Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BL6id2_EYbwj386YF2ZjTzXKKbU.roa
File: BL6id2_EYbwj386YF2ZjTzXKKbU.roa (raw, json)
Hash identifier: 9/WDlNVnt0o9wHnKKVENZGDusMe3i7ChLExVEVu12Xk=
Subject key identifier: 04:BE:A2:77:6F:C4:61:BC:23:DF:CE:98:17:66:63:4F:35:CA:29:B5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8F42B517CD5C142214913E9051E0A798
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BL6id2_EYbwj386YF2ZjTzXKKbU.roa
Signing time: Sun 19 May 2024 05:11:04 +0000
ROA not before: Sun 19 May 2024 05:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:42:b5:17:cd:5c:14:22:14:91:3e:90:51:e0:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 19 05:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04bea2776fc461bc23dfce981766634f35ca29b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:1b:be:15:27:8c:1a:20:a6:e2:a0:cf:b1:
27:60:e8:94:91:e3:eb:fe:09:8a:88:ec:2b:cc:02:
a3:b2:50:ba:44:33:58:e8:f3:c2:02:62:57:93:f4:
53:b2:3e:ca:af:f6:11:55:09:a2:93:0a:4d:72:ef:
5d:c8:94:c7:5d:74:cf:d1:db:b8:aa:47:78:75:15:
b4:23:53:9c:44:e9:b1:a1:3c:42:21:04:e3:36:2a:
a9:ee:f4:3c:64:e4:96:79:85:d0:11:65:ae:c5:d9:
cc:1a:02:ce:54:48:96:bf:4a:40:a3:a9:88:b2:3a:
79:a2:0f:59:df:59:ac:5b:90:65:c7:0b:b1:0b:b8:
38:d2:2b:f9:b0:e8:62:6d:27:c2:7f:c4:74:d4:43:
7f:53:d8:af:67:f9:93:59:f4:5d:62:9e:79:45:fa:
f7:06:ef:e4:55:b4:a1:e9:3b:e7:b0:83:71:f0:45:
7b:3a:b9:ec:3a:ab:ea:fc:87:1f:ec:db:e5:5e:a8:
6d:fa:eb:01:06:b0:08:aa:01:e8:f0:d5:ec:20:a0:
fe:f3:6a:2e:ab:28:f6:5d:1a:ff:85:34:10:9d:46:
b4:14:d4:92:ef:e0:e7:9b:bf:a6:6e:7a:7f:3c:54:
e3:16:17:2d:d5:9b:88:f2:87:e5:f0:27:eb:5b:a2:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:A2:77:6F:C4:61:BC:23:DF:CE:98:17:66:63:4F:35:CA:29:B5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BL6id2_EYbwj386YF2ZjTzXKKbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:02:c4:9e:b3:20:ff:46:96:7d:c2:c2:de:82:9f:29:b7:1b:
5a:b2:d9:c7:3a:50:9f:a5:79:08:20:78:e5:a1:8f:b0:7e:b3:
c3:6e:52:19:75:25:fb:21:0e:96:6d:d4:9e:7a:88:57:0b:50:
e8:16:74:65:b1:a4:19:ba:8b:4f:19:8f:3b:50:6a:41:1c:ce:
33:e1:d7:35:e7:d9:3a:6b:93:ac:bd:54:7f:c2:e8:e2:66:02:
5b:43:4a:f8:5b:c2:d6:3f:0d:82:d3:f2:3b:69:91:4c:77:81:
3f:cb:ad:82:e1:9e:57:09:f1:c8:9f:ea:e5:a3:63:06:d0:8a:
b9:82:56:42:cb:5d:3b:60:6d:c0:0c:fc:c3:1d:d0:8b:61:94:
3e:79:2c:2f:a4:9a:e5:8b:06:b4:db:9a:23:16:a1:f9:af:f3:
7f:37:86:04:13:ee:89:6e:f5:fe:fc:a4:b3:e5:89:ca:e1:3f:
0a:20:3b:6b:69:f1:99:37:85:84:bd:bb:0e:28:6b:de:f1:80:
f1:fe:c0:d6:50:ed:6f:1d:99:94:52:10:87:38:f3:c7:f9:0d:
35:98:41:4f:58:b0:fc:de:63:dd:81:9d:93:ac:8a:df:a9:6c:
89:3b:5d:bd:5e:9d:26:be:e8:b2:15:b8:cf:c2:9a:3e:bb:4c:
6d:5f:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org