Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/zgT3_9BEduspzd1NSrEoAr7Wwms.roa
File: zgT3_9BEduspzd1NSrEoAr7Wwms.roa (raw, json)
Hash identifier: HWblUONygu5iRaKB+4CPeXWHyc34SEVjCjqvzipZe/Q=
Subject key identifier: CE:04:F7:FF:D0:44:76:EB:29:CD:DD:4D:4A:B1:28:02:BE:D6:C2:6B
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EE92D072B4F7BEBD51A080A58E5860E9D
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/zgT3_9BEduspzd1NSrEoAr7Wwms.roa
Signing time: Tue 16 Apr 2024 23:10:25 +0000
ROA not before: Tue 16 Apr 2024 23:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e9:2d:07:2b:4f:7b:eb:d5:1a:08:0a:58:e5:86:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 16 23:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce04f7ffd04476eb29cddd4d4ab12802bed6c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:87:a6:eb:33:0f:08:55:e3:e0:98:61:15:
f4:07:d6:65:d3:45:e8:88:e8:34:63:bf:d7:51:58:
36:cd:89:97:ea:a7:53:e2:c0:7d:df:a0:61:c3:8e:
62:b8:d6:e6:f4:f1:08:77:94:10:9d:83:15:ac:77:
2f:b7:4b:19:02:53:87:ab:96:e0:88:0a:d9:26:cf:
42:ea:02:09:4e:9a:5a:e1:20:a5:92:cf:27:82:b4:
bf:0c:ed:55:34:b9:b7:9a:d1:aa:43:2e:3f:5d:97:
21:06:c5:d4:59:81:c9:60:4e:58:2b:d1:82:29:f3:
31:22:39:42:e1:c2:5e:af:dd:29:e0:e9:2e:bf:e7:
b3:e9:2b:6b:5e:f1:8b:64:39:84:87:0c:c4:4b:e4:
ae:c6:3e:0d:bf:c5:10:57:cb:82:13:39:b7:02:2c:
cc:1f:78:c7:00:c9:f5:80:45:31:8f:9d:5d:ea:86:
1f:c5:86:1f:10:6e:6e:61:db:68:a5:c8:a6:b3:5b:
69:fb:61:84:f8:fa:7d:21:47:58:c0:a4:8e:a9:96:
ad:40:5f:bb:57:a1:5d:a8:0a:db:43:c9:a3:5f:5e:
94:c0:11:6b:e9:04:35:02:9e:ae:aa:92:ba:01:0a:
f8:30:20:25:c5:be:79:e4:4d:bd:b8:0b:d2:f5:ff:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:F7:FF:D0:44:76:EB:29:CD:DD:4D:4A:B1:28:02:BE:D6:C2:6B
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/zgT3_9BEduspzd1NSrEoAr7Wwms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:a6:32:1a:f4:27:c4:45:71:63:c2:60:e2:3b:e0:d6:50:a9:
de:be:14:62:c4:bc:8d:13:98:15:9c:13:67:80:cd:db:1c:78:
0c:c0:2b:4d:2b:f9:ca:0d:a9:62:7d:52:1d:8e:32:3f:25:45:
6a:47:a8:1b:df:f7:ce:46:5a:22:54:16:46:a6:6b:97:d3:19:
a1:1c:31:98:99:81:83:d3:15:ee:eb:44:d1:9a:05:6f:bc:3b:
3e:29:96:81:bd:c5:53:89:ce:5d:04:c3:ad:6d:df:23:b1:9d:
70:e8:ad:a3:86:0b:b5:a0:6c:1f:0d:2f:84:9b:69:6c:72:12:
00:9b:fa:12:62:0a:47:6c:b9:7a:5a:e2:32:be:8b:c6:45:0c:
0c:f1:71:bd:69:fb:2e:4f:97:0b:9c:a1:c2:e3:77:07:87:3a:
59:15:92:11:db:21:42:2e:ca:c7:f2:3c:4d:08:2e:3f:ee:be:
ed:1c:5a:2a:b2:7b:69:fa:a8:b7:04:67:27:10:3b:01:6a:24:
e1:ce:c2:5d:27:94:28:51:dc:64:57:a9:57:18:dd:0c:3b:89:
78:95:5c:ad:35:b0:ba:50:94:6a:7a:39:50:7d:05:a5:39:59:
6d:36:d2:1c:4b:0c:0e:18:67:e1:cd:fb:42:49:5f:0c:ad:24:
7e:96:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:24:43 2025 by rpki-client