Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EPuLnCuTnlBtQwnqdMWKNiec3-Y.roa
File: EPuLnCuTnlBtQwnqdMWKNiec3-Y.roa (raw, json)
Hash identifier: 8k5D3v9Wi5RandwUD4LdGWhdY4iL05IjoSzjrL5Sk3s=
Subject key identifier: 10:FB:8B:9C:2B:93:9E:50:6D:43:09:EA:74:C5:8A:36:27:9C:DF:E6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4A9A4AD103BAC1F32E12377019C7FF82
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EPuLnCuTnlBtQwnqdMWKNiec3-Y.roa
Signing time: Sun 05 May 2024 21:12:56 +0000
ROA not before: Sun 05 May 2024 21:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:9a:4a:d1:03:ba:c1:f3:2e:12:37:70:19:c7:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 21:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10fb8b9c2b939e506d4309ea74c58a36279cdfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:7b:6b:98:4a:50:00:31:86:21:57:4c:c3:
e2:40:db:0b:27:8d:97:e7:de:1b:2b:c4:39:68:17:
d8:d2:d9:32:e4:f6:70:97:ce:03:01:12:57:a8:bf:
f0:c1:fa:5c:1c:b7:0a:f9:47:86:1c:d6:9a:50:03:
a0:59:48:b2:c6:df:12:ad:90:3c:01:9e:ec:ff:0a:
5a:1c:64:65:a9:26:6d:6a:b3:06:ac:54:64:65:a1:
52:53:3e:6b:25:9b:d6:bc:1d:5b:dd:cc:b6:d3:ab:
43:4e:e1:ea:58:b7:0b:9d:93:31:02:d5:6f:fd:fc:
9b:60:fb:75:eb:c2:45:24:7e:57:74:31:b0:62:7c:
53:bb:78:a7:08:e8:86:34:b0:2d:01:7d:cf:78:ea:
5b:f5:84:2a:52:c3:8d:62:68:90:7f:0e:3c:d7:b4:
ab:a8:14:ee:5e:15:5d:0b:4d:26:6f:43:86:bd:8c:
50:59:bb:83:79:77:4b:95:58:ff:4a:dc:f5:bc:59:
8b:b4:c6:14:34:cb:b0:ba:41:21:1f:23:36:e5:37:
7d:68:5c:1b:25:a7:c8:fa:21:e2:5c:ca:9e:9f:1f:
08:bf:e1:49:c5:c5:59:37:76:ed:68:9d:f4:f3:24:
5a:7e:54:53:d3:c0:14:05:9b:64:a1:22:e8:04:3d:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:8B:9C:2B:93:9E:50:6D:43:09:EA:74:C5:8A:36:27:9C:DF:E6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EPuLnCuTnlBtQwnqdMWKNiec3-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:22:d9:c3:ce:ad:40:9c:3a:8c:c6:1f:5f:85:fe:58:df:58:
2c:27:01:b8:6c:e1:d2:4f:33:9f:28:ef:cf:02:25:5d:bb:98:
c6:35:2a:b8:07:df:dd:72:75:de:6f:c4:ef:08:68:08:7b:a3:
0c:d1:b8:1b:85:a1:e6:b8:6f:ec:91:ac:96:05:ad:c1:f3:db:
66:a0:8a:6f:93:93:58:bf:71:b8:e3:1a:4a:fb:73:fe:b3:be:
de:fd:27:f0:24:e4:14:9a:50:5b:1d:34:87:bd:72:d9:d0:96:
36:af:bd:ed:95:6b:b3:68:c5:71:38:cb:0e:0c:b3:8a:ab:bb:
e6:cd:f9:58:cc:42:21:2b:30:fa:2d:05:3e:49:dc:45:72:bd:
1d:be:ef:00:8e:62:63:a3:21:b1:54:bd:7f:dc:73:b6:7b:37:
55:9f:78:c9:53:46:99:d7:2d:08:0b:b7:b2:0a:fc:1d:97:6a:
b5:82:7b:06:00:c5:94:73:e1:a7:2c:54:5f:fa:0a:ce:05:ab:
15:df:7a:9e:de:6f:45:0b:a3:7c:b3:d0:43:c9:c7:08:8f:63:
4f:32:16:3e:78:35:86:5d:3f:86:f5:07:2e:d8:e3:8e:77:16:
52:57:05:9d:2c:9b:b0:b0:50:7f:ae:d2:99:a2:4c:04:04:79:
94:86:16:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9KmkrRA7rB8y4SN3AZx/+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA1MjExMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGZiOGI5YzJiOTM5ZTUwNmQ0MzA5ZWE3NGM1OGEzNjI3OWNkZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjB7a5hKUAAxhiFXTMPiQNsLJ42X
594bK8Q5aBfY0tky5PZwl84DARJXqL/wwfpcHLcK+UeGHNaaUAOgWUiyxt8SrZA8
AZ7s/wpaHGRlqSZtarMGrFRkZaFSUz5rJZvWvB1b3cy206tDTuHqWLcLnZMxAtVv
/fybYPt168JFJH5XdDGwYnxTu3inCOiGNLAtAX3PeOpb9YQqUsONYmiQfw4817Sr
qBTuXhVdC00mb0OGvYxQWbuDeXdLlVj/Stz1vFmLtMYUNMuwukEhHyM25Td9aFwb
JafI+iHiXMqenx8Iv+FJxcVZN3btaJ308yRaflRT08AUBZtkoSLoBD3JpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBD7i5wrk55QbUMJ6nTFijYnnN/mMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvRVB1TG5DdVRubEJ0UXducWRNV0tOaWVjMy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH4i2cPOrUCcOozGH1+F
/ljfWCwnAbhs4dJPM58o788CJV27mMY1KrgH391ydd5vxO8IaAh7owzRuBuFoea4
b+yRrJYFrcHz22agim+Tk1i/cbjjGkr7c/6zvt79J/Ak5BSaUFsdNIe9ctnQljav
ve2Va7NoxXE4yw4Ms4qru+bN+VjMQiErMPotBT5J3EVyvR2+7wCOYmOjIbFUvX/c
c7Z7N1WfeMlTRpnXLQgLt7IK/B2XarWCewYAxZRz4acsVF/6Cs4FqxXfep7eb0UL
o3yz0EPJxwiPY08yFj54NYZdP4b1By7Y4453FlJXBZ0sm7CwUH+u0pmiTAQEeZSG
FiU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org