Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/imITZN27W8xbrK-sTtHedVDtXbo.roa
File: imITZN27W8xbrK-sTtHedVDtXbo.roa (raw, json)
Hash identifier: MNAonUD0eMD0dcAS8+IUS6Od1xnMW/DEgFiQ8kCwfN0=
Subject key identifier: 8A:62:13:64:DD:BB:5B:CC:5B:AC:AF:AC:4E:D1:DE:75:50:ED:5D:BA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F13AA25B0D848E0934D93F858B91FDB98
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/imITZN27W8xbrK-sTtHedVDtXbo.roa
Signing time: Thu 25 Apr 2024 05:11:08 +0000
ROA not before: Thu 25 Apr 2024 05:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:aa:25:b0:d8:48:e0:93:4d:93:f8:58:b9:1f:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 05:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a621364ddbb5bcc5bacafac4ed1de7550ed5dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:33:78:9b:3f:cb:15:fc:a9:23:0a:51:cc:
f7:8b:c3:17:c5:2e:63:29:6f:93:d4:cc:90:28:e5:
78:39:50:76:42:f7:ab:62:89:85:fb:64:cf:8b:e1:
21:ec:bc:f8:94:e9:8c:50:6a:8c:ce:a0:92:82:c6:
f8:31:60:90:ac:22:af:bb:df:ed:7b:ba:6c:a0:72:
d0:7d:49:cf:fb:d9:fa:10:d2:e2:34:ee:ee:77:61:
b2:25:a6:22:9a:ed:e7:73:d5:be:27:11:d7:60:6c:
66:0c:29:44:ba:4e:c8:3a:02:41:f3:bf:6b:71:ba:
3b:9b:89:5f:b6:81:cb:02:4d:fa:b2:be:e4:d0:44:
da:bd:8e:54:28:d9:fb:c7:28:0e:bc:ba:12:3f:d5:
4b:06:55:af:0d:41:ce:32:c0:68:1e:4b:9c:cd:19:
fd:a3:9d:de:a3:0d:08:ea:69:4d:98:14:10:93:c3:
81:d9:2a:6d:75:1c:57:4d:13:55:19:0a:f8:40:27:
10:6c:83:2a:81:fd:90:8a:ea:e9:41:c6:b7:88:fa:
f2:50:89:12:67:63:be:6a:c1:59:35:79:9e:8c:a2:
4f:73:f5:ee:ff:97:0b:1c:16:77:54:26:64:4b:31:
42:51:12:46:43:2d:8e:cd:77:a4:17:06:87:c0:09:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:13:64:DD:BB:5B:CC:5B:AC:AF:AC:4E:D1:DE:75:50:ED:5D:BA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/imITZN27W8xbrK-sTtHedVDtXbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
2a:5b:f6:22:6d:e1:5d:2f:32:6d:e9:d8:78:77:21:b6:45:48:
fd:a6:74:cd:94:09:9c:19:82:08:6a:ea:d7:3e:09:2a:49:e0:
54:28:dd:5a:c1:66:41:67:5b:9d:a1:2b:3e:9d:2f:25:ca:96:
5d:02:18:a7:e0:e8:ce:d9:32:cf:3d:fa:9f:ae:2b:7b:e9:9b:
37:6c:e1:41:b1:e9:cf:41:3e:19:ab:fd:40:7b:76:a1:96:d9:
b1:ae:c2:c2:0d:42:15:24:32:f4:93:ea:7b:8b:57:ad:76:56:
9e:be:59:de:01:79:18:d2:c0:3d:f1:f6:cb:54:c9:3a:a3:78:
56:ad:a9:e0:47:d7:c8:13:7d:3e:68:05:10:b9:f3:80:4e:2a:
c4:52:d5:ce:fb:7c:40:6c:0e:8b:4f:cf:e1:31:fd:da:d3:9d:
20:77:32:2f:58:24:37:24:b6:23:ec:88:50:ae:41:4e:c5:bc:
b2:d4:58:7d:d0:70:fe:23:d3:e5:ac:56:86:2e:9d:bf:cf:7f:
98:00:45:bd:39:93:d5:fd:1e:15:d9:36:4d:45:16:51:9f:fe:
0f:f0:a2:4c:ff:4a:ba:36:02:d3:f0:a8:f9:86:a0:df:c8:e2:
80:02:ac:b6:42:d5:d9:10:68:d8:08:12:9a:10:7c:4d:a9:31:
ec:62:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org