Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UUFRSmdukuMasB2cju46ZlQ5gwU.roa
File: UUFRSmdukuMasB2cju46ZlQ5gwU.roa (raw, json)
Hash identifier: gYp2dl1rPrx4iCVk6Jw4OfMc/9k8YYpHC8tTcNtmlco=
Subject key identifier: 51:41:51:4A:67:6E:92:E3:1A:B0:1D:9C:8E:EE:3A:66:54:39:83:05
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F54E618034C0E16AB8B03470A78BE3751
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UUFRSmdukuMasB2cju46ZlQ5gwU.roa
Signing time: Tue 07 May 2024 21:11:56 +0000
ROA not before: Tue 07 May 2024 21:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:e6:18:03:4c:0e:16:ab:8b:03:47:0a:78:be:37:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 21:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5141514a676e92e31ab01d9c8eee3a6654398305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:a8:fe:61:3b:36:42:5d:6e:dd:78:f7:3c:
9d:5f:3f:3b:78:6f:70:7f:4c:7e:45:1c:5f:ed:90:
a4:3e:a1:b0:9f:82:70:8c:5b:d1:0e:26:a6:17:1b:
e9:e8:46:b4:25:30:6f:c4:db:b4:f4:45:f7:fb:1c:
3d:ed:8b:db:6c:1e:67:ce:e9:50:37:c3:f1:79:6d:
6b:df:0f:0b:5e:1a:96:a0:3b:d4:0a:80:4d:6f:3e:
5c:90:04:1e:5d:2b:82:5a:91:9d:1b:f0:ee:87:c0:
10:04:35:e3:1f:c0:22:65:28:83:84:49:8d:b7:85:
03:57:c2:8a:f4:fd:aa:c7:c6:df:7b:07:96:c1:0d:
11:ff:06:28:c6:56:1c:29:e4:e2:61:95:2a:fc:85:
fe:11:47:97:ff:73:3e:67:ee:8f:7d:f8:7c:a4:76:
00:b9:d0:5d:95:fb:2b:ae:3e:4c:61:ee:dd:e4:41:
27:c7:4e:e0:1b:af:70:41:ba:35:fc:f2:e2:b9:1a:
6a:f3:5a:22:f8:bc:5f:52:d5:37:56:37:a4:02:bc:
45:8d:2c:e9:de:23:60:93:55:e7:6d:8c:44:4b:81:
19:7d:97:4c:4b:49:4e:2f:af:e9:8b:f1:7e:bb:c6:
07:5d:1a:24:d4:30:4e:79:af:cd:8b:c5:c3:0b:12:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:41:51:4A:67:6E:92:E3:1A:B0:1D:9C:8E:EE:3A:66:54:39:83:05
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UUFRSmdukuMasB2cju46ZlQ5gwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:2d:58:bb:fe:da:4a:69:e0:5e:dd:3b:9f:01:b8:07:30:b7:
c2:79:58:50:69:f4:3d:8e:c2:1a:85:90:50:b5:a3:c4:91:e3:
c9:b8:e5:b6:b9:f0:a7:78:00:57:54:ab:af:24:4b:15:d6:5b:
c8:bb:36:7e:d5:1a:db:52:2f:a1:38:2d:8a:a3:bf:9e:f8:09:
85:8c:a6:4f:1c:86:13:8b:ec:39:5c:b5:7e:90:1e:8f:5b:53:
2b:8b:17:0f:c1:6b:49:62:8b:48:83:fe:68:35:c6:d2:4f:ce:
51:d2:1c:59:90:0d:33:f3:a0:9b:b9:c0:68:1b:36:7c:c5:53:
b6:42:ed:7e:34:af:ff:45:1d:e8:ee:53:82:77:f0:49:c5:bd:
6c:7f:ff:61:84:31:2f:97:e2:11:73:f4:d1:3f:81:c4:ad:e0:
fd:5c:ff:38:0a:56:e3:da:f2:d8:6a:48:35:1e:d3:04:24:8e:
8a:98:6b:0e:f1:f6:95:ee:7e:44:6c:09:ee:cd:47:8a:df:07:
73:10:06:82:22:5f:82:02:3a:ac:fe:d6:94:db:4e:7d:7e:ab:
82:ab:19:96:89:57:a2:f1:5f:9d:71:b5:b4:8d:ad:c1:95:d8:
83:cd:83:11:03:06:b2:34:22:b7:95:b0:c6:ac:8d:64:ab:ec:
7a:3e:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org