Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TyT19KWGvi6ELV1595JD6dV0NKY.roa
File: TyT19KWGvi6ELV1595JD6dV0NKY.roa (raw, json)
Hash identifier: iBPqe8AclugFgFfVYbyiEu11K4VVspxfSfoXYW6rVvg=
Subject key identifier: 4F:24:F5:F4:A5:86:BE:2E:84:2D:5D:79:F7:92:43:E9:D5:74:34:A6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6ED66C11AECB5F4217233FE60708559E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TyT19KWGvi6ELV1595JD6dV0NKY.roa
Signing time: Sun 12 May 2024 22:04:57 +0000
ROA not before: Sun 12 May 2024 22:04:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:6ed5:df56/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:d6:6c:11:ae:cb:5f:42:17:23:3f:e6:07:08:55:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 22:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f24f5f4a586be2e842d5d79f79243e9d57434a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:e0:b8:d7:53:54:45:78:37:38:70:35:b5:
06:d7:93:f5:71:af:6f:48:d3:c9:b1:51:02:25:cb:
5d:a8:39:c3:9e:64:51:ca:6e:e9:4d:d4:79:ca:41:
b5:c4:51:9d:7b:39:5a:24:9f:55:f5:b6:e8:80:63:
46:2d:a4:84:75:24:ea:94:da:9b:05:57:a4:6c:d3:
e0:19:64:18:9b:c0:24:ad:93:43:39:ed:3c:42:32:
a3:0a:cf:11:9e:7a:ac:48:21:04:a3:c3:68:ca:ac:
56:9d:d1:95:e5:a6:04:e7:01:21:86:b3:4c:f4:f7:
8a:fe:b6:a5:70:a6:46:df:9d:c5:61:59:29:20:58:
31:f4:94:af:42:30:a6:f4:e3:bc:01:42:8f:d9:6e:
2c:e3:c3:47:49:d1:cc:30:18:7d:d0:41:71:30:bd:
a0:b8:1b:7e:90:8a:32:18:44:be:9f:01:98:16:1e:
7e:34:64:48:56:d6:70:2d:bc:58:ba:8a:11:1c:7f:
8c:b7:26:23:57:2d:f1:28:10:cf:38:01:8a:89:5b:
2a:d5:6b:70:02:6c:c1:04:64:78:cf:38:ee:e9:5d:
bb:e3:af:da:80:25:93:cd:77:56:1a:3a:79:a2:b4:
b5:0d:b2:3b:63:58:f0:92:65:0a:f6:fd:10:a9:6f:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:F5:F4:A5:86:BE:2E:84:2D:5D:79:F7:92:43:E9:D5:74:34:A6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TyT19KWGvi6ELV1595JD6dV0NKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:1f:55:ad:06:cf:fc:24:fd:e2:cd:60:a9:ee:ce:fe:5d:59:
a1:25:f8:c5:59:76:65:eb:3d:80:ca:2c:c2:c6:51:8a:c5:63:
c0:25:bc:d8:61:27:a5:c4:f2:89:70:b4:41:43:2c:04:b0:8d:
06:91:61:21:d9:f1:e9:e3:d6:ea:ed:bb:88:40:d7:6b:36:f9:
66:54:c6:ae:3f:aa:aa:a0:2e:f5:9d:6d:13:68:a8:81:ad:c4:
73:f1:00:85:ab:b5:40:22:8c:47:a5:d4:3d:c1:96:32:1a:5c:
ea:ae:b3:74:81:98:3d:73:d6:61:89:26:d2:5e:55:7e:85:ad:
4f:9b:53:5d:89:e0:fd:97:15:6b:5e:58:c8:5e:47:49:d2:14:
93:16:72:78:82:f5:7f:d4:18:0a:d6:01:12:91:05:38:16:4a:
a6:75:f0:4f:52:7b:e3:08:7b:61:34:b1:42:6a:91:9b:98:a6:
70:38:0e:d7:31:36:6a:f1:f6:c7:af:68:0f:3a:82:f6:90:37:
90:66:d4:ac:7b:01:be:5c:fb:36:54:f0:4c:f6:48:d6:89:f6:
8a:52:7d:62:0c:2b:2f:81:59:d4:2c:7c:12:1e:f6:cf:e2:44:
2d:02:b7:1a:a3:28:fa:69:66:61:aa:25:2b:f1:49:99:68:86:
ff:84:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org