Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PBOzrmoE17Zh2Mk4BFNHJIDln8o.roa
File: PBOzrmoE17Zh2Mk4BFNHJIDln8o.roa (raw, json)
Hash identifier: AyaJAHlufM6Qkrx6wSkcJ/CNyeK2o/ctvqY1G2q9ixc=
Subject key identifier: 3C:13:B3:AE:6A:04:D7:B6:61:D8:C9:38:04:53:47:24:80:E5:9F:CA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6A2453BEC7159B2FEA08722BE16BFF2A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PBOzrmoE17Zh2Mk4BFNHJIDln8o.roa
Signing time: Sun 12 May 2024 00:11:56 +0000
ROA not before: Sun 12 May 2024 00:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6a:24:53:be:c7:15:9b:2f:ea:08:72:2b:e1:6b:ff:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 00:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c13b3ae6a04d7b661d8c9380453472480e59fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:32:a0:41:06:77:73:9b:13:31:eb:d8:b4:
1e:61:88:21:5b:73:e9:bc:dc:c3:14:6c:b2:d3:70:
dd:7e:6c:0a:7c:5f:3e:b2:f6:cb:fe:3b:ae:eb:5c:
f9:6f:08:9a:e8:95:63:f5:00:66:28:05:23:dd:7f:
62:af:ab:71:44:41:c9:cb:9f:0e:4c:32:ce:85:97:
76:f3:64:3a:a8:1f:84:9f:26:05:b0:be:5b:85:59:
94:ea:2e:45:57:75:00:2d:70:c0:f9:d0:1c:3e:58:
67:d9:33:d5:32:db:01:f2:a7:72:f1:63:61:b2:0f:
56:eb:0e:67:a3:9a:74:98:12:e3:0f:68:12:fa:8b:
39:1b:f5:1b:d1:bb:e9:3b:e2:9d:ec:26:55:64:7a:
3e:52:b2:40:b1:96:63:e4:23:80:01:f7:29:d0:45:
a5:00:0f:94:8f:5c:f0:8b:31:91:6d:df:ab:12:95:
0a:c6:2b:ce:60:0a:78:df:c3:d3:50:4f:81:89:08:
8c:8e:3b:44:05:2c:e8:19:16:c4:40:b3:22:b5:b0:
bb:29:31:33:ef:90:11:03:17:10:3e:e0:89:b9:d5:
2f:7d:d1:f1:3e:23:cc:d7:3f:99:06:d5:d9:9d:ec:
95:84:9f:db:4e:a5:6c:37:bf:83:5f:5b:35:a2:28:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:B3:AE:6A:04:D7:B6:61:D8:C9:38:04:53:47:24:80:E5:9F:CA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PBOzrmoE17Zh2Mk4BFNHJIDln8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:a6:ec:be:b4:bf:f6:ce:30:92:23:3e:46:27:7f:71:e2:d2:
97:40:88:09:c7:d8:d5:37:68:7b:25:f1:22:39:23:ba:09:bd:
9d:c4:b4:75:e3:e9:07:5e:6f:91:2e:b3:49:67:f8:93:03:cb:
49:a5:e2:5a:30:bc:4a:03:c0:3f:d6:a7:27:56:f1:59:2b:03:
b8:b0:30:13:8f:c7:cd:ae:3e:50:5c:c0:d6:d4:65:bc:6e:7a:
b7:be:19:df:50:91:15:9b:f2:4f:ce:ee:6f:da:fb:68:4e:ba:
eb:25:fb:31:59:6a:24:3f:dc:4a:09:c0:cb:fc:30:8b:3d:26:
4e:3e:a1:5b:7d:d9:c0:49:99:37:4d:bc:9f:f5:f2:79:ca:5f:
61:bb:8e:c6:b5:24:9b:7e:e4:ee:ec:bc:4a:e8:a1:25:8d:56:
6a:f4:cd:cf:20:7c:a6:b8:d6:54:5a:70:b3:35:d4:4f:cc:4c:
26:4e:4f:1c:a1:0d:23:e7:03:30:b9:0d:03:bf:54:af:f5:1a:
8d:af:e2:b6:ab:91:06:8d:4f:8f:03:0c:38:27:5a:24:07:9d:
18:58:3b:2d:09:f9:ff:45:ce:d6:e2:7f:1d:85:a1:d7:29:3e:
e9:b5:00:73:fb:92:79:cc:28:9e:f6:61:1d:b8:52:9d:77:00:
b8:cf:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org