Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WBPjcNmqD5mwIXJcdD-Clozd4i4.roa
File: WBPjcNmqD5mwIXJcdD-Clozd4i4.roa (raw, json)
Hash identifier: MVtsPca+/XvAmCIlQf3Q/yUlseM27Y66OCREGPa9hXc=
Subject key identifier: 58:13:E3:70:D9:AA:0F:99:B0:21:72:5C:74:3F:82:96:8C:DD:E2:2E
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F67FE1813309F6D3685C325D482C1CD0E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WBPjcNmqD5mwIXJcdD-Clozd4i4.roa
Signing time: Sat 11 May 2024 14:10:56 +0000
ROA not before: Sat 11 May 2024 14:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:67:fe:18:13:30:9f:6d:36:85:c3:25:d4:82:c1:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 14:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5813e370d9aa0f99b021725c743f82968cdde22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:eb:33:da:b0:a4:47:60:ea:26:aa:a1:a8:
62:48:52:6f:86:3b:68:c1:45:79:48:f7:db:1b:fd:
da:2f:e0:1d:fe:ab:61:bc:59:8f:d6:15:12:63:d7:
09:74:72:06:f9:1b:96:e2:59:ce:39:f4:93:ca:c7:
88:ea:f4:0c:e4:bc:aa:33:cb:7f:bc:ab:de:39:f1:
3a:5f:3b:79:cb:d8:f9:96:7c:a4:ea:92:4f:68:91:
30:91:8f:fe:c0:f1:63:6b:29:3c:c1:ad:18:60:fb:
07:d7:1b:3b:59:eb:6f:92:aa:b1:a9:e6:e0:b3:bc:
ec:8d:fe:85:c5:22:fa:e5:b5:1a:3d:c0:46:36:48:
cd:60:13:17:e0:e8:03:1f:5c:1e:88:83:5c:4e:cd:
db:28:4e:e8:b1:02:08:5f:8c:46:8d:7d:0d:9b:9d:
b6:f6:42:f2:c2:0d:68:70:78:9d:0b:83:21:ea:83:
69:10:5a:5a:30:5c:3e:cb:10:5b:0e:b1:6a:6e:ee:
cc:bc:ca:a9:6d:6a:57:ac:14:8b:5e:3e:54:90:f4:
25:1e:98:6f:8f:98:c7:e9:22:c3:46:1a:69:df:c5:
e0:36:ac:c1:ce:ef:89:5a:f2:23:ed:82:d3:d8:64:
e2:6f:3b:11:cf:88:93:c4:4c:6e:15:75:d2:1c:54:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:E3:70:D9:AA:0F:99:B0:21:72:5C:74:3F:82:96:8C:DD:E2:2E
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WBPjcNmqD5mwIXJcdD-Clozd4i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:0c:40:13:b4:ed:02:4f:6c:dd:26:0b:cf:5e:8d:20:f1:ac:
93:a9:23:c2:31:fb:b8:cf:98:0c:6b:5b:e0:bb:47:32:91:f9:
df:15:c6:64:3d:6d:fc:f9:7a:6f:9e:91:5f:58:a1:20:fe:b7:
80:84:a5:dc:ad:bc:f3:18:8b:62:5b:a3:86:ac:eb:75:39:7b:
34:de:0d:f8:ac:c7:ff:58:87:5d:d0:f6:14:08:31:ad:f0:21:
b1:41:cd:ce:a3:83:06:a1:6d:d8:7a:c0:8e:59:a8:c7:52:97:
9b:a6:71:e7:37:72:2d:5f:5f:c2:0e:20:9d:df:99:1e:41:f5:
94:53:7c:11:b4:56:f0:b7:ba:18:4c:98:bf:98:3a:7c:79:82:
15:ef:ef:57:86:1b:5b:d4:16:c7:26:32:f2:9f:13:6d:29:8f:
8b:ec:d6:2a:00:46:02:7e:8d:4f:d1:e4:e9:53:74:d1:7b:b7:
b0:70:71:40:18:9c:47:dd:7c:8a:95:5a:20:7d:1e:cf:c1:20:
0e:48:99:5d:a2:c9:4d:c4:04:c4:7f:73:ca:0e:ec:3f:eb:6a:
99:ff:6a:df:f8:74:db:85:cf:d9:b4:87:2e:bb:d8:99:f2:fc:
e2:a1:22:f3:5a:04:58:25:1d:cd:80:a7:70:91:aa:4e:8d:6f:
55:4f:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org