Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dv8RUdzSSJ4hksr1_VnBbDMrp_8.roa
File: dv8RUdzSSJ4hksr1_VnBbDMrp_8.roa (raw, json)
Hash identifier: OO+7mNwrm//gpRau0GaDoF0yFiu8g3jNt2K7qUr/tI8=
Subject key identifier: 76:FF:11:51:DC:D2:48:9E:21:92:CA:F5:FD:59:C1:6C:33:2B:A7:FF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFD5A2C3B0B858FE8644042B6DB616D3E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dv8RUdzSSJ4hksr1_VnBbDMrp_8.roa
Signing time: Sat 20 Apr 2024 21:12:08 +0000
ROA not before: Sat 20 Apr 2024 21:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:5a:2c:3b:0b:85:8f:e8:64:40:42:b6:db:61:6d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 21:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76ff1151dcd2489e2192caf5fd59c16c332ba7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:90:f7:43:99:18:9f:92:2a:1c:0b:02:8a:51:
46:42:76:d2:a9:6d:19:9b:2b:4e:b8:c9:67:29:ef:
fe:bb:47:7d:90:38:b1:db:7d:1c:08:92:fa:01:e0:
fe:ba:11:63:79:d4:f8:81:c3:de:3f:6f:2d:cd:35:
73:e9:e5:1c:64:ca:1b:f2:7f:8d:de:c9:91:f4:b1:
e9:c9:77:42:ef:fa:f0:68:ea:ef:c5:1e:0d:75:99:
cd:01:b3:fb:d7:e1:d1:d0:3e:d5:ba:5b:70:c5:27:
a7:3a:d8:e8:dc:1b:f7:17:e2:2a:25:93:52:10:48:
41:0f:7e:80:00:7a:23:8f:7c:04:e9:f1:64:61:7f:
0c:33:db:2d:31:95:f3:67:b5:0b:ba:1c:d9:73:da:
b0:02:86:de:eb:48:8d:9f:03:5e:f2:a4:83:b4:d1:
06:93:62:60:6e:58:02:9e:eb:38:a3:e9:67:72:47:
24:77:13:db:b9:b9:1b:2d:2f:f8:7c:9e:2f:c0:89:
54:40:50:d4:ba:36:05:4e:22:c6:85:90:97:cd:c6:
16:cf:5b:01:ca:37:79:91:2b:20:22:8b:1d:32:e1:
ec:1f:76:d4:24:c2:36:97:67:f3:2d:ff:cf:fe:0e:
88:1b:e3:1f:52:8d:d9:54:bd:19:b2:ba:65:83:48:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:11:51:DC:D2:48:9E:21:92:CA:F5:FD:59:C1:6C:33:2B:A7:FF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dv8RUdzSSJ4hksr1_VnBbDMrp_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
02:3f:66:ca:b5:b5:bb:8f:96:40:0b:3f:8e:26:4a:a2:15:bb:
e2:05:49:d7:24:c6:cb:0e:6d:13:75:a4:40:12:0d:50:85:56:
14:48:1f:b7:c6:3b:fd:8c:43:3d:8f:79:83:16:70:1e:b7:08:
65:d3:6f:be:7b:0a:64:d5:3e:b5:32:58:3c:b3:9c:f6:1f:ec:
b4:05:dd:45:e3:34:e2:2f:e1:75:d7:ea:5e:e8:b7:2b:67:f0:
9c:03:89:21:0b:a7:7f:b9:59:7c:5e:d4:c2:18:f2:1a:68:7b:
71:bf:c5:65:2c:e7:5d:9b:64:de:10:e0:2d:72:0e:1e:af:e0:
3e:2c:44:e5:ca:bd:11:59:8a:87:1a:86:eb:6b:2c:fa:f2:04:
36:5d:48:81:a5:b1:6b:4b:78:e3:60:2b:cf:c9:ba:96:de:5d:
d9:b9:7b:54:ed:64:dc:e5:4e:be:60:22:47:ae:ac:69:7d:49:
15:94:f1:30:11:86:94:7c:d5:8a:f2:f9:31:c5:84:25:7b:dc:
c3:8c:0f:ff:50:6c:9b:57:c9:72:dc:43:c7:dd:cc:0d:d5:64:
76:1e:8a:e8:fe:88:c8:83:b2:c8:e0:fa:1d:00:ed:fa:77:b0:
db:fb:fc:53:25:34:64:65:4a:8f:63:5c:6c:a2:39:14:d2:03:
3f:8c:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org