Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ai5ugnKCxcJpy_0rLPeWVtHZcFo.roa
File: Ai5ugnKCxcJpy_0rLPeWVtHZcFo.roa (raw, json)
Hash identifier: Td+GAPLlydgrZPlgb1TUEibBkyrGbrwc1YdvKEDPzew=
Subject key identifier: 02:2E:6E:82:72:82:C5:C2:69:CB:FD:2B:2C:F7:96:56:D1:D9:70:5A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6BDCB25637727ABA69B22B98A91907C1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ai5ugnKCxcJpy_0rLPeWVtHZcFo.roa
Signing time: Sun 12 May 2024 08:12:56 +0000
ROA not before: Sun 12 May 2024 08:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:dc:b2:56:37:72:7a:ba:69:b2:2b:98:a9:19:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 08:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=022e6e827282c5c269cbfd2b2cf79656d1d9705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:09:87:90:c4:78:68:fd:3e:cf:c0:a1:34:
eb:76:3b:c0:26:e2:63:78:a4:72:93:3a:1f:a4:28:
7e:af:4c:9d:44:9c:e4:c5:e8:cd:ea:76:15:b9:fa:
18:57:13:d2:a6:81:8f:6a:2e:fc:cd:62:24:75:08:
cd:e5:da:6e:0e:d4:23:54:83:bb:5f:b9:5a:2a:da:
3c:aa:02:d4:79:43:68:40:65:35:c9:e3:8b:40:6e:
74:17:dd:fb:19:f0:21:a6:cc:f0:d6:8e:a0:ad:c6:
8b:24:27:a7:c1:92:ab:26:a3:5b:2e:16:f2:ab:85:
7c:fa:e7:bf:eb:28:c4:4e:10:6b:4a:85:16:9b:6d:
4b:93:f4:d3:0d:c2:ef:e9:d0:1b:46:bd:7a:76:d0:
55:83:a3:c4:6f:e9:d5:84:0f:1a:81:3c:35:76:fe:
c4:22:a0:4c:c3:a4:61:db:bd:b6:27:98:1c:83:63:
f4:9c:0a:3f:b1:39:ad:ab:a3:35:a4:5a:b6:6c:1f:
04:5b:0e:d1:41:5e:5a:0b:3f:16:fc:5a:53:90:27:
bc:dd:d1:18:d1:13:79:af:c5:63:7c:82:d0:8b:45:
0c:37:5d:17:23:47:6e:52:27:ee:6d:72:4b:60:ce:
97:a3:98:89:44:cd:09:ee:23:75:15:4f:d0:1b:15:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:6E:82:72:82:C5:C2:69:CB:FD:2B:2C:F7:96:56:D1:D9:70:5A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ai5ugnKCxcJpy_0rLPeWVtHZcFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:f9:1e:37:ce:de:d6:9c:b6:17:a3:45:8b:ec:ce:4e:05:05:
75:57:22:33:c4:d1:89:4d:1c:6a:02:3f:53:cd:f3:a1:f6:50:
e1:8a:dd:cb:02:ba:7c:62:f8:29:1c:c4:a5:24:6e:be:3f:b1:
bc:e8:5f:2a:d6:50:6e:e3:36:ae:16:79:d8:26:80:6f:62:82:
e0:a2:ec:04:57:37:17:8d:14:9c:9d:50:a9:17:08:f4:5e:ba:
a0:de:4f:b5:da:c5:a0:52:b5:de:5d:32:28:87:0e:17:91:cc:
28:c8:cf:8c:d7:b6:06:a4:4f:5d:2a:9b:f4:a8:a1:f1:bc:25:
91:ac:66:d1:ce:b5:7e:b1:0a:27:1b:14:bb:dc:d5:67:16:2d:
93:64:55:68:3b:08:5d:d2:f8:d1:ff:9a:d3:06:cc:0b:5e:92:
47:e9:15:7c:3a:e5:18:7e:35:ef:15:6a:34:8f:a6:1e:c8:24:
c5:8b:a4:7d:25:19:17:50:ba:18:30:87:1b:a5:2a:c4:ef:c6:
6e:c1:ef:1d:5e:00:ed:26:0d:14:e7:e9:dc:1d:da:8f:3f:2a:
c4:b3:b7:d4:0c:ff:db:47:74:d5:23:ff:99:58:78:67:f6:6b:
ac:54:99:7b:75:b6:54:37:42:7d:8d:4b:01:ab:f9:37:94:1f:
01:cb:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org