Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gQnkLV21M7DCaXHXzrQy2pgaQ7c.roa
File: gQnkLV21M7DCaXHXzrQy2pgaQ7c.roa (raw, json)
Hash identifier: bFF/0rAgirI+MDn3mScXB23s/1Zou/ap7Iast3jxEvw=
Subject key identifier: 81:09:E4:2D:5D:B5:33:B0:C2:69:71:D7:CE:B4:32:DA:98:1A:43:B7
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFCAEF6DC599320093623C7C2149A3A29
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gQnkLV21M7DCaXHXzrQy2pgaQ7c.roa
Signing time: Sat 20 Apr 2024 18:05:08 +0000
ROA not before: Sat 20 Apr 2024 18:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18e:fcae:4110/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:ae:f6:dc:59:93:20:09:36:23:c7:c2:14:9a:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 18:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8109e42d5db533b0c26971d7ceb432da981a43b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:dd:7d:b9:28:6a:6c:b7:89:73:a9:0e:ff:
a6:68:b3:a6:6b:4a:1f:7d:d6:b9:22:4b:b6:82:5c:
59:c8:3b:a5:de:be:fa:4b:8f:6d:e7:2f:1f:be:76:
e3:8f:af:cb:3d:11:2a:2a:3c:df:fd:ef:e4:b7:83:
93:6e:85:f5:f9:6e:29:0a:ec:3f:1f:5c:c3:1f:92:
a1:47:74:7e:e6:a2:de:24:95:07:b0:05:c9:e5:90:
67:ed:79:82:d7:86:83:83:af:92:fa:b0:24:74:8c:
49:91:da:de:8e:4b:dd:a9:6c:61:36:3b:c5:56:aa:
59:55:ac:47:a7:bf:94:aa:17:e0:af:7c:29:1f:0c:
b6:04:df:60:c8:0b:82:da:a4:c5:6a:6c:07:50:69:
ed:55:d3:80:f1:71:a9:91:db:34:ff:60:0d:2d:5f:
b4:5c:d3:d4:cd:7c:01:44:36:3f:a2:e7:c2:cd:97:
f8:13:96:fe:b4:59:8b:c2:6a:e2:35:6f:91:25:07:
d3:cf:91:c5:7a:1f:e2:79:f7:46:71:0e:59:90:2c:
b5:d0:ee:7f:fb:17:d4:ac:22:bd:91:09:db:f7:66:
2b:c4:10:6f:12:d1:34:ef:40:e8:3c:48:72:d5:74:
80:e8:dc:a9:d2:01:43:5a:ce:dd:63:f1:01:9f:09:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:E4:2D:5D:B5:33:B0:C2:69:71:D7:CE:B4:32:DA:98:1A:43:B7
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gQnkLV21M7DCaXHXzrQy2pgaQ7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18e:fcae:4110/128
Signature Algorithm: sha256WithRSAEncryption
61:47:8a:d3:d3:5e:af:0d:24:72:3d:1b:0a:45:01:1d:79:75:
2b:23:32:8e:8b:a1:41:4b:b5:d8:ae:01:f6:11:b0:ff:2b:7b:
04:9d:d0:20:82:dc:27:d0:92:5e:04:2e:ca:4e:a0:c2:f2:0c:
d7:3a:1e:8c:0e:6a:76:69:3f:67:06:f0:24:0b:2d:4e:11:f5:
43:d9:9b:01:1b:6a:44:4f:e6:bc:8a:8b:2d:e4:94:4f:2d:da:
33:16:55:6b:cb:1f:fa:0a:a4:79:7a:58:cd:78:96:2c:3e:0e:
74:ed:e9:e0:59:cb:99:4a:a3:99:72:5c:2d:aa:9e:08:1b:e9:
64:64:a9:a3:c2:ff:5d:98:e1:4d:75:07:9f:19:a0:14:8a:86:
86:91:47:79:10:14:e1:6f:5c:05:22:25:7d:06:89:98:a7:06:
17:1c:05:dd:b7:d4:4e:36:35:95:3d:72:48:00:9b:47:83:66:
7d:be:04:a6:a8:78:9c:b2:c6:c1:49:25:0a:d0:78:64:e1:d7:
6f:23:2b:e0:2a:72:e3:cb:80:c4:6d:8d:ca:a6:0f:8c:4d:73:
32:7d:4c:42:3f:1c:e8:0a:6d:1a:60:7c:eb:48:5b:0a:dc:cc:
6d:2d:6c:96:55:1d:a1:34:6e:71:9e:a8:f0:8a:d5:5c:05:b2:
38:70:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:48:03 2025 by rpki-client