Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mQcZ-kUnut8JVeNUelqQZ9dzfEc.roa
File: mQcZ-kUnut8JVeNUelqQZ9dzfEc.roa (raw, json)
Hash identifier: 98AjH4WgvdI3rwOWLfk1qA1sy8Ox60LyCaplBzCAYl0=
Subject key identifier: 99:07:19:FA:45:27:BA:DF:09:55:E3:54:7A:5A:90:67:D7:73:7C:47
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F0DDE1243D69DBF802F4D7C116625BA87
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mQcZ-kUnut8JVeNUelqQZ9dzfEc.roa
Signing time: Wed 24 Apr 2024 02:10:08 +0000
ROA not before: Wed 24 Apr 2024 02:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0d:de:12:43:d6:9d:bf:80:2f:4d:7c:11:66:25:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 24 02:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990719fa4527badf0955e3547a5a9067d7737c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:ab:96:fd:41:87:ff:4d:95:48:1b:55:a1:
6e:49:26:92:b8:aa:6e:21:fa:23:2e:ea:aa:45:6c:
91:ee:a9:78:13:5a:74:50:c5:10:59:96:49:d1:6f:
29:41:c1:f0:00:7f:52:85:8f:64:25:13:27:74:bd:
6a:c5:f8:62:95:53:8b:a7:f7:56:30:56:69:a2:f6:
f0:46:07:1a:c4:bc:ed:ad:d1:6a:4d:30:67:37:e0:
0e:f4:29:f6:36:e7:6a:1a:f6:01:6b:6f:32:30:40:
af:cf:5f:d4:ad:87:4a:db:b2:9e:8c:d8:dc:76:df:
04:32:59:b0:66:32:af:00:c9:8c:e9:4b:01:b2:0d:
24:73:e5:b4:9b:c5:32:fa:b1:c8:3f:ce:b6:df:9a:
75:56:fd:f2:dc:e9:39:16:9b:f2:8a:b8:5a:f3:74:
d9:31:84:b9:a7:7b:6e:95:43:be:fb:bb:59:05:e4:
b2:34:4b:9b:43:09:45:44:38:72:cf:43:b4:80:c9:
a8:05:4f:32:eb:ed:9f:cc:4f:76:b7:60:0b:d3:71:
05:11:8a:6e:79:b4:cb:39:91:f6:36:c8:37:cd:a5:
0b:b3:ab:40:c1:5a:e1:82:27:a8:58:73:2d:96:38:
b4:c8:db:fb:dd:2c:a5:16:f2:d9:0d:7f:56:bf:92:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:19:FA:45:27:BA:DF:09:55:E3:54:7A:5A:90:67:D7:73:7C:47
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mQcZ-kUnut8JVeNUelqQZ9dzfEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
a7:54:f4:31:36:0b:cb:07:93:65:c5:0b:8b:ec:e7:46:30:48:
6c:ee:57:49:7e:30:f5:d8:b8:a9:cf:fd:ee:85:7c:94:db:93:
14:de:c5:05:5e:9f:30:fb:bb:42:6f:1e:10:84:96:85:ce:6b:
74:d7:b4:4c:21:0c:b3:fa:b9:60:2d:be:cd:b3:46:4a:c0:8c:
50:d4:78:4f:42:5f:05:61:6c:3c:a1:03:d9:c3:e4:84:78:9b:
b4:48:a6:a3:cc:fd:3e:b3:58:86:64:3f:69:35:55:be:ad:3c:
23:d1:24:a3:5f:f2:b8:21:b4:0c:f1:8d:9c:b4:90:dc:ca:c0:
d2:cf:9e:af:71:c1:e8:e2:f7:0b:6c:5b:4d:6f:1a:80:b8:e6:
da:7a:e4:b2:4d:f5:e8:e1:79:6b:16:85:13:e3:ed:40:a2:90:
19:71:c7:ac:9f:c9:18:3b:f9:b3:e7:ed:06:b8:cd:87:a2:89:
73:5f:54:72:ec:69:0b:f8:7b:56:5a:5a:80:2a:c8:c9:ba:09:
e7:33:53:d3:c7:5a:6b:8d:4c:51:6d:57:3b:e9:f8:b3:6e:ab:
4f:ed:65:7f:52:58:b8:a6:06:e7:01:f7:2b:27:b2:33:61:e3:
8a:c0:3d:5f:3f:91:1d:53:e2:5b:a3:33:ae:04:d6:e3:3c:4d:
84:be:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org