Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/qxnfbVb0hNRVk4TE0f95qhT9ctQ.roa
File: qxnfbVb0hNRVk4TE0f95qhT9ctQ.roa (raw, json)
Hash identifier: PvSYDFUnAoFZ4NgRaEY1ceYYDddsMj9oqL+2JFNLp/4=
Subject key identifier: AB:19:DF:6D:56:F4:84:D4:55:93:84:C4:D1:FF:79:AA:14:FD:72:D4
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5B57E0701B56595174AB9A49368842E8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/qxnfbVb0hNRVk4TE0f95qhT9ctQ.roa
Signing time: Thu 09 May 2024 03:13:56 +0000
ROA not before: Thu 09 May 2024 03:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:57:e0:70:1b:56:59:51:74:ab:9a:49:36:88:42:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 03:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab19df6d56f484d4559384c4d1ff79aa14fd72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:e2:78:93:cd:1a:5f:93:ad:1c:b4:c3:5e:
5c:cf:b8:ac:a1:21:78:03:05:6c:db:66:87:bd:1f:
2c:18:70:21:c0:8a:a3:07:59:56:ee:ad:5e:bf:c0:
f5:3e:61:dc:cf:a6:76:45:b0:92:bd:9e:5b:5f:34:
41:8b:71:80:27:7a:5f:46:04:e5:7d:35:a3:d2:5d:
f9:68:c9:55:8a:25:2e:66:6d:c6:3f:ef:38:55:78:
15:94:8b:59:37:d0:c6:64:42:4f:df:d4:bf:d0:1e:
64:28:4c:7e:a6:94:f5:e3:69:12:a5:69:0c:a6:8c:
83:82:33:f9:fb:d0:3c:5e:4d:12:b5:b2:3b:a6:bf:
74:22:20:09:cd:6b:3e:1b:a9:48:1e:30:a5:2d:19:
40:7d:ab:df:0d:0d:0d:83:f9:ed:a9:e0:5d:94:20:
f6:3d:3b:aa:73:86:3f:60:ef:7d:c1:fe:44:e3:73:
b7:2e:6b:db:69:c8:3d:1c:0a:80:f4:11:c7:4c:e5:
37:09:b3:eb:0f:79:07:34:5f:71:ad:35:3b:97:9e:
4c:38:67:0f:31:b0:51:dd:3a:80:e8:4b:64:b4:49:
a7:ba:0a:62:b9:7b:13:dc:c9:c6:f9:1b:e3:7e:fc:
a6:ab:90:1f:8e:dc:95:12:69:8e:9c:1c:92:58:0f:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:DF:6D:56:F4:84:D4:55:93:84:C4:D1:FF:79:AA:14:FD:72:D4
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/qxnfbVb0hNRVk4TE0f95qhT9ctQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:6f:9a:2c:c7:9e:2e:66:56:82:22:2d:fc:41:36:9a:32:d5:
ab:e0:4a:66:29:43:f4:7a:9c:85:45:07:27:29:88:17:f0:c0:
aa:40:09:a2:52:21:4f:d1:1f:d6:d5:40:f0:e2:e8:bf:63:df:
99:7a:ad:57:fe:95:5d:1a:22:4f:bd:1a:01:e7:45:73:e1:9a:
32:e1:30:e1:29:e4:5f:8b:10:e2:f0:30:8b:b2:ab:c3:0c:1a:
41:fd:ce:a7:46:14:19:93:18:0f:86:1e:1a:da:16:a1:eb:ee:
45:b5:83:5c:3d:40:0d:a7:8f:ea:92:52:bf:f8:56:fa:02:bc:
12:64:3e:e1:81:a7:ec:cd:9d:90:ce:ed:ff:58:4f:fa:b2:a9:
8e:be:0c:27:a3:cd:9b:91:ea:6d:7f:8c:40:7b:7d:13:ad:49:
a3:94:33:60:f1:ff:5d:2c:de:16:1e:a6:5e:81:b1:19:1d:18:
f9:a0:1f:81:b8:df:a2:b2:a1:4c:ff:c2:0e:71:78:18:57:d7:
fb:3b:76:ec:80:fa:90:b9:4c:43:75:6b:86:30:8b:b2:be:be:
c0:14:6f:74:12:49:a4:ff:91:f4:55:31:2b:22:82:ad:7e:0d:
27:63:3f:d6:73:86:2a:35:cd:ff:04:10:5f:07:41:7b:e7:be:
a8:dc:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org