Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J7w-1-bQMO7M6570Nt_MbFBld4E.roa
File: J7w-1-bQMO7M6570Nt_MbFBld4E.roa (raw, json)
Hash identifier: VqjUKATPDoqGybIlO/Xy1R9daPRFgQnbIeEhyPC8QqY=
Subject key identifier: 27:BC:3E:D7:E6:D0:30:EE:CC:EB:9E:F4:36:DF:CC:6C:50:65:77:81
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8ED3EDFB752AC50B15F6B68B1AC9879F
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J7w-1-bQMO7M6570Nt_MbFBld4E.roa
Signing time: Sun 19 May 2024 03:10:04 +0000
ROA not before: Sun 19 May 2024 03:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:d3:ed:fb:75:2a:c5:0b:15:f6:b6:8b:1a:c9:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 19 03:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27bc3ed7e6d030eecceb9ef436dfcc6c50657781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:de:29:f8:e8:4a:2c:ad:08:1e:fb:4e:3e:
de:ca:e7:5b:c5:3b:61:f5:af:37:ec:29:66:cb:97:
bd:f8:95:10:e5:06:1a:54:0f:46:fa:71:1c:c3:30:
d4:e4:4c:5c:c4:f6:b9:34:2f:04:9d:3a:d9:5f:15:
d3:69:cd:79:33:ba:c2:a6:96:d6:12:e9:29:e5:ea:
9f:e9:88:09:9d:d4:57:a3:2e:3d:76:e7:e5:46:17:
19:0d:e8:6a:dd:8b:f4:97:13:cf:e9:8e:2b:d8:c2:
3c:64:58:00:66:f6:e6:2b:0b:f7:15:51:5f:f9:ef:
9a:ff:e0:09:f2:42:f1:d3:62:94:6d:98:40:ff:f7:
50:a4:33:33:30:72:20:e6:5a:b2:b5:d9:dc:25:b2:
4b:9f:f4:cc:e4:7c:61:d7:7d:b2:64:b2:50:59:1c:
3f:1f:d2:a6:68:08:99:c1:3b:bf:fd:f7:80:ab:c5:
26:5c:89:5d:b8:4d:dd:49:13:3b:32:0c:1a:b7:be:
16:6c:76:7b:f1:b8:7f:d6:c7:1d:8e:a5:1d:d1:10:
10:1a:e3:2b:f4:89:98:66:00:41:e1:c1:55:cf:a0:
5c:c3:96:bb:3c:31:0a:20:03:25:29:aa:24:6a:8c:
80:a1:6a:2a:ab:1a:25:2f:35:db:2e:ff:a7:ba:09:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:3E:D7:E6:D0:30:EE:CC:EB:9E:F4:36:DF:CC:6C:50:65:77:81
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J7w-1-bQMO7M6570Nt_MbFBld4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ee:80:09:42:cc:6c:d7:c7:c6:76:4f:ec:e2:1e:63:eb:a6:
d8:a9:85:8b:49:96:d0:02:48:ec:38:af:4c:ad:e6:4a:45:2f:
b0:4b:0b:7b:28:35:c1:5c:00:8e:aa:91:d1:e4:9e:70:4e:96:
7a:91:fe:81:17:ef:ad:b8:18:90:96:be:c1:90:c9:2a:24:bb:
eb:2c:87:a2:cc:6e:38:11:74:47:c9:98:bb:a3:35:48:72:26:
7c:2a:29:f9:41:eb:6c:80:f8:18:e0:6b:35:74:ef:38:d7:2a:
66:2a:c5:05:e4:ee:d0:e6:f8:87:7c:53:a4:30:d0:16:8d:52:
2f:a7:05:bf:cf:4f:ee:c8:27:26:87:99:c0:01:63:59:69:c6:
71:b3:c8:f0:88:a0:95:91:2d:80:7e:b7:b7:c4:fd:d9:48:a0:
44:a0:72:86:c7:d5:e2:82:dc:74:17:d7:82:54:ac:03:c4:bd:
b5:21:20:e3:9f:cb:4c:50:ff:01:3c:c9:b0:a0:6d:cd:e9:02:
59:3a:da:da:96:8e:2c:95:6f:c8:96:b0:57:e1:28:13:45:d5:
7f:b3:21:21:5e:24:d8:a0:da:28:7b:fa:23:83:e5:05:de:37:
d7:cf:bb:d7:1d:12:da:6e:93:78:ae:84:03:92:68:c2:62:fd:
45:bd:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org