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEC66D5EA797E7905A2A8FC1DE7EF9D19
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nP_05GVPQHMC6UJ1DIKCmI1-JYA.roa
Signing time: Wed 17 Apr 2024 14:12:26 +0000
ROA not before: Wed 17 Apr 2024 14:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:66:d5:ea:79:7e:79:05:a2:a8:fc:1d:e7:ef:9d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 14:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cfff4e4654f407302e942750c8282988d7e2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:91:99:99:b6:f0:51:4c:fe:ab:88:11:70:
f8:8e:a7:44:13:b6:fd:cf:c5:08:76:d5:a4:98:f8:
cd:6e:db:ca:9c:02:0c:38:d7:56:01:fe:01:55:a5:
a2:0a:71:69:f1:ab:77:82:96:2f:39:66:c0:f6:47:
ab:20:00:02:2a:de:34:e0:22:ba:43:3b:06:70:13:
c7:1d:9e:d3:44:92:ad:8c:39:7c:05:7d:88:ff:b3:
5a:94:0d:28:e4:bd:74:ea:e5:c7:0c:05:91:22:19:
53:84:fc:c0:1b:3c:8c:9f:1f:f8:2f:3a:68:d1:eb:
8b:c8:cc:95:46:0f:ee:8a:79:8d:83:4c:ca:5e:cf:
23:04:00:ca:a6:92:66:df:e0:f6:10:37:3b:7a:d7:
3f:41:28:eb:38:e4:e8:4f:cf:6c:25:d1:5f:91:19:
b1:01:99:f3:e5:8a:d2:68:29:81:ca:0c:52:4c:6a:
fe:95:47:1a:34:92:b9:4a:37:b1:e3:83:c0:c6:f5:
5f:06:73:f4:fe:4a:46:62:9b:bb:47:93:e7:d0:0a:
91:39:57:59:8d:4f:9e:b3:0c:74:0e:30:ad:2e:1c:
c3:13:75:90:4d:3c:4c:31:01:34:16:af:e0:20:6c:
60:7b:ff:ca:37:a2:55:41:c4:d4:e0:bf:71:79:ce:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:F4:E4:65:4F:40:73:02:E9:42:75:0C:82:82:98:8D:7E:25:80
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/nP_05GVPQHMC6UJ1DIKCmI1-JYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:c9:14:fe:ba:cb:a0:49:d6:04:9e:b5:c8:84:16:cd:6f:eb:
26:c9:6d:d1:3e:18:90:fb:73:be:b2:19:80:ca:33:5d:25:e8:
61:95:32:71:71:26:b9:06:35:cc:f7:7f:9e:20:47:9e:14:35:
c0:f6:bb:1b:4f:5f:63:c9:cd:e3:48:d2:38:6b:ab:13:64:bc:
37:72:65:ac:fa:1c:ab:89:e9:cf:ce:7b:fd:56:c9:02:cd:d5:
dc:1c:30:0a:f0:31:b2:a1:d7:02:6c:44:8e:78:ac:35:51:51:
2f:7f:d6:c2:e5:30:55:8c:dd:4a:de:27:72:03:a6:1e:91:0f:
0e:df:06:61:dd:d8:14:26:cb:2d:8c:6d:7c:4a:75:6b:ba:ff:
c0:d4:7b:50:11:2a:26:95:bb:bf:d1:7b:6d:72:fb:bb:d3:6e:
b1:f9:fb:4c:67:09:73:fc:25:5c:8c:7f:4d:b9:d6:77:a6:a5:
87:ad:1c:7c:19:0e:29:48:e5:ea:e4:53:13:2c:04:ef:e0:a0:
a5:de:d9:41:30:ff:17:35:3b:08:5b:33:7e:26:2f:0b:14:83:
ad:45:a2:cd:98:31:61:7f:b9:30:9e:d5:ae:69:e6:4f:ea:fa:
33:f3:a2:e0:1a:5b:1f:90:0e:b3:3f:cb:98:37:2c:47:85:63:
79:32:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:40:43 2025 by rpki-client