Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6dJZAvHrBkkRBPFkhpbyYFrmDYI.roa
File: 6dJZAvHrBkkRBPFkhpbyYFrmDYI.roa (raw, json)
Hash identifier: e3xfPDUj+5PGBHTNR2/S1VRh19q4+R7y18mQwkMzjVU=
Subject key identifier: E9:D2:59:02:F1:EB:06:49:11:04:F1:64:86:96:F2:60:5A:E6:0D:82
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4272E331E8D78AC528341362E0428007
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6dJZAvHrBkkRBPFkhpbyYFrmDYI.roa
Signing time: Sat 04 May 2024 07:12:56 +0000
ROA not before: Sat 04 May 2024 07:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:72:e3:31:e8:d7:8a:c5:28:34:13:62:e0:42:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 4 07:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9d25902f1eb06491104f1648696f2605ae60d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:25:e8:0b:26:0d:d0:69:b8:a1:3f:7a:9b:
9e:99:d7:f5:b7:2b:dd:97:22:2d:7e:53:dc:23:5e:
ad:8d:bb:75:f3:92:6f:9e:c1:07:53:17:b4:43:b5:
ae:a8:6f:99:b1:b0:7f:3b:c0:c0:e9:a3:08:b4:d5:
a3:79:73:26:23:ca:3a:ce:d5:97:37:90:4f:b9:84:
64:7f:0a:19:d7:28:06:8e:86:80:33:01:81:89:af:
68:9c:8f:3c:23:a1:ef:1b:d1:00:37:ac:96:f6:d3:
92:db:5d:db:20:ae:41:43:82:2c:cf:e1:44:d1:1c:
c6:80:9f:4a:5c:23:96:ed:31:7e:26:6d:0b:42:ee:
6d:b5:c9:5b:05:59:a6:c1:e0:42:d4:15:ec:50:50:
a3:ba:44:61:ce:ac:1c:31:a6:e6:8c:0d:1c:27:1b:
18:cf:be:3a:5e:ac:57:6e:e0:a6:06:cc:f1:29:11:
e6:be:b5:f9:8f:ee:14:df:25:53:a5:25:7a:1d:b3:
89:98:c2:f3:2d:78:61:64:2d:37:28:82:54:9d:26:
d8:c2:19:f9:ac:f8:12:14:2f:04:d6:81:af:88:af:
a3:5a:9c:8b:43:03:49:80:7d:d7:7c:9e:a5:bd:b0:
71:1f:be:0b:ee:43:92:d6:e9:28:b9:c8:ef:ca:1d:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D2:59:02:F1:EB:06:49:11:04:F1:64:86:96:F2:60:5A:E6:0D:82
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6dJZAvHrBkkRBPFkhpbyYFrmDYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:89:75:90:39:b8:d4:c2:ed:d9:9f:91:1c:c5:f3:8f:47:0b:
fb:2f:92:5d:76:66:af:8b:77:63:55:8f:d2:35:9e:05:b7:bc:
c3:43:01:56:a2:20:19:fd:d6:b0:ef:8b:eb:7a:4b:75:ce:6e:
98:cb:3a:69:43:2e:cf:6c:06:a0:ae:aa:11:59:87:ce:01:5f:
6a:bc:ee:9c:16:fe:85:2e:49:27:b8:59:a1:72:c8:c8:e6:eb:
2a:23:ca:09:1a:c6:6d:c3:d7:26:2f:17:5c:77:2f:1a:a9:a1:
ab:90:39:37:18:c3:30:64:ed:50:7d:b3:5d:11:47:25:61:02:
eb:b2:4e:e5:aa:63:6c:bb:0d:25:1d:b7:98:42:33:a1:b4:9b:
38:8b:ca:cf:cb:65:ba:44:5e:fd:92:bc:15:dc:e1:43:d1:f4:
e4:fe:51:be:30:ac:21:96:6f:93:b4:68:89:b7:82:9a:62:0c:
ea:5f:27:c2:de:4a:6f:42:98:e3:de:80:55:58:52:be:dc:c4:
e8:13:b8:7f:9a:f7:9a:cd:d8:c7:89:ff:e4:25:8c:59:4b:84:
0d:87:4d:64:2b:54:90:95:94:c6:bb:e9:34:84:c6:27:d7:32:
4c:0c:5e:0c:81:ac:05:84:42:74:04:b6:f2:d5:27:5d:31:1c:
bf:98:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org