Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/XEpV40MuAp_iNhJX40hiV17uxU4.roa
File: XEpV40MuAp_iNhJX40hiV17uxU4.roa (raw, json)
Hash identifier: hMLV262dcdScEuG+V5rQrHuUlRAO6WIomHVjE8EN84c=
Subject key identifier: 5C:4A:55:E3:43:2E:02:9F:E2:36:12:57:E3:48:62:57:5E:EE:C5:4E
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5DB24B0A18A6F2F3E363FABB34D5BAE9
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/XEpV40MuAp_iNhJX40hiV17uxU4.roa
Signing time: Thu 09 May 2024 14:11:56 +0000
ROA not before: Thu 09 May 2024 14:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:b2:4b:0a:18:a6:f2:f3:e3:63:fa:bb:34:d5:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 14:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c4a55e3432e029fe2361257e34862575eeec54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:2b:d7:ee:ac:6e:0d:8b:52:71:35:6e:00:
4c:59:a5:6c:0f:6e:85:d1:12:cc:8b:9b:5c:69:be:
e7:11:f0:0b:58:5d:d0:7d:ab:81:1c:a7:cc:4c:6a:
98:cd:2e:83:51:9f:88:d5:c0:dc:5d:14:59:10:66:
f8:2b:45:61:c8:59:dc:93:e9:dc:0b:5d:2c:b2:b4:
00:da:a4:27:12:b1:23:33:0f:28:af:2c:8c:b5:bb:
cc:d2:14:de:91:73:50:38:dc:cc:86:f1:7d:bb:a6:
35:b1:34:a3:3f:0f:d7:21:1b:25:5d:cf:43:62:fa:
c6:a4:bb:6e:b1:e9:c9:14:77:10:88:c8:d0:e9:57:
13:b1:fb:3e:46:fb:56:bd:80:04:ce:cc:be:ad:86:
19:2b:d0:ba:15:d4:1f:99:19:15:74:a1:f8:ff:0a:
2d:96:f0:d9:57:a4:15:30:5c:49:72:17:35:96:0e:
77:98:7f:fd:be:16:a2:22:ca:c0:b6:de:e4:3d:9a:
c8:51:9e:38:5c:af:9d:71:2e:80:a0:48:30:02:37:
ad:02:fb:7a:2d:c9:64:4a:fd:2c:c7:6b:56:25:c8:
31:d0:df:ec:ec:11:db:e3:6a:c8:0f:dd:eb:5a:5a:
e1:fd:72:67:2d:b1:db:4d:0c:2a:31:44:04:d5:7c:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:55:E3:43:2E:02:9F:E2:36:12:57:E3:48:62:57:5E:EE:C5:4E
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/XEpV40MuAp_iNhJX40hiV17uxU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:e6:3d:d4:6e:fe:d1:59:76:1a:b8:43:24:76:23:49:c7:e2:
93:c1:b9:66:0d:ba:cc:c2:7e:81:61:88:95:37:6c:56:ff:ff:
3b:5f:16:96:e4:9b:a3:66:f3:35:67:14:95:25:30:e9:f3:85:
38:86:33:1c:a5:e0:42:d9:10:2d:6c:01:49:8a:da:53:7d:43:
e7:7d:5d:eb:05:1c:db:a0:15:4d:85:71:be:b0:e0:96:cd:6c:
f5:6f:68:2b:a4:72:bc:0f:70:a6:f7:b7:fd:03:49:dc:15:be:
fc:e0:8a:1a:53:b9:10:31:9e:03:1e:76:45:b6:19:5f:6f:8e:
0d:98:56:e4:1f:c8:d6:be:24:73:69:0e:b2:fe:28:b9:78:4b:
1e:2a:84:81:a8:80:94:bc:e9:b8:76:a8:1e:ca:bd:d8:3d:98:
cc:1c:f3:17:93:e8:c5:47:4e:3c:a3:bb:d0:d7:40:21:3d:c4:
07:72:5d:ba:22:71:94:b1:96:27:0d:87:36:7b:d6:75:b9:9a:
bd:81:da:03:9d:33:79:b6:bf:01:0e:32:c6:c0:7a:64:62:d6:
e3:2b:f6:94:c8:14:e3:a7:f0:f5:f2:85:2f:d3:5d:6f:e9:1d:
96:ee:f9:0c:2d:43:5a:ba:34:67:c8:34:18:99:7d:b9:2d:d9:
38:b8:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org