Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eNWpjXjPwpIrRYNF1zUYzSkOOmU.roa
File: eNWpjXjPwpIrRYNF1zUYzSkOOmU.roa (raw, json)
Hash identifier: PZoY5GJA8F1VgQnkHW/sOIAwRT/e3xwPPoNMl3/M6Zo=
Subject key identifier: 78:D5:A9:8D:78:CF:C2:92:2B:45:83:45:D7:35:18:CD:29:0E:3A:65
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F99587FB2C85FFDDF95E1421632670881
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eNWpjXjPwpIrRYNF1zUYzSkOOmU.roa
Signing time: Tue 21 May 2024 04:11:04 +0000
ROA not before: Tue 21 May 2024 04:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:58:7f:b2:c8:5f:fd:df:95:e1:42:16:32:67:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 21 04:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78d5a98d78cfc2922b458345d73518cd290e3a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:74:f3:d4:a7:77:c3:de:d3:7b:0d:79:7b:
a5:e8:10:c0:dc:48:63:92:21:98:06:a9:a0:f6:5f:
74:50:81:f4:72:c7:d4:22:77:18:6a:b2:aa:0e:0b:
80:1c:07:43:a5:de:65:81:69:e6:a7:b9:8a:ea:bf:
a5:00:b2:74:93:91:77:65:3d:23:c4:d6:47:0e:6b:
20:42:53:7c:1c:e1:a3:c8:4f:70:32:c9:11:50:29:
4f:d4:dc:b9:a0:b3:fd:bf:ea:a9:30:ab:34:8f:de:
8c:85:96:e7:72:d2:60:ea:b4:36:78:c5:d3:cd:99:
25:82:9e:20:e5:09:3b:7c:79:9c:4e:a9:60:93:5d:
6b:e7:85:e9:52:04:b4:0d:18:b0:68:5f:32:a8:e8:
fb:8a:fd:b7:c3:63:f5:41:19:a7:50:08:3f:8e:fa:
bb:fe:3b:84:01:df:e0:de:ec:93:9b:cf:94:13:17:
67:5e:68:d3:d6:47:6e:f8:64:59:c4:51:a3:9b:3d:
2d:7a:09:5e:cc:14:a8:2a:b6:73:8b:cc:89:33:f2:
fa:7d:3c:45:af:e8:ee:cc:55:7e:2c:18:b7:65:1a:
61:45:7d:71:7d:67:05:b8:4e:d8:19:71:58:8d:54:
7b:6c:a9:24:7f:8e:32:0e:3c:1b:2f:8f:52:67:d3:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:A9:8D:78:CF:C2:92:2B:45:83:45:D7:35:18:CD:29:0E:3A:65
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eNWpjXjPwpIrRYNF1zUYzSkOOmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:70:1c:67:3a:f1:17:e3:e6:2f:76:ac:8e:f7:97:bd:30:fb:
51:b6:70:26:2e:ff:70:a7:c9:c0:40:64:e7:ed:10:5d:c4:48:
39:e3:b7:7e:41:37:54:e4:50:89:1e:5c:5e:0f:85:6c:23:d3:
ab:ed:f0:fd:dd:ab:77:3a:4f:4a:cf:c0:84:7d:e6:e4:8d:48:
70:6d:82:0c:9e:61:c5:58:91:ec:40:e8:ff:2c:cf:01:7e:5a:
ae:7f:76:41:65:b3:94:95:3b:ea:51:03:6e:6e:1a:06:65:46:
cf:8b:bb:87:58:3c:9b:2e:40:68:5f:12:01:3a:f6:d3:a2:3f:
fb:ce:0e:83:9f:d9:3d:ad:3f:d4:d5:12:4a:07:ca:65:5d:26:
7b:7b:2b:70:5b:a1:ce:f7:1e:d6:cc:19:d7:89:15:b4:e1:0c:
dd:97:a2:1a:40:24:26:29:57:d4:10:ac:73:86:13:66:3b:a1:
51:74:f9:85:32:eb:3a:8a:b7:41:a7:45:42:d2:dd:f7:2a:9d:
03:25:c8:cd:c2:d1:26:c4:b7:e9:a3:55:8b:d4:14:80:03:f2:
a0:7c:fb:12:fe:76:fe:72:e0:0c:76:b1:55:66:7b:6f:ed:65:
1e:c0:53:72:64:4c:b0:22:8f:75:a1:49:b5:3e:51:d3:30:f4:
8f:d1:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org