Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D_ccuolspxZL8wl2COTVHfB8zTk.roa
File: D_ccuolspxZL8wl2COTVHfB8zTk.roa (raw, json)
Hash identifier: G/CJzHcxL1X/+ffF76oOYOPcgsJYm6It8niYIQ4dAv8=
Subject key identifier: 0F:F7:1C:BA:89:6C:A7:16:4B:F3:09:76:08:E4:D5:1D:F0:7C:CD:39
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F13E02A25E61CF2BAB302A041145A7DFB
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D_ccuolspxZL8wl2COTVHfB8zTk.roa
Signing time: Thu 25 Apr 2024 06:10:08 +0000
ROA not before: Thu 25 Apr 2024 06:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:e0:2a:25:e6:1c:f2:ba:b3:02:a0:41:14:5a:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 06:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff71cba896ca7164bf3097608e4d51df07ccd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:f0:32:c6:69:f3:36:35:56:89:a1:ba:bb:
a2:b6:12:a5:cd:de:2d:fa:3a:29:bf:bc:73:8e:d4:
da:04:fd:54:02:ee:d1:e3:6e:16:4c:df:bc:62:1f:
c7:83:13:4f:c5:69:5b:3b:fb:1a:0a:20:d2:95:ce:
6b:24:94:4b:e8:fe:2b:21:f0:ec:67:c4:5f:ff:47:
9c:9e:0f:ad:c0:08:b8:11:10:b1:fb:94:2a:db:42:
eb:0c:48:b1:7a:89:81:5e:56:00:21:e7:50:a8:9a:
d8:6e:34:f4:a8:5a:45:4e:fd:d3:91:e2:81:23:dc:
3c:06:4f:75:9b:2c:e9:e7:ee:a3:a7:6f:80:7e:7a:
49:fc:2f:58:76:dc:c8:86:58:03:54:d0:18:da:f6:
9b:c2:b6:51:a5:10:fc:b3:ff:ee:7f:ac:c4:4d:11:
08:ed:dd:23:f7:4e:0f:e9:c6:93:63:5c:f1:3c:08:
1f:38:46:ee:54:78:fa:93:e6:53:93:fd:01:8f:e3:
c3:0a:0f:42:12:6f:2a:e9:16:ec:51:01:0d:5f:7b:
2f:b2:a1:61:04:82:63:03:7e:18:df:1a:fe:78:f7:
10:c9:68:30:d8:88:c2:89:3b:ec:00:03:c0:33:b6:
88:59:21:ac:98:4a:8c:67:15:de:44:f8:59:6c:92:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:1C:BA:89:6C:A7:16:4B:F3:09:76:08:E4:D5:1D:F0:7C:CD:39
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D_ccuolspxZL8wl2COTVHfB8zTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
8e:b9:f8:a1:a8:75:f2:5a:2c:d0:d7:6c:2b:fe:10:c8:9c:b6:
ea:81:76:b7:60:1c:9d:65:44:d5:dc:9b:dd:17:f6:b4:fd:ce:
1a:8b:9b:f6:48:38:5d:a4:8e:92:e7:71:c5:00:3c:1f:bf:d7:
09:35:cc:0f:55:52:99:1f:c6:40:83:3b:29:96:81:0f:b4:88:
73:98:b2:62:7d:fa:d5:b3:a8:94:29:ed:76:6b:b9:b2:2b:76:
89:ad:8c:a8:1c:cc:3d:c3:b2:13:7c:57:e6:24:31:9a:0f:4a:
ed:a1:34:d7:c9:23:d5:27:81:80:b4:5f:15:13:84:89:fa:05:
72:2c:96:d1:7b:c8:6c:c7:a9:74:29:82:66:48:f5:9e:2a:3f:
03:d4:74:05:09:c8:2e:ca:46:bc:fa:da:e6:1c:01:fa:54:a8:
27:40:75:4c:65:b4:69:65:a2:1f:05:1a:11:d1:40:11:e1:10:
15:b1:c4:f7:d9:2b:8a:e2:10:8a:68:8a:37:35:9b:4e:6f:bc:
fa:2f:5c:e5:a0:b8:21:ab:1a:7e:f5:06:09:1b:97:d0:18:a3:
34:39:20:09:37:c4:48:33:f4:44:87:c0:b1:d7:9e:a6:dd:8c:
9c:19:a5:87:33:58:2c:6b:e4:a2:fd:e6:bb:9c:c5:09:b4:7a:
b0:39:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org