Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/n-2WLp-NNOLPH55AAg638bytBm0.roa
File: n-2WLp-NNOLPH55AAg638bytBm0.roa (raw, json)
Hash identifier: fK4bZDqZF1XZTmvoHp4Iuy6UzoSXg2JYy9twi+nRyQw=
Subject key identifier: 9F:ED:96:2E:9F:8D:34:E2:CF:1F:9E:40:02:0E:B7:F1:BC:AD:06:6D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFD2512EFCAC42322B7F628F92610420E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/n-2WLp-NNOLPH55AAg638bytBm0.roa
Signing time: Sat 20 Apr 2024 20:14:09 +0000
ROA not before: Sat 20 Apr 2024 20:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:25:12:ef:ca:c4:23:22:b7:f6:28:f9:26:10:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 20:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fed962e9f8d34e2cf1f9e40020eb7f1bcad066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:21:7d:d6:8a:58:cf:05:30:d5:d6:28:01:
cf:87:bf:ee:ed:1f:5e:b1:82:24:54:72:76:d1:72:
1a:d0:0c:d5:e0:29:92:10:aa:bb:32:b7:68:94:70:
41:54:35:df:72:89:26:28:bd:f1:e1:2c:e1:1c:3d:
5c:43:23:a6:9b:3f:73:43:33:1a:07:aa:8f:1d:42:
a0:93:51:d8:e8:02:3a:f5:b1:d6:d1:74:c0:bf:34:
1a:de:fd:d9:69:ff:59:b5:e8:7f:d8:6e:a0:48:7f:
90:e7:96:06:bd:bc:aa:07:63:c2:f5:a8:34:c3:29:
df:0e:c5:5b:07:6f:ba:54:62:bd:a3:91:21:c4:c5:
f3:a8:6c:a5:a4:21:a7:86:ae:2b:d3:d6:ae:be:34:
33:5b:7d:88:bc:01:e3:78:a1:15:0b:38:75:bb:5c:
e7:34:e8:56:95:f6:7e:74:2c:f8:41:32:28:db:22:
0d:d2:2b:e7:cd:58:39:e1:ba:04:b7:eb:55:70:16:
65:1f:3f:0a:35:41:10:4e:62:97:24:72:c2:a2:7e:
1b:b8:7d:0b:0d:8d:3c:78:8a:38:c4:95:7a:0e:42:
8a:d4:40:e2:5b:4f:38:54:b1:eb:98:78:1a:c3:d4:
44:f8:41:ad:3c:80:89:58:95:30:fe:02:58:f7:82:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:96:2E:9F:8D:34:E2:CF:1F:9E:40:02:0E:B7:F1:BC:AD:06:6D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/n-2WLp-NNOLPH55AAg638bytBm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:8a:b1:d5:0e:28:ed:41:e0:85:6a:92:cd:ad:32:fe:ca:20:
5f:0b:bb:f7:e4:97:dc:43:da:19:1a:82:bb:53:cc:3d:f8:3c:
51:38:fe:ff:b1:46:ab:4c:53:cc:c8:57:0c:b2:19:b3:61:4a:
cc:75:92:ea:53:88:3e:2c:1e:1e:c8:03:1a:32:27:50:80:58:
33:0c:5c:50:b1:58:00:cd:50:a3:0d:a1:23:48:87:82:6c:5f:
a8:a3:93:35:6c:fe:07:78:ea:37:56:97:4f:0e:f7:6d:96:67:
d0:0e:c2:d0:98:39:5d:37:16:f8:22:36:41:25:0f:d8:21:f2:
15:a8:39:59:c3:15:f6:db:20:59:05:b4:84:fb:ab:94:da:72:
ff:40:c2:32:04:9b:66:f2:92:0b:31:da:34:93:47:a0:87:f8:
0e:4f:41:12:58:d9:3f:91:b7:86:2c:5a:46:fd:b1:6f:2b:05:
b2:04:49:99:65:83:f6:cb:51:f1:a3:0b:f4:2d:76:e5:68:74:
9f:3f:15:cb:3b:cf:ce:66:6b:68:db:9d:70:35:28:44:68:b7:
1a:d1:c7:cf:1c:72:91:37:89:88:cb:da:0b:54:30:8c:7b:9b:
c8:be:00:2f:0a:b8:c2:c8:5e:53:3a:8b:32:f2:df:e8:b4:13:
e1:9d:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org