Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/t70lv-Ap5mYSDl84VFha02IeuDs.roa
File: t70lv-Ap5mYSDl84VFha02IeuDs.roa (raw, json)
Hash identifier: t4Eb7WJT+OZ+Gr+QL6+tQPJtVremwAVFdnHMkmKnOyQ=
Subject key identifier: B7:BD:25:BF:E0:29:E6:66:12:0E:5F:38:54:58:5A:D3:62:1E:B8:3B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EF6E7BC623DEBF5413C36782E88B36F90
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/t70lv-Ap5mYSDl84VFha02IeuDs.roa
Signing time: Fri 19 Apr 2024 15:09:25 +0000
ROA not before: Fri 19 Apr 2024 15:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:e7:bc:62:3d:eb:f5:41:3c:36:78:2e:88:b3:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 19 15:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7bd25bfe029e666120e5f3854585ad3621eb83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:49:47:ae:23:cb:7b:34:e7:d3:09:b4:d5:
dc:53:e1:0b:e7:68:fc:1e:32:7b:20:cb:65:27:ca:
9c:50:ce:36:0d:7c:db:7f:ab:36:3a:e3:52:40:7b:
19:1c:40:42:d2:51:55:c0:47:31:ff:d8:ab:09:24:
43:90:30:44:52:6b:b9:ae:2d:50:86:97:4d:7b:68:
27:91:ce:57:57:f3:6a:33:95:68:84:dc:13:25:98:
8f:94:ca:a9:69:3c:29:a7:9a:75:6c:84:70:55:7c:
20:49:b8:f3:eb:0e:48:7d:1b:13:80:9f:25:22:38:
13:f8:f2:58:8a:3f:db:09:3c:34:3a:43:ae:16:4d:
f4:bd:50:84:a2:95:49:ed:ab:a1:7a:66:c2:88:f9:
32:a0:e0:0d:c9:bb:f5:59:2d:e6:f6:fe:f2:b7:61:
79:53:b3:ea:32:9f:1d:b5:90:20:b3:0d:05:89:ba:
91:51:db:9d:da:77:3f:18:34:58:d7:4e:c6:56:a2:
c3:86:f3:58:52:7e:8a:26:42:c6:7f:ec:d0:48:cc:
fa:4a:c3:02:d8:5d:1f:80:46:11:a8:92:f2:c1:43:
ed:ad:5b:11:f2:34:63:1b:91:b4:1d:dd:09:22:57:
c2:a4:cf:1f:75:69:42:57:e1:91:8e:e6:2e:78:85:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:25:BF:E0:29:E6:66:12:0E:5F:38:54:58:5A:D3:62:1E:B8:3B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/t70lv-Ap5mYSDl84VFha02IeuDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
85:62:85:52:d2:a4:95:49:12:84:fb:17:3f:46:2a:68:ee:3f:
64:a0:c4:42:0c:38:8c:4d:ed:a3:6b:1e:72:a0:fe:ab:88:b6:
ea:02:84:12:c6:21:fd:0c:96:8c:24:8b:95:a2:b2:bf:ac:c6:
0c:b1:f5:08:d0:e8:80:ab:6a:f3:c2:1a:74:a1:b5:ef:11:69:
36:50:e3:44:92:0e:fb:9c:17:4f:0a:93:ab:f4:c7:c3:4e:33:
13:32:33:68:2d:48:61:6d:92:78:2b:3f:b5:76:33:78:df:99:
4a:5c:da:10:4a:04:24:11:05:41:df:6c:2f:d0:fd:44:67:88:
c4:0f:a7:39:6e:fa:0e:a3:10:0c:5e:de:25:4e:c7:29:b8:ca:
e3:70:06:a5:16:0b:a3:e3:5f:f3:a4:09:6c:56:e0:10:fc:6b:
2e:07:e4:eb:41:2e:a2:d9:c0:78:41:11:fc:ff:33:09:d9:81:
21:52:81:21:e2:72:33:b8:42:0e:f1:d0:a6:4c:39:88:97:1c:
ba:51:59:ed:82:63:c6:10:fe:b4:93:75:9f:e6:af:b5:40:a6:
65:99:31:1d:a0:53:e4:d2:3b:48:f2:a3:bd:0a:d1:bd:25:7e:
5d:58:3c:c3:b6:c2:7b:0c:43:e9:6e:6e:18:ca:0d:d1:b8:81:
33:f6:fa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org