Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lnQ53T_JDIic5pZtTieDzvQct2g.roa
File: lnQ53T_JDIic5pZtTieDzvQct2g.roa (raw, json)
Hash identifier: /OVxwUa968YVUaZNr4giqPOlxl30t2QVSvuwAcW1XUE=
Subject key identifier: 96:74:39:DD:3F:C9:0C:88:9C:E6:96:6D:4E:27:83:CE:F4:1C:B7:68
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F50639E1ABB3D637B5078CAAE162D00C9
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lnQ53T_JDIic5pZtTieDzvQct2g.roa
Signing time: Tue 07 May 2024 00:10:56 +0000
ROA not before: Tue 07 May 2024 00:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:50:63:9e:1a:bb:3d:63:7b:50:78:ca:ae:16:2d:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 00:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=967439dd3fc90c889ce6966d4e2783cef41cb768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:7d:55:86:7c:de:cd:7e:de:75:f4:0b:36:
4f:e6:b2:0d:de:fd:d2:38:51:0d:8e:a9:06:95:0b:
64:d8:40:bb:83:23:66:b1:08:57:43:89:d5:e1:ed:
77:69:c6:92:ce:58:8b:3b:0b:0e:c8:47:1f:c9:bb:
ce:7c:be:dc:cc:c7:bb:f7:33:62:51:87:e8:49:5b:
7e:0e:b5:1a:7e:e3:75:70:64:0c:09:31:4a:ed:86:
3e:aa:45:e0:ef:ae:cb:d5:a6:05:9a:c2:b6:c9:3d:
b4:b2:a1:23:75:3c:c2:6b:ba:f0:c7:23:0a:8a:5c:
db:bd:a8:a3:7b:54:9e:08:2b:75:c1:01:67:c8:fa:
ca:5b:cf:7d:78:48:7b:bb:93:4b:e9:6c:e4:f0:21:
a8:d6:48:04:9c:af:de:a5:4c:fa:73:4c:01:eb:dc:
7d:cd:f7:b4:5a:e2:2d:5d:41:69:e5:a2:01:45:e2:
a4:05:0d:8a:16:f7:2d:17:0e:0e:7d:46:f0:42:9d:
78:18:f3:a9:31:6c:09:14:e1:7b:b2:d9:ce:a8:1b:
53:fa:5c:dc:c0:1f:cd:d6:47:d9:fa:ba:28:02:4a:
be:74:73:ba:76:7c:b5:d6:a8:3c:01:f5:3c:8d:c5:
66:31:a8:66:78:9c:1b:54:77:62:30:d1:12:dd:87:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:39:DD:3F:C9:0C:88:9C:E6:96:6D:4E:27:83:CE:F4:1C:B7:68
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lnQ53T_JDIic5pZtTieDzvQct2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:92:a9:c7:b6:c8:fa:72:d2:b0:dc:e3:0a:09:6c:99:85:2e:
43:06:c3:6d:5d:4d:d9:08:ad:d9:3b:a6:3e:f6:75:4b:74:42:
78:0f:4d:e2:7b:0f:c1:ff:f1:00:8a:55:b6:b3:77:a1:7f:f2:
90:f1:0d:ae:25:1b:7a:0d:1a:a2:ab:98:7c:5a:9f:d3:56:47:
7f:42:8a:a0:d9:76:d1:78:b2:cf:82:57:93:da:1e:63:1b:68:
ae:b5:78:32:2a:33:18:e2:fa:72:a4:54:d0:2b:6b:69:87:7a:
87:d4:c2:a9:d5:00:f3:c7:0f:45:cb:ff:1b:e3:d9:07:99:07:
f8:ea:b8:e0:3d:8a:7c:7c:a0:7d:6e:49:83:1f:ea:6c:4d:e7:
99:e5:21:1d:30:a9:f9:15:85:23:f4:fb:a2:96:b7:6d:72:d1:
68:56:34:2b:6a:1f:d8:80:b7:fc:54:29:0c:52:8d:27:43:fc:
25:be:c7:2f:8b:4c:b3:19:87:2c:9b:5b:93:57:f7:94:89:0f:
c3:83:70:db:4d:5d:ed:c5:c9:f1:26:d9:16:0d:f6:90:42:c9:
ff:66:43:5c:9a:49:65:3a:58:43:23:3b:d4:f6:c3:bf:d4:b3:
c6:f2:80:77:11:e6:70:21:44:c5:b9:73:a6:d3:70:b3:0c:1c:
ab:91:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org