Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TKJwjDKBkf6QZnoDiMbQIq5Y2gU.roa
File: TKJwjDKBkf6QZnoDiMbQIq5Y2gU.roa (raw, json)
Hash identifier: vo1MAUYomhXjlxAOqIpxL4+KS4YXWNzyMoaDxb+gpQo=
Subject key identifier: 4C:A2:70:8C:32:81:91:FE:90:66:7A:03:88:C6:D0:22:AE:58:DA:05
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F604578AF8D88DCBF023CB3EFBB20F3F5
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TKJwjDKBkf6QZnoDiMbQIq5Y2gU.roa
Signing time: Fri 10 May 2024 02:11:56 +0000
ROA not before: Fri 10 May 2024 02:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:60:45:78:af:8d:88:dc:bf:02:3c:b3:ef:bb:20:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 02:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca2708c328191fe90667a0388c6d022ae58da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:fc:3b:d2:38:9b:91:4a:71:9f:f7:33:d5:
ed:a1:20:37:7f:c5:3d:8e:c3:82:a1:38:4c:d8:88:
72:44:68:c3:2d:3b:cc:94:25:ff:b1:33:c1:c9:15:
08:8a:b2:75:ad:e4:5f:a0:52:09:54:d6:f3:2d:ee:
00:3f:47:7f:ea:dd:89:5c:8e:55:d0:67:20:db:72:
25:ef:6f:f5:8b:4e:7f:aa:41:78:50:06:e5:39:87:
b7:a3:22:25:6e:36:ca:e2:7b:fd:80:1f:d6:e0:fc:
6a:a0:78:2b:b9:a7:2c:01:ae:4e:d5:f9:76:a5:0a:
7c:04:ae:25:62:61:6d:87:e4:f0:ac:af:a4:e6:9e:
00:53:5e:83:a0:36:8b:00:fa:48:b6:b2:d4:72:e5:
48:50:56:4f:f1:55:36:da:29:89:be:54:a7:0a:d0:
8e:ea:b7:c9:c1:da:a6:ed:e9:95:e2:b8:a7:4b:b6:
71:15:0f:f3:30:51:17:e9:78:bf:24:64:38:85:15:
42:38:5b:63:22:0b:52:53:a5:35:59:2b:5e:1e:4e:
90:5e:25:14:06:d4:0f:bc:e3:b3:4f:9c:28:1c:02:
fa:52:be:21:a4:18:57:87:bd:f8:e4:f5:74:9d:e7:
b7:dc:29:7a:2f:20:a4:1b:9f:6b:0e:c9:46:21:e2:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:70:8C:32:81:91:FE:90:66:7A:03:88:C6:D0:22:AE:58:DA:05
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TKJwjDKBkf6QZnoDiMbQIq5Y2gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d5:a0:72:fb:d4:0b:a7:46:8a:4e:9c:2a:43:5d:d7:ff:ce:42:
6e:ad:5f:60:83:4b:ef:81:37:38:f8:ac:11:bf:9a:5c:5f:f8:
9b:c7:84:86:74:13:5b:c9:7d:c4:58:83:fa:8d:d3:d9:5d:b3:
2c:22:85:75:ac:28:5e:78:f4:c3:53:3a:9e:25:ab:11:54:47:
dd:a7:ee:27:6d:e4:c4:4e:c9:0f:08:34:1d:b6:1e:b4:cd:61:
1a:52:ff:af:69:1c:29:be:28:5c:21:85:77:f0:c3:1a:89:eb:
b4:a7:1d:24:9e:20:1c:89:75:cc:8b:10:86:29:d0:48:a7:b7:
8c:2b:6a:ff:41:54:94:c2:b7:e7:d5:a3:40:fd:d4:b5:ae:21:
2b:84:37:2d:4e:2e:77:6d:80:05:7e:9f:86:47:ef:91:c2:5a:
16:b4:27:03:d8:a4:34:d5:8a:43:26:a0:98:f4:9a:b5:0e:40:
cb:da:8f:45:66:f3:0e:02:3c:c4:fe:e0:1a:79:82:b0:4a:a7:
3f:3a:03:ca:0a:e8:b8:1a:ec:ff:73:eb:33:4e:83:b8:f1:ab:
b9:7f:2a:64:f8:24:70:29:f0:b7:8d:a8:dd:71:6b:18:8a:5f:
25:ab:05:fe:00:2d:c6:87:86:e2:99:67:94:b0:4c:96:14:fb:
41:b4:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org