Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Glaq2CbkWLUDFk-N5M81ZOcQziQ.roa
File: Glaq2CbkWLUDFk-N5M81ZOcQziQ.roa (raw, json)
Hash identifier: MguuQM3b3w75acubCzBYI562kY6ca3LRvTC7mamGTFA=
Subject key identifier: 1A:56:AA:D8:26:E4:58:B5:03:16:4F:8D:E4:CF:35:64:E7:10:CE:24
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F94D16F47274FCF76499B4624131BB140
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Glaq2CbkWLUDFk-N5M81ZOcQziQ.roa
Signing time: Mon 20 May 2024 07:05:04 +0000
ROA not before: Mon 20 May 2024 07:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:94d1:790/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:d1:6f:47:27:4f:cf:76:49:9b:46:24:13:1b:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 07:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a56aad826e458b503164f8de4cf3564e710ce24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:9b:91:dd:78:12:a6:62:ba:1f:e4:fa:f4:
dd:11:ae:70:24:0a:2f:db:ba:c2:3a:80:3a:bc:2c:
46:6b:88:c1:f3:ad:87:6d:75:77:1c:22:20:8a:31:
09:85:ba:58:25:74:e7:a0:ae:61:c3:73:1c:d6:93:
32:7a:19:3f:d8:37:65:45:a9:5d:70:26:3a:85:6c:
3c:bc:c7:bc:e8:bc:d8:d3:1a:90:f6:9f:28:7d:1a:
35:82:72:0d:9f:43:db:7a:01:27:cf:63:17:8f:ba:
f8:1e:a9:05:d7:45:5c:49:c9:00:ec:db:a4:ae:2a:
3b:44:03:81:17:b9:4d:5d:f2:50:49:30:89:26:78:
f2:a2:eb:4e:17:6b:a8:8e:9c:0d:ff:01:29:d3:c7:
89:53:11:f4:ce:fe:d6:bc:83:0d:e6:e6:fc:f8:97:
c1:4b:cd:63:29:04:4f:22:f6:b3:3f:80:cc:ad:87:
d3:e8:33:34:fe:3b:3a:df:38:53:df:d8:90:46:e3:
05:e8:7e:e7:e0:8c:84:4c:a8:11:bc:94:dc:41:09:
a8:34:0b:4a:49:5f:15:06:a5:4c:16:f3:bc:a7:7d:
cc:48:51:6f:ef:47:6d:65:57:e0:93:af:df:cf:75:
8b:74:27:b4:66:a7:5c:f1:4f:a9:84:70:43:aa:eb:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:AA:D8:26:E4:58:B5:03:16:4F:8D:E4:CF:35:64:E7:10:CE:24
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Glaq2CbkWLUDFk-N5M81ZOcQziQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:b3:76:94:2d:fd:11:59:75:cf:d2:12:2c:4f:41:49:48:c7:
51:5f:3c:29:2b:37:8a:bb:aa:c0:91:7e:e7:4b:8f:17:0c:89:
cc:30:66:c9:2c:1c:a2:b6:0e:98:b4:b0:61:57:be:ff:83:72:
95:b0:03:fd:1d:88:f0:e3:83:84:b0:91:41:37:3a:e0:3d:b3:
eb:7e:0e:d5:7f:37:bc:f7:b6:f1:07:60:8b:b8:22:20:08:2c:
00:be:70:6a:0a:33:3e:75:6d:d7:16:25:22:2c:8d:9c:e6:da:
a9:3f:f0:d7:c8:b6:a5:14:d1:75:09:ad:2c:3a:a4:e0:a1:fa:
2c:e6:8b:6a:24:dd:71:8c:9b:4d:f4:32:4e:3e:c6:33:06:3c:
d0:9f:4b:de:6c:a9:c3:2a:de:d6:b4:24:84:3f:9b:4d:64:8c:
ca:b6:d5:62:0a:77:02:b5:7f:b1:d1:3f:84:23:58:3c:8d:7c:
c8:86:38:35:95:35:5c:ef:b2:3f:2a:00:a6:10:6d:53:9b:c8:
b1:76:39:9a:18:a5:e6:c2:7f:8c:3a:68:da:65:58:d8:a4:9b:
c1:85:43:73:26:ae:ef:e3:61:1f:85:25:5b:b7:f2:49:51:91:
ee:3e:56:f3:0a:ed:d4:e4:05:83:46:f3:8c:41:5c:63:53:9e:
c8:c4:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org