Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JOzZ5CbKwWrYJIMn59OYq_KaBxo.roa
File: JOzZ5CbKwWrYJIMn59OYq_KaBxo.roa (raw, json)
Hash identifier: gaZGh1ODqR+dY+TOitVGh7TKFitMnyY3MV2zD0zXOlU=
Subject key identifier: 24:EC:D9:E4:26:CA:C1:6A:D8:24:83:27:E7:D3:98:AB:F2:9A:07:1A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3C71B7A661A30CFE7655DB44792BC78A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JOzZ5CbKwWrYJIMn59OYq_KaBxo.roa
Signing time: Fri 03 May 2024 03:13:56 +0000
ROA not before: Fri 03 May 2024 03:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:71:b7:a6:61:a3:0c:fe:76:55:db:44:79:2b:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 3 03:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ecd9e426cac16ad8248327e7d398abf29a071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:6b:9b:38:de:6c:a5:43:17:5a:00:0b:80:
3a:16:ce:fe:40:59:e0:93:ec:0f:66:8e:14:e4:7e:
fe:c3:f3:d3:d2:4e:83:f8:d4:2b:62:50:ec:21:82:
28:45:5f:77:94:a3:92:ea:92:13:ec:e6:21:c2:82:
29:9e:6b:f9:7c:c4:cb:a8:82:cf:42:ec:db:bb:d7:
b4:3e:60:f9:27:58:05:cf:ba:63:9a:19:52:0c:fe:
19:f4:d5:6e:7e:1b:46:03:5f:89:f1:cf:ea:4f:ea:
16:24:01:f6:cc:f3:7b:20:c0:c5:0e:d3:8c:a6:09:
13:fc:66:32:2e:e7:58:eb:17:11:58:82:d7:d4:27:
84:a3:d5:29:07:ec:38:b4:b8:49:bf:f4:ce:bf:cd:
90:3a:49:f5:d2:a8:dd:7e:8d:41:70:bf:19:0c:c2:
67:98:08:db:8b:cb:35:34:3a:cd:48:13:15:80:4f:
8f:25:ba:93:a2:b9:08:52:45:b0:92:cf:c2:61:1d:
a5:b0:8d:f0:b8:e7:d0:16:d9:32:b3:c0:e3:ae:13:
3a:46:bc:49:ce:4d:13:43:68:1d:10:b9:6f:0a:a2:
e1:15:fb:42:b5:2d:85:65:dc:44:cf:e9:1e:43:d1:
7e:7d:91:b6:c8:fb:68:d3:de:6e:ca:b9:e5:33:a5:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:D9:E4:26:CA:C1:6A:D8:24:83:27:E7:D3:98:AB:F2:9A:07:1A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JOzZ5CbKwWrYJIMn59OYq_KaBxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:c2:1e:b4:42:1d:5c:9d:10:69:7c:90:01:5d:3b:65:e6:5d:
60:d0:cf:0d:3b:cb:b6:de:f8:51:c8:6b:a3:59:20:ea:f1:b3:
00:0c:81:7d:a9:07:d7:ed:2b:cc:b4:a8:2d:4f:94:9b:6c:bd:
e9:dc:dd:e6:6c:8d:1f:3d:75:a5:d4:00:1e:33:4d:08:91:48:
c9:c7:e6:60:fc:13:c6:f8:0b:03:c1:10:03:00:92:3e:a2:72:
99:a8:7f:50:c9:10:be:9a:a0:c5:d2:1a:07:51:78:3a:8f:9a:
d7:0c:d4:46:82:b7:dc:37:85:67:25:6e:ab:6c:c2:65:02:1b:
7e:16:80:a1:aa:7b:d1:80:fc:1a:83:5f:9b:67:55:83:69:f6:
f2:b8:c8:e3:b6:c1:5a:cf:40:2a:2e:59:31:a5:62:ef:42:1a:
ab:af:e3:a6:8e:e5:0a:61:22:15:b4:39:0d:f2:2d:28:05:44:
fe:7d:12:a2:88:0f:24:97:f4:18:63:3b:23:b2:aa:33:c0:6d:
9b:5f:a1:74:99:39:fb:46:01:ee:c6:81:4e:de:7f:8a:ab:25:
9d:ab:76:6e:35:d8:24:90:16:a4:70:9f:20:e9:ff:6f:5f:44:
33:a4:cf:58:bd:88:d5:4f:ab:6a:44:cd:5f:0e:aa:cd:ee:6b:
f8:db:81:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY88cbemYaMM/nZV20R5K8eKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTAzMDMxMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGVjZDllNDI2Y2FjMTZhZDgyNDgzMjdlN2QzOThhYmYyOWEwNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT5rmzjebKVDF1oAC4A6Fs7+QFng
k+wPZo4U5H7+w/PT0k6D+NQrYlDsIYIoRV93lKOS6pIT7OYhwoIpnmv5fMTLqILP
Quzbu9e0PmD5J1gFz7pjmhlSDP4Z9NVufhtGA1+J8c/qT+oWJAH2zPN7IMDFDtOM
pgkT/GYyLudY6xcRWILX1CeEo9UpB+w4tLhJv/TOv82QOkn10qjdfo1BcL8ZDMJn
mAjbi8s1NDrNSBMVgE+PJbqTorkIUkWwks/CYR2lsI3wuOfQFtkys8DjrhM6RrxJ
zk0TQ2gdELlvCqLhFftCtS2FZdxEz+keQ9F+fZG2yPto095uyrnlM6VOwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCTs2eQmysFq2CSDJ+fTmKvymgcaMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvSk96WjVDYkt3V3JZSklNbjU5T1lxX0thQnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABfCHrRCHVydEGl8kAFd
O2XmXWDQzw07y7be+FHIa6NZIOrxswAMgX2pB9ftK8y0qC1PlJtsvenc3eZsjR89
daXUAB4zTQiRSMnH5mD8E8b4CwPBEAMAkj6icpmof1DJEL6aoMXSGgdReDqPmtcM
1EaCt9w3hWclbqtswmUCG34WgKGqe9GA/BqDX5tnVYNp9vK4yOO2wVrPQCouWTGl
Yu9CGquv46aO5QphIhW0OQ3yLSgFRP59EqKIDySX9BhjOyOyqjPAbZtfoXSZOftG
Ae7GgU7ef4qrJZ2rdm412CSQFqRwnyDp/29fRDOkz1i9iNVPq2pEzV8Oqs3ua/jb
gZM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org