Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GyWbQqerigpXPbSk8qRvQEJDJE0.roa
File: GyWbQqerigpXPbSk8qRvQEJDJE0.roa (raw, json)
Hash identifier: syDeejjSGugu00n8i+Tbfen3kdHMGy6VFDAQLfJi9jI=
Subject key identifier: 1B:25:9B:42:A7:AB:8A:0A:57:3D:B4:A4:F2:A4:6F:40:42:43:24:4D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F26C4300A4862881E4E2C3E880CE4EDE7
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GyWbQqerigpXPbSk8qRvQEJDJE0.roa
Signing time: Sun 28 Apr 2024 22:12:22 +0000
ROA not before: Sun 28 Apr 2024 22:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:26:c4:30:0a:48:62:88:1e:4e:2c:3e:88:0c:e4:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 28 22:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b259b42a7ab8a0a573db4a4f2a46f404243244d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:e5:81:75:3f:4d:ed:36:d6:26:2b:a2:de:
ec:fe:5e:0b:be:1b:bb:57:7e:c0:e0:b6:c4:44:e8:
4a:e3:ae:c8:3d:f0:62:7d:76:74:e5:5d:9a:20:62:
d1:c4:1a:e6:19:97:36:48:4c:27:7a:a1:70:b4:4c:
bf:3b:8b:18:7f:cc:4e:ef:75:c4:40:32:1d:a6:8f:
a3:55:bd:f4:94:02:bd:9b:73:87:b0:4a:d7:58:6e:
c8:ce:b4:26:a4:8c:b4:b7:a9:15:82:54:05:ef:0d:
07:40:58:53:59:06:3a:f2:23:48:d4:92:b7:66:04:
48:db:32:3e:12:e6:4e:5d:9a:71:64:59:9e:21:4a:
a6:ff:52:04:7c:a9:7c:8f:51:76:08:93:51:2b:f7:
fa:e9:4d:34:c6:76:59:52:1d:c2:13:28:b5:5d:10:
c4:b2:1b:8a:6d:23:83:2c:eb:3c:26:a5:7f:68:e5:
a9:72:e4:0e:88:e6:0a:ac:46:24:5e:e0:51:dc:c3:
ba:ae:f0:2c:1a:df:f3:c4:ee:f1:b9:f7:c3:39:b2:
cf:e7:cd:18:ed:a7:6d:55:46:a4:3d:13:52:23:20:
34:fb:cd:9b:0b:11:37:e9:35:c5:5a:81:02:36:3f:
e1:83:68:5c:70:d5:90:89:59:2f:17:e4:48:dd:b3:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:9B:42:A7:AB:8A:0A:57:3D:B4:A4:F2:A4:6F:40:42:43:24:4D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GyWbQqerigpXPbSk8qRvQEJDJE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
c5:9f:19:1b:b2:6c:81:50:58:0f:74:79:64:72:3f:02:c6:47:
7c:46:80:1b:0e:b9:e8:8c:58:a6:94:0d:96:5b:c1:06:2a:97:
85:64:e5:0e:92:6f:1e:11:4f:ec:9c:78:12:a1:a2:31:69:5f:
d2:d5:bf:45:0e:98:af:08:c6:a3:69:eb:b6:ae:c4:ab:0a:8d:
9c:94:45:ba:ac:d4:89:1e:50:a5:65:96:f9:aa:2d:20:06:98:
46:c7:a1:ad:00:55:16:9a:09:c6:2e:06:8d:5e:c5:ea:a6:77:
2b:90:e3:0f:04:90:11:ad:d6:a9:a0:dc:c6:41:26:ca:9d:75:
7c:6f:73:fe:13:c6:be:08:e0:bc:7c:c4:81:86:05:19:32:6b:
91:b7:1b:7b:14:13:5c:e9:18:65:e4:89:ee:19:a8:e1:5e:b8:
21:f5:fb:9f:94:e7:2b:85:c6:d9:e3:0b:2d:e6:53:01:94:32:
46:c2:1f:f9:35:e8:8e:bd:71:91:0c:ce:25:ae:ab:55:6f:b9:
5f:19:b2:76:91:0d:95:0c:e3:c6:45:5f:9c:23:ea:5c:ae:38:
a3:de:0e:d2:ed:64:09:93:65:1b:cd:25:b1:17:10:75:50:e7:
51:14:4e:38:b0:45:a4:21:7d:fb:c9:47:0b:94:fd:95:00:2d:
69:39:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org