Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I6ECnNuyT48dYJGJkOFBZGJ2xj0.roa
File: I6ECnNuyT48dYJGJkOFBZGJ2xj0.roa (raw, json)
Hash identifier: k8WA0v9AkroQe1QYbJzyQEvVcxtGzza5IV6zc37YYUs=
Subject key identifier: 23:A1:02:9C:DB:B2:4F:8F:1D:60:91:89:90:E1:41:64:62:76:C6:3D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4B751AA4D07B80E345F01D7EC5ADD532
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I6ECnNuyT48dYJGJkOFBZGJ2xj0.roa
Signing time: Mon 06 May 2024 01:11:56 +0000
ROA not before: Mon 06 May 2024 01:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:75:1a:a4:d0:7b:80:e3:45:f0:1d:7e:c5:ad:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 6 01:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a1029cdbb24f8f1d60918990e141646276c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:1d:13:1b:9a:b1:46:cc:35:48:f0:3b:d1:
89:0d:c1:87:2e:42:d1:b5:97:42:0f:5f:9c:47:ad:
ee:f0:91:e1:65:f4:87:9e:89:9f:09:c4:07:cc:de:
52:92:4e:87:db:5c:0b:f1:ce:a7:27:31:8c:fb:4e:
55:54:fa:ba:5b:31:32:bc:5e:3c:ea:44:a4:6a:b7:
9b:c1:2c:6f:fc:f3:c6:fe:c2:0c:5a:79:e9:b1:f3:
0c:e5:46:26:25:cd:e8:20:d0:1a:62:ec:fb:a0:35:
90:73:10:c4:78:3a:9f:3c:c1:25:ee:81:ef:7a:50:
00:d2:18:b5:77:82:31:b4:24:00:cd:da:a6:7e:bb:
a0:da:34:ed:11:d1:5f:25:c7:53:72:89:d6:93:af:
ff:f5:70:93:c4:5f:2b:a7:19:01:99:f5:23:c9:29:
04:5b:d9:37:2d:89:82:e8:30:a9:2f:3d:4a:a9:d7:
98:5d:6f:07:10:63:a6:14:30:71:d9:7f:9b:f6:b1:
49:1d:bd:5b:dc:2b:59:04:65:bd:1b:58:f2:00:87:
3d:84:95:6a:2a:47:d1:02:15:96:05:c5:2a:d8:77:
30:e7:e0:12:03:22:50:68:af:13:0a:4f:78:a6:a5:
31:6b:af:fc:0b:a2:51:ed:63:66:5b:f5:8c:22:7b:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:02:9C:DB:B2:4F:8F:1D:60:91:89:90:E1:41:64:62:76:C6:3D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I6ECnNuyT48dYJGJkOFBZGJ2xj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:3c:fe:b2:a8:4f:0c:d3:95:0a:93:f7:05:b0:74:b7:82:08:
a0:59:d6:5f:8c:86:d6:5a:15:64:61:17:4a:14:db:02:15:1c:
80:ff:46:0f:13:5a:57:95:a2:27:7e:5e:c4:b6:09:36:54:7b:
c5:24:3f:07:88:25:7a:ac:9b:5e:4e:61:95:20:38:f7:0f:c1:
1e:f2:d6:12:ed:f7:98:77:8d:3b:f5:52:2a:24:b4:6b:98:d1:
fe:15:06:fe:e2:46:2a:8f:cb:5e:70:69:ab:1d:d9:d9:45:8d:
3f:c0:34:b0:1c:6e:b2:82:ba:8b:1f:55:7e:05:72:38:ce:38:
ba:a3:04:a9:ec:8a:bb:15:c8:7b:d2:4e:f0:c3:77:91:88:35:
93:84:2c:4b:f1:b1:d6:93:a2:85:3d:88:d6:79:c3:72:76:95:
33:35:49:01:f9:ad:45:8d:2a:8e:6d:c6:a8:03:fc:58:54:47:
62:9e:28:80:7a:02:b0:8b:ea:2a:77:e6:6c:60:52:c3:2c:c6:
a7:60:c4:fd:2e:8b:f0:3f:bd:04:ed:5a:d8:b4:e7:2d:14:b5:
f0:10:97:0c:63:6d:00:ba:bf:6a:dc:72:f1:42:e9:df:81:a7:
be:1d:32:74:40:86:ac:1f:74:9a:a2:fc:4f:ec:09:e0:fd:96:
86:10:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org