Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2eOi4ucoImSkvxnL3FRtOkZGXzc.roa
File: 2eOi4ucoImSkvxnL3FRtOkZGXzc.roa (raw, json)
Hash identifier: faPvIGHDWXLItGd5fkBzFMDzYz8m0A6ii2hwU5El8xU=
Subject key identifier: D9:E3:A2:E2:E7:28:22:64:A4:BF:19:CB:DC:54:6D:3A:46:46:5F:37
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFBD8BB1F25B18780CB6BE2EC203DBC6A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2eOi4ucoImSkvxnL3FRtOkZGXzc.roa
Signing time: Sat 20 Apr 2024 14:11:08 +0000
ROA not before: Sat 20 Apr 2024 14:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:d8:bb:1f:25:b1:87:80:cb:6b:e2:ec:20:3d:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 14:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9e3a2e2e7282264a4bf19cbdc546d3a46465f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:5e:75:14:7a:64:01:44:c3:35:70:26:e5:
41:b5:cd:0d:ab:35:5a:a8:88:a2:bd:84:8e:81:11:
91:85:3a:3b:9e:e6:17:47:e8:be:36:1b:b7:9f:35:
86:b2:ff:f1:7c:05:5c:fa:32:90:48:83:ec:1a:39:
13:2b:93:e8:69:43:67:30:3c:4d:57:41:96:b3:6c:
b6:78:56:0d:ba:1e:0a:91:e5:0e:5f:fc:ea:3b:51:
e2:e1:e0:d4:4e:62:48:6c:b6:4a:f1:c1:af:3d:e8:
87:0c:7a:1b:a8:03:11:55:9f:8a:3c:b3:79:23:4d:
29:ff:86:8c:b4:af:aa:f5:09:f3:03:45:58:13:cb:
81:d3:3d:53:2d:8f:f0:c5:85:dd:c0:6f:71:1c:ff:
d9:5a:d8:1c:e1:23:41:b8:4b:fd:c9:5b:a7:12:53:
27:04:8f:0c:ce:9f:c9:dc:57:76:c3:86:84:72:3e:
78:97:62:22:13:a7:f4:29:1f:c9:24:00:31:61:f5:
81:f1:33:06:c4:2e:7e:3f:df:7d:00:c9:4c:b6:91:
66:ca:a1:b5:f2:2e:4b:4c:dc:79:2a:e5:1c:1f:e2:
b4:ba:68:15:20:4a:4c:c5:eb:3e:58:2b:25:e0:58:
3f:18:5a:d1:47:09:39:2b:07:6f:46:7a:a3:67:97:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:A2:E2:E7:28:22:64:A4:BF:19:CB:DC:54:6D:3A:46:46:5F:37
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2eOi4ucoImSkvxnL3FRtOkZGXzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:c9:21:9d:e8:f1:de:66:49:c1:ee:e9:c9:2d:85:ae:22:b2:
15:ba:20:88:d7:b9:7e:9c:08:d2:3a:58:7c:82:d8:e8:ad:26:
ed:81:2a:d7:13:18:c2:c7:c0:f3:1e:7a:27:62:79:32:25:ee:
e4:d0:0d:63:a8:4f:21:95:af:8c:ec:45:1e:35:d2:47:27:6a:
8c:17:a4:4d:69:29:f7:d8:52:04:8f:31:51:56:d8:8c:21:33:
f8:23:b4:53:37:42:de:c9:c6:b8:82:d5:6d:e2:88:cd:86:28:
89:78:82:8d:25:27:fc:3c:9d:0b:bd:89:6f:02:4c:63:19:82:
a3:16:ce:fe:24:8f:3c:ca:36:3f:73:6d:9e:04:1b:88:c8:04:
f9:6f:e0:7c:93:5b:80:c5:c1:de:ba:8a:93:f7:aa:26:d3:ea:
7c:ba:f4:3a:3d:0b:b1:4a:b0:18:d4:4a:8c:12:6e:88:74:84:
34:87:e8:4c:fd:4f:cd:ad:a5:8c:eb:76:30:d4:24:c1:c3:6a:
22:dc:e2:01:43:2f:8b:cc:53:f3:bf:5b:fc:82:4a:37:8f:c2:
ef:2b:f9:ae:2b:47:00:6b:e8:1a:fb:7e:69:1b:8c:92:51:88:
6f:4b:0a:82:ab:4e:bd:9c:75:a6:fd:31:6d:e7:a6:0c:6b:9f:
0d:fc:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:58 2024 by rpki-client on console-ams.rpki-client.org