Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-9C6o0ONjsqV7wQuwQETverH-vs.roa
File: 1-9C6o0ONjsqV7wQuwQETverH-vs.roa (raw, json)
Hash identifier: 0+ZlBLcIjF5AeMlqbgTCPieqYEiVSSDVOoNk4fPrpSA=
Subject key identifier: FB:D0:BA:A3:43:8D:8E:CA:95:EF:04:2E:C1:01:13:BD:EA:C7:FA:FB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFB9C4E798DE23F6A6DE1F85C9492BE15
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-9C6o0ONjsqV7wQuwQETverH-vs.roa
Signing time: Sat 20 Apr 2024 13:05:08 +0000
ROA not before: Sat 20 Apr 2024 13:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18e:fb9b:76c7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:9c:4e:79:8d:e2:3f:6a:6d:e1:f8:5c:94:92:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 13:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbd0baa3438d8eca95ef042ec10113bdeac7fafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:29:77:b6:d0:bd:b1:d6:82:e1:7c:a3:e5:
cc:85:31:b7:f8:4b:cf:eb:37:58:3f:dd:09:9b:7d:
bd:a1:30:4b:d2:41:38:5c:08:b4:61:01:55:72:b4:
16:75:2f:dd:3d:9f:76:33:58:aa:86:a7:f0:6c:8f:
c7:71:1f:03:0a:55:95:62:85:9c:8f:40:ab:41:19:
2a:72:cf:51:04:b9:1c:b9:c9:1b:35:4e:29:37:ba:
d9:ee:bb:f0:90:5f:15:1b:60:9b:b5:ba:63:62:b5:
45:4c:ef:23:32:0a:fb:b2:07:e8:00:36:13:53:ae:
19:ed:d3:32:b3:b8:e9:56:e7:92:4d:22:9e:6d:29:
ea:75:84:ee:f0:4b:30:38:7d:a3:05:78:2c:95:a3:
4d:d4:cc:a4:7b:50:a8:34:56:85:b0:9e:cf:ff:ab:
ed:8a:e1:1a:99:d6:66:89:a5:a2:5f:65:0a:d6:e0:
70:c1:64:5e:7b:ad:a9:6d:f0:92:d0:21:6f:be:7c:
ed:fc:cc:bb:7b:5b:27:60:ba:66:02:f3:7e:c4:c0:
03:93:2f:33:58:b7:85:a6:b4:c0:f6:30:ce:0d:ed:
e8:f7:73:20:02:1a:d5:64:6a:03:f4:27:2e:42:fe:
ce:9c:b3:04:b3:f3:c1:fd:fa:ae:d6:6a:22:bf:49:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:BA:A3:43:8D:8E:CA:95:EF:04:2E:C1:01:13:BD:EA:C7:FA:FB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-9C6o0ONjsqV7wQuwQETverH-vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18e:fb9b:76c7/128
Signature Algorithm: sha256WithRSAEncryption
59:3a:4e:fc:fb:79:49:3b:d0:ad:a3:da:37:3f:c4:0a:78:7d:
46:53:65:4e:df:34:31:64:e3:37:b2:94:b0:26:08:f0:80:15:
0c:fe:87:41:73:a9:e2:31:78:eb:b5:61:11:5e:8b:4b:0a:2e:
5e:97:b1:aa:a7:76:3f:c3:c1:66:1d:0a:50:6a:f5:24:ff:d9:
cd:04:e8:b3:30:9d:40:df:7b:bc:9f:d2:82:00:b8:b7:b4:9b:
6a:b3:7b:e1:f0:cf:06:b3:ff:7a:a2:2b:1d:6d:8d:a6:a5:f9:
f3:23:bc:eb:c7:82:4f:eb:e9:9e:82:26:2c:d6:bf:f1:f0:8c:
d7:3e:a8:56:ed:52:3f:58:7d:35:3a:ab:cd:b9:a7:96:5d:44:
bd:e7:04:d9:c8:0c:13:96:1b:62:c0:8d:c9:0c:22:ee:01:c5:
55:79:93:a8:bd:0f:87:27:b9:99:2a:dc:15:27:ca:c2:6b:9d:
84:7b:f4:10:f9:63:8d:d5:61:f5:ac:40:de:f2:da:31:af:34:
be:5a:ec:78:16:e1:c4:ff:55:cb:fb:99:91:1d:45:88:75:84:
9e:66:82:d4:99:55:9c:7b:e2:a1:ae:1c:8a:67:d3:21:da:0c:
a5:71:a7:30:92:71:be:73:06:9e:cd:65:e9:2a:20:15:03:91:
55:54:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:03:21 2025 by rpki-client