Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-ImvqYziEEeJFVUIVfoBJnx1x8A.roa
File: 1-ImvqYziEEeJFVUIVfoBJnx1x8A.roa (raw, json)
Hash identifier: CCGYHm0JqK1isKImq7wcccBXBMdbDiAVnIo8kNu36T8=
Subject key identifier: F8:89:AF:A9:8C:E2:10:47:89:15:55:08:55:FA:01:26:7C:75:C7:C0
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFCEF0D756DC05F4DCF483FB9186DFABC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-ImvqYziEEeJFVUIVfoBJnx1x8A.roa
Signing time: Sat 20 Apr 2024 19:15:08 +0000
ROA not before: Sat 20 Apr 2024 19:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:ef:0d:75:6d:c0:5f:4d:cf:48:3f:b9:18:6d:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 19:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f889afa98ce210478915550855fa01267c75c7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:f0:31:38:0a:e9:c4:f3:73:e8:91:2f:83:
c5:5b:92:b9:eb:25:5c:74:c7:5a:b3:b2:8b:e6:e6:
4a:2c:93:b4:9c:bf:f1:27:ee:18:6c:15:00:59:82:
66:29:36:e1:ae:36:96:a5:dc:0b:f6:26:ec:ae:31:
51:b8:c7:66:f4:4a:42:0e:74:22:6d:9b:d8:c8:ad:
07:2e:c8:7f:7f:26:31:56:70:5a:f8:09:b5:c4:13:
0a:b9:07:61:27:e7:b1:4b:6d:38:26:64:56:90:36:
07:bf:c0:10:32:3c:07:a2:8e:6c:8e:a6:bf:33:2e:
bd:95:78:a7:6a:45:6b:04:09:8f:b9:43:6e:1e:97:
d2:cc:f7:2d:e1:81:fb:1d:b5:d3:20:d6:e7:ef:8d:
35:6d:f0:d6:20:8c:41:21:d6:0c:d6:09:e4:d5:6d:
3d:1b:67:36:1a:af:80:66:ae:d7:e5:91:e4:d5:41:
d9:22:f5:f0:33:d8:c8:6a:5a:4f:c2:60:d3:15:aa:
19:c4:0e:8e:a1:c3:49:93:a0:cd:27:b5:55:43:3b:
46:82:b4:89:b1:81:20:98:b7:9a:d7:23:c6:5a:5b:
cc:92:1b:67:ed:09:76:41:78:6e:ea:45:c8:53:8d:
13:14:d2:5a:51:02:27:b4:72:10:a9:6c:e4:5a:5a:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:AF:A9:8C:E2:10:47:89:15:55:08:55:FA:01:26:7C:75:C7:C0
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-ImvqYziEEeJFVUIVfoBJnx1x8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:d4:0f:38:65:44:cc:44:44:dd:78:94:5b:d2:61:3f:f7:45:
71:6d:69:fa:3d:9a:2e:4b:39:24:80:55:d4:f8:30:a3:a6:bb:
af:31:64:bf:52:03:f7:f6:fb:5b:04:ac:c5:44:5a:58:f8:4c:
ec:49:1f:69:74:aa:b4:a4:a2:58:41:92:ba:55:11:63:0a:6d:
ca:11:5b:56:7b:c7:22:55:26:82:4e:1f:34:09:e9:52:67:df:
9f:bc:f4:77:8e:58:53:14:57:de:77:b1:c6:52:ad:65:63:03:
56:bd:f5:41:fd:64:60:92:d0:60:f6:c9:43:d1:64:c5:8f:42:
82:b4:1e:ce:64:f1:52:5e:cd:77:43:27:c2:38:c1:5d:f3:87:
23:be:ba:32:cb:15:c9:8c:51:b5:63:80:e4:fc:ec:f8:e2:6d:
84:66:ea:43:05:37:dd:06:39:9a:d0:04:79:36:23:c9:ba:6b:
a9:25:4d:d8:c5:97:5b:02:49:37:ca:0e:0f:a5:30:07:42:86:
c2:d5:a1:89:6c:da:f4:ce:c3:5b:c1:63:44:e0:10:c8:dc:12:
87:fd:ec:1e:17:f2:fd:a4:0e:31:3b:17:c4:43:af:06:35:ff:
e2:44:ab:ec:8a:f7:3f:28:56:a4:17:bc:a9:f7:9b:b8:01:aa:
96:74:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:58 2024 by rpki-client on console-ams.rpki-client.org