Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX5K4Zdi9UM-Qab7W7MyhAlM5j8.roa
File: vX5K4Zdi9UM-Qab7W7MyhAlM5j8.roa (raw, json)
Hash identifier: hKZt9lYEgbgVm3sIAJhWKaUNjnh/vNlhL7rtu8QoCgU=
Subject key identifier: BD:7E:4A:E1:97:62:F5:43:3E:41:A6:FB:5B:B3:32:84:09:4C:E6:3F
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F46F4743D0EEE3C42D2E93045197A1BE1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX5K4Zdi9UM-Qab7W7MyhAlM5j8.roa
Signing time: Sun 05 May 2024 04:12:56 +0000
ROA not before: Sun 05 May 2024 04:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:f4:74:3d:0e:ee:3c:42:d2:e9:30:45:19:7a:1b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 04:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd7e4ae19762f5433e41a6fb5bb33284094ce63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:2f:99:ad:0a:5a:2d:7f:8c:0c:8c:36:81:
47:c2:71:39:33:18:52:ad:61:db:ff:0b:fa:9e:b1:
c0:b6:66:4a:62:bd:bf:13:81:28:c6:3e:3b:dc:46:
40:a7:7f:2f:8a:f8:24:02:ec:0a:4c:f3:4b:91:71:
be:82:32:95:08:8c:20:c8:f2:37:47:23:ef:3d:64:
49:90:4a:9b:8a:c3:64:70:ca:bf:8f:f8:34:83:12:
e4:e8:f3:03:4b:bb:a2:2a:d8:ed:b3:3e:2c:6a:6f:
e2:01:4e:a8:ed:b0:2d:1e:36:05:42:46:6b:89:bd:
e8:43:66:df:f7:89:a3:9a:b8:c4:3d:66:06:96:27:
a1:ff:20:83:e0:f3:2b:a6:c3:a5:3e:1a:c6:2c:ba:
56:de:d8:67:75:cd:64:a7:62:6f:b5:d5:b1:67:e4:
a7:b5:25:36:e9:c1:24:9c:84:a9:8e:44:bc:f8:3a:
ab:49:51:db:12:df:ea:a2:27:b4:3e:93:40:28:3c:
44:92:87:a4:b6:c0:e8:fc:0e:c2:ca:22:c4:c1:d0:
cc:54:a1:76:16:fa:c6:af:27:bf:bd:c6:10:9c:b6:
28:6e:3d:0a:8c:80:ca:8a:dc:c5:a8:9f:5d:a2:da:
5b:6e:c9:3f:77:da:02:6e:56:d1:d7:bf:2b:04:53:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:4A:E1:97:62:F5:43:3E:41:A6:FB:5B:B3:32:84:09:4C:E6:3F
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX5K4Zdi9UM-Qab7W7MyhAlM5j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:34:c8:32:0d:b6:a5:7e:4c:0d:c2:1f:36:a7:1a:57:f9:22:
e8:98:e1:06:55:fe:ca:e7:2d:77:0e:f7:a0:e4:e4:60:6b:b4:
0d:71:cf:75:1b:cc:23:01:a8:97:08:ac:7f:2d:b1:a3:ed:80:
7d:37:12:b4:9e:76:90:87:d3:e3:ec:08:4c:c4:25:19:9b:57:
5d:91:0b:d4:9d:ab:9a:1b:48:5f:cd:1a:c6:77:ae:63:0c:e2:
20:4c:c9:b8:0f:f4:29:6f:af:b3:ae:9f:0c:b4:49:17:9c:71:
f1:51:28:b8:06:ee:5a:40:a9:23:57:11:3b:51:12:b3:94:42:
05:38:64:15:56:96:08:06:c2:be:6d:f6:61:42:04:91:ba:dd:
1d:f8:38:e0:ed:97:5f:98:20:b3:6c:08:e2:ed:5d:f2:67:5a:
87:01:61:89:f5:f7:bb:d2:80:59:68:f3:05:ea:5e:2e:83:a8:
0b:39:9f:4c:6f:b6:37:0a:06:48:b1:05:27:3c:3c:c0:33:9e:
63:22:1a:f1:e6:6b:75:a6:ea:ac:2b:fc:c5:1f:8b:f0:7b:01:
4b:49:47:1c:c8:52:d5:7b:cb:d5:bf:bf:4b:b2:80:15:9d:19:
08:37:65:66:92:ab:7e:75:7a:28:62:f3:35:63:56:84:11:47:
3b:2f:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org