Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LcZalXTN5Pa3xFE-3UkRd4RksI.roa
File: 9LcZalXTN5Pa3xFE-3UkRd4RksI.roa (raw, json)
Hash identifier: eQx7/M/knmaBTBBZduZjVJyJBWGeK42hQ0/iP1aZJr8=
Subject key identifier: F4:B7:19:6A:55:D3:37:93:DA:DF:11:44:FB:75:24:45:DE:11:92:C2
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F709447D59CCEB84E5A1D6D90181D3755
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LcZalXTN5Pa3xFE-3UkRd4RksI.roa
Signing time: Mon 13 May 2024 06:11:56 +0000
ROA not before: Mon 13 May 2024 06:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:94:47:d5:9c:ce:b8:4e:5a:1d:6d:90:18:1d:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 13 06:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4b7196a55d33793dadf1144fb752445de1192c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:5a:0c:ee:4f:37:ce:cf:f3:ec:de:6e:58:
c4:7b:f1:6a:8e:73:30:63:a5:60:35:92:02:17:62:
41:a1:47:2a:e2:5e:5e:7b:47:ae:49:b3:e2:c9:cd:
65:78:57:75:b1:8d:cb:48:ee:47:5c:13:d2:86:e8:
18:48:7b:69:a6:19:32:3d:72:98:c0:fd:15:13:07:
57:b3:1e:e1:c4:37:60:54:f4:4e:7f:cb:fb:30:f3:
fe:76:58:b7:7c:8f:0c:5b:02:11:62:99:0d:68:6a:
ed:e6:fc:41:4b:f6:e8:c7:42:3d:70:b7:b7:83:ed:
36:66:31:06:f6:8d:07:09:39:3d:1d:97:70:7c:c6:
4d:d4:2d:53:4d:33:0d:fd:5e:32:f4:20:3f:a7:41:
de:19:1e:9e:75:a2:96:68:cc:23:c6:14:a3:11:f8:
ea:41:37:14:a2:9c:98:d7:07:bb:1d:ca:27:66:b8:
6a:e1:da:17:af:6e:f6:5a:e5:b8:c5:5f:da:59:10:
8d:ea:fa:fb:6d:c5:cc:09:c0:c4:ea:22:65:fc:f9:
7e:55:de:7d:91:7c:ae:f1:60:41:c8:8b:67:d7:bb:
9c:cf:ea:fe:00:73:03:ff:61:e6:b4:86:2e:8b:10:
4a:2a:68:9c:26:04:eb:ad:3c:0d:f8:7c:c6:3b:da:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B7:19:6A:55:D3:37:93:DA:DF:11:44:FB:75:24:45:DE:11:92:C2
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LcZalXTN5Pa3xFE-3UkRd4RksI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:ed:cb:69:43:5e:4e:4d:75:bd:fd:d6:10:f6:5c:ad:dc:29:
e9:a1:44:56:27:07:23:ad:c2:2a:90:b4:98:7c:da:f6:67:3e:
e5:9e:35:21:a7:de:91:6e:0c:55:3e:79:32:ba:56:e9:55:b5:
1b:05:00:3d:a7:fa:2a:b5:1e:aa:77:bd:c3:a3:ff:ab:9f:a1:
5b:93:ab:e9:29:be:42:9f:82:83:cb:36:5f:b0:2a:e6:ae:d0:
78:6d:43:f8:a1:ea:15:59:65:82:0d:b4:c3:61:8c:03:35:89:
3f:7a:f0:78:d8:28:7b:ee:3b:de:99:3f:e5:05:f2:a5:63:57:
23:90:38:fd:53:83:f7:2c:f3:c3:78:2f:79:75:4d:b6:cb:91:
3b:72:68:a0:2a:2e:f7:aa:d9:1e:da:45:a5:4a:9b:0b:7b:ba:
c1:1b:cf:72:40:ec:2a:d7:ee:3b:c6:92:41:5a:83:e6:ac:a9:
e8:21:6e:77:ef:7a:03:a1:3c:ed:32:17:e7:45:98:40:3b:ef:
c1:17:b1:12:ca:4f:bf:7b:be:b7:0c:10:71:35:8f:30:0c:b5:
2f:db:f2:c8:ef:1f:98:23:46:e6:0a:b3:db:0b:dc:41:3d:35:
89:7d:5d:a6:b4:a4:92:94:f4:70:bf:7a:6f:8a:b6:e1:45:34:
79:7f:7e:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9wlEfVnM64TlodbZAYHTdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTEzMDYxMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGI3MTk2YTU1ZDMzNzkzZGFkZjExNDRmYjc1MjQ0NWRlMTE5MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wJaDO5PN87P8+zebljEe/FqjnMw
Y6VgNZICF2JBoUcq4l5ee0euSbPiyc1leFd1sY3LSO5HXBPShugYSHtpphkyPXKY
wP0VEwdXsx7hxDdgVPROf8v7MPP+dli3fI8MWwIRYpkNaGrt5vxBS/box0I9cLe3
g+02ZjEG9o0HCTk9HZdwfMZN1C1TTTMN/V4y9CA/p0HeGR6edaKWaMwjxhSjEfjq
QTcUopyY1we7HconZrhq4doXr272WuW4xV/aWRCN6vr7bcXMCcDE6iJl/Pl+Vd59
kXyu8WBByItn17ucz+r+AHMD/2HmtIYuixBKKmicJgTrrTwN+HzGO9q1SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPS3GWpV0zeT2t8RRPt1JEXeEZLCMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvOUxjWmFsWFRONVBhM3hGRS0zVWtSZDRSa3NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABXty2lDXk5Ndb391hD2
XK3cKemhRFYnByOtwiqQtJh82vZnPuWeNSGn3pFuDFU+eTK6VulVtRsFAD2n+iq1
Hqp3vcOj/6ufoVuTq+kpvkKfgoPLNl+wKuau0HhtQ/ih6hVZZYINtMNhjAM1iT96
8HjYKHvuO96ZP+UF8qVjVyOQOP1Tg/cs88N4L3l1TbbLkTtyaKAqLveq2R7aRaVK
mwt7usEbz3JA7CrX7jvGkkFag+asqeghbnfvegOhPO0yF+dFmEA778EXsRLKT797
vrcMEHE1jzAMtS/b8sjvH5gjRuYKs9sL3EE9NYl9Xaa0pJKU9HC/em+KtuFFNHl/
flI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org