Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/w-3h017v1JO9PWWmGeUhalk6Hnc.roa
File: w-3h017v1JO9PWWmGeUhalk6Hnc.roa (raw, json)
Hash identifier: qgohh4OaemkZ6B/xtmnFOsLcQddK4EK4T4cOqp/ZDzk=
Subject key identifier: C3:ED:E1:D3:5E:EF:D4:93:BD:3D:65:A6:19:E5:21:6A:59:3A:1E:77
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EE7759497D0C8BF307AC6E045D4326EF1
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/w-3h017v1JO9PWWmGeUhalk6Hnc.roa
Signing time: Tue 16 Apr 2024 15:10:26 +0000
ROA not before: Tue 16 Apr 2024 15:10:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:75:94:97:d0:c8:bf:30:7a:c6:e0:45:d4:32:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 16 15:10:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3ede1d35eefd493bd3d65a619e5216a593a1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6c:21:3b:75:98:60:dc:ff:cf:30:15:70:b6:
0a:b4:09:46:44:7f:cc:e0:bf:8c:e4:8e:fa:a1:74:
87:dc:bf:0e:5b:96:54:7c:72:1f:ee:9f:3b:45:c8:
c7:2a:50:b1:8a:f9:99:7c:9a:b9:b2:4d:69:60:70:
79:4f:ef:67:e0:3e:fc:f8:f7:c6:46:2d:65:15:d2:
af:1c:da:b4:72:69:2a:02:35:71:4d:db:e4:27:55:
c4:3e:10:d1:c1:df:87:d6:b8:4d:bf:52:6b:d3:05:
65:fb:03:31:8f:fd:c5:ea:cf:86:0e:02:3f:16:e8:
44:6b:1d:fb:a9:df:73:6c:2a:b1:4b:fa:97:45:3e:
be:c0:6a:e8:f6:82:6c:8c:6e:a9:ba:43:47:23:a0:
e2:13:7c:f2:53:34:83:43:84:7b:e9:30:d6:cf:ca:
5b:a2:b8:e6:e9:68:73:12:70:3a:60:43:59:90:83:
c9:fc:2c:46:b9:64:b5:8d:7a:c3:f7:f4:6f:f6:86:
75:d7:02:b0:93:2e:25:15:a9:dc:9b:43:3e:89:4e:
1f:fc:07:af:12:c0:d6:6a:c9:e5:25:64:1b:95:cc:
56:a9:7e:bb:69:c6:ea:4b:58:be:2d:2a:47:18:70:
58:fc:82:81:e2:23:ca:2d:bf:ed:6f:84:af:58:d6:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:E1:D3:5E:EF:D4:93:BD:3D:65:A6:19:E5:21:6A:59:3A:1E:77
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/w-3h017v1JO9PWWmGeUhalk6Hnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e5:23:56:9b:f9:24:31:39:34:61:73:7b:5e:16:d0:4b:0d:
f7:94:ed:33:4e:3e:64:88:ca:9b:b6:a7:c3:49:ae:00:48:ef:
bd:3e:50:2f:6a:1e:e1:fe:23:80:14:1f:a3:3e:25:54:7b:66:
a5:f0:d8:44:5c:2d:53:f7:1f:10:7b:b7:58:02:8a:f9:08:2c:
46:47:21:64:ae:0a:04:08:54:28:bb:8a:78:ce:46:33:2d:91:
0e:80:2a:02:88:8e:6d:88:d7:5c:a8:83:6f:62:82:88:04:9f:
f1:7c:66:f6:51:30:0d:df:4e:f8:1a:7c:d7:66:1a:11:af:c1:
43:4b:a3:ed:81:6d:e3:91:87:5e:2f:c7:2f:82:bf:e2:09:9a:
78:f8:74:c4:44:9c:1b:bb:c5:85:ea:f7:96:1c:1b:29:19:67:
04:58:8e:37:5b:c8:d9:ec:c4:c0:25:65:ac:64:10:59:87:7b:
78:46:89:d4:cc:29:1e:9f:bc:b6:80:d2:e6:cf:76:18:92:b6:
2b:ea:37:c1:91:2a:09:cd:df:b6:fe:90:bd:df:62:91:f4:7d:
ed:93:40:fd:b3:0b:27:db:58:49:3f:af:9a:8f:7f:43:fd:d7:
f4:d2:51:c5:ab:72:55:62:ba:f1:18:6d:eb:67:06:44:59:30:
69:62:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:58 2025 by rpki-client