Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/rrQOhIb3XykbvjFYYex9zJqQH9g.roa
File: rrQOhIb3XykbvjFYYex9zJqQH9g.roa (raw, json)
Hash identifier: KAsWkUifXPGDCf/DZ3KJDCHQu0liyuxQBi4Gp4uRHMY=
Subject key identifier: AE:B4:0E:84:86:F7:5F:29:1B:BE:31:58:61:EC:7D:CC:9A:90:1F:D8
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F46ED210BB4963D63D4A90EE17D48EFF0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/rrQOhIb3XykbvjFYYex9zJqQH9g.roa
Signing time: Sun 05 May 2024 04:04:56 +0000
ROA not before: Sun 05 May 2024 04:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:46ec:693c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:ed:21:0b:b4:96:3d:63:d4:a9:0e:e1:7d:48:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 04:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeb40e8486f75f291bbe315861ec7dcc9a901fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:d4:66:39:3a:43:97:96:9b:28:cd:c2:ae:
58:ff:0f:76:a4:db:cf:70:39:87:64:57:54:93:1a:
f3:14:d1:db:0e:30:ca:28:4c:2f:6e:20:5c:ce:12:
71:10:65:b1:68:a8:cc:e4:88:9c:98:8f:ec:a9:f5:
11:c9:3e:8f:9b:b3:3a:30:97:d2:03:a1:04:f2:43:
ef:a3:0c:ca:59:05:d2:75:31:a1:fc:12:e4:f2:1e:
95:de:6a:bc:b8:ae:46:36:21:9d:dc:be:da:88:b6:
b4:78:a9:83:cc:b5:6b:ff:5d:89:e4:92:eb:22:65:
83:47:c6:8a:b2:ce:c6:b8:c2:d9:7c:6b:c5:32:b5:
4b:6a:06:02:f4:70:a2:d8:58:2f:01:09:72:9b:71:
da:84:47:08:b2:1d:1b:a4:ff:4c:0a:16:01:22:06:
48:b6:af:a4:85:98:2e:78:15:8c:d8:53:be:79:c3:
35:9c:1d:0f:a5:0b:ae:b9:c5:9f:03:05:a0:d5:a9:
e6:a7:49:e1:bc:43:e4:56:1e:29:46:f3:0e:ab:cd:
9a:7d:ca:7d:6f:69:3b:9f:b6:bf:7c:db:f8:a2:d8:
af:3b:8a:c3:2e:9d:b4:ee:d6:5d:82:b8:ce:ad:85:
66:d4:cd:29:12:85:0f:47:36:e0:37:4a:59:24:ad:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:0E:84:86:F7:5F:29:1B:BE:31:58:61:EC:7D:CC:9A:90:1F:D8
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/rrQOhIb3XykbvjFYYex9zJqQH9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:4b:5b:34:42:37:25:84:cf:44:1f:80:0a:6f:e2:cc:ca:3a:
fc:3b:38:8e:d8:12:e9:d6:1b:40:ee:6d:10:42:00:5e:07:c5:
29:c0:df:7d:07:03:f3:4f:d7:35:9d:12:ce:37:72:70:51:c0:
8d:c7:31:e3:d1:12:09:01:0c:b5:3b:f9:80:80:b5:d5:0e:83:
4d:9e:fc:5c:e7:1d:a0:55:4f:b8:fe:47:d7:d2:08:3c:87:9f:
0b:f7:58:d8:c7:28:84:41:67:9b:53:5a:ef:ef:59:e0:a1:6d:
eb:fe:50:8d:ae:ab:d4:f8:a0:5d:0f:4f:de:3a:22:a1:f3:1f:
f5:ab:c3:fc:b6:7b:98:ff:6c:48:f9:c4:31:a6:b9:7a:9b:6e:
b6:79:a0:c0:24:fc:ec:d5:88:27:d2:21:a7:bb:29:03:07:cd:
08:5b:3e:2d:10:b6:df:91:10:7e:8a:7e:e1:bc:ac:cc:b9:77:
2d:8e:be:ac:d7:6f:86:df:22:5a:45:d1:7d:fc:c8:19:f3:93:
3a:2e:4f:ed:18:65:e1:7f:e6:2a:68:0b:0a:c1:4a:74:99:c5:
2e:fb:a0:91:8a:8f:39:38:fe:c1:d6:45:01:3d:06:63:bc:3d:
fd:b5:18:70:46:13:a6:64:ee:a5:43:14:ca:70:e0:8f:88:c8:
48:13:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org