Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QUbqwwx032PSvxe9XZN3y7g3PHg.roa
File: QUbqwwx032PSvxe9XZN3y7g3PHg.roa (raw, json)
Hash identifier: 86fK53dZ4IcnGPea4JsalX1Lmj99jNeqNtZXVCEArRs=
Subject key identifier: 41:46:EA:C3:0C:74:DF:63:D2:BF:17:BD:5D:93:77:CB:B8:37:3C:78
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F46BAC691C306C31D85438EFE28EE929E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QUbqwwx032PSvxe9XZN3y7g3PHg.roa
Signing time: Sun 05 May 2024 03:09:56 +0000
ROA not before: Sun 05 May 2024 03:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:ba:c6:91:c3:06:c3:1d:85:43:8e:fe:28:ee:92:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 03:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4146eac30c74df63d2bf17bd5d9377cbb8373c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:db:8b:90:5f:68:53:a7:47:3c:71:68:31:
d8:22:b4:48:c4:9c:3f:74:32:67:7c:a4:1e:29:75:
4e:34:7b:7b:13:32:59:b5:59:5d:6a:67:eb:d7:1e:
5a:72:54:ad:f4:f5:8f:31:33:48:b9:d7:6e:c9:00:
14:f1:33:8a:90:df:43:e6:8d:a2:dd:58:1d:61:1f:
2c:47:a4:90:9d:46:17:c5:b6:26:87:e0:a1:3a:d3:
d0:61:16:21:02:70:17:0f:ac:9b:7c:95:02:5c:cc:
e7:72:1b:68:d1:15:28:82:5e:78:9e:3b:03:de:cf:
1a:26:1e:86:82:a6:c5:d5:cc:de:5c:6b:90:2e:2b:
39:95:b9:6a:ee:9b:cf:84:9f:4b:57:e6:12:96:c9:
bb:f1:94:7f:66:98:fd:58:c4:02:04:bc:ea:3e:6c:
26:0f:1a:4f:58:c7:de:34:b9:08:9b:d1:ad:50:dc:
99:fe:2c:0e:2e:93:3b:ef:15:97:20:57:56:43:93:
66:66:4d:1a:bf:05:0e:d7:25:bf:9d:dd:82:d2:67:
b0:a2:40:38:39:91:8d:9e:de:d5:fc:67:5b:4d:72:
16:f3:92:41:d5:a2:b2:bc:5d:35:2b:12:89:3b:bd:
84:6b:c2:8a:93:bd:20:2c:34:cc:74:fd:da:ce:53:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:EA:C3:0C:74:DF:63:D2:BF:17:BD:5D:93:77:CB:B8:37:3C:78
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QUbqwwx032PSvxe9XZN3y7g3PHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2f:81:7d:4c:06:11:1a:a7:36:bd:a3:d6:5b:22:35:7f:31:
4f:9a:09:9a:67:7c:98:90:ab:43:75:9a:2e:df:19:ae:2d:03:
c4:d6:6d:4d:ab:52:17:cf:16:8c:10:c5:fd:f3:ff:47:03:d1:
67:66:27:f5:77:6a:a3:c7:0d:3d:22:a1:e9:a7:b2:82:46:fa:
a5:76:c7:20:de:ea:c6:df:ef:45:fa:88:d7:9d:d6:9a:18:ec:
23:01:1a:8e:d2:39:8f:d7:0e:be:69:3c:2f:42:51:98:d3:ff:
5a:88:bc:17:85:f8:79:45:2b:41:da:b8:2a:66:08:cb:c8:64:
2a:ba:1d:14:21:b1:65:67:2f:81:09:82:81:3a:cd:8d:01:b2:
9c:0c:17:3a:e6:5b:7d:ea:7b:01:ae:c4:07:cb:53:cb:4a:2f:
ce:04:4a:0f:7f:dd:87:42:f6:e9:f7:ec:95:c4:b2:42:e3:61:
65:b4:31:1d:2b:63:43:72:2b:47:69:d7:b4:a8:19:da:db:dd:
d1:98:4d:e0:28:42:a3:41:17:58:9e:83:c4:c2:a3:63:e5:d9:
16:7f:ba:16:04:c1:f8:c6:b9:95:ec:6d:8c:cd:2f:21:af:99:
17:04:12:79:30:0f:fb:0b:90:b9:cf:a2:9a:5b:f1:e9:d3:26:
f4:0b:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org