Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-_gqAgf36MSTD3uObx9SRVVZovE.roa
File: 1-_gqAgf36MSTD3uObx9SRVVZovE.roa (raw, json)
Hash identifier: /+l8qZd2mJOPNmVXphtUwV96qqKMQdusAt/WSnC9xKU=
Subject key identifier: FB:F8:2A:02:07:F7:E8:C4:93:0F:7B:8E:6F:1F:52:45:55:59:A2:F1
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F86AD7123EE048110CB399285564E668F
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-_gqAgf36MSTD3uObx9SRVVZovE.roa
Signing time: Fri 17 May 2024 13:11:04 +0000
ROA not before: Fri 17 May 2024 13:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:ad:71:23:ee:04:81:10:cb:39:92:85:56:4e:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 17 13:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf82a0207f7e8c4930f7b8e6f1f52455559a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:c7:11:98:de:07:87:f3:8f:6a:6f:6c:03:
6e:c6:6c:f1:c6:0d:af:9a:9d:f1:f3:5b:69:65:2a:
9e:ae:71:f2:15:e4:bc:f9:4d:e4:e7:85:dc:99:a3:
03:62:45:34:a6:77:44:4e:5d:2b:b0:1c:65:d5:1b:
c5:12:07:b8:a2:11:ec:4a:37:f4:9f:9d:b3:67:04:
5f:f8:86:fa:a9:de:d5:73:fb:9c:26:64:ba:0b:e9:
f4:a8:aa:bc:9f:75:21:9b:2e:a6:23:f0:84:50:c1:
3f:b9:01:25:c1:56:f6:b8:a3:c2:32:2a:69:16:4f:
5a:d1:58:0a:d2:6b:30:85:9c:2e:63:e3:e5:f4:41:
08:7f:03:cd:5e:50:6b:37:c4:6e:fe:0d:a4:cf:6a:
7d:41:d9:8e:11:d2:ef:21:01:14:5b:7c:59:74:4d:
b7:62:27:ac:54:0b:00:90:25:25:e7:19:ff:d6:71:
74:26:fb:e3:08:37:06:bc:33:65:2b:f2:1f:ee:58:
62:d3:bd:bc:8d:61:0f:f9:aa:b0:6c:f8:c6:cf:21:
82:5f:c9:04:67:5f:71:38:08:ac:b0:8f:80:23:b7:
ed:ba:dc:35:06:8e:b6:44:12:01:df:cf:72:25:e3:
36:7e:77:68:e0:4c:34:1f:11:e2:f5:ac:16:13:a2:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:2A:02:07:F7:E8:C4:93:0F:7B:8E:6F:1F:52:45:55:59:A2:F1
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-_gqAgf36MSTD3uObx9SRVVZovE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:59:43:8e:15:df:b9:60:77:20:73:bf:58:ba:18:98:99:84:
63:d9:1a:a9:18:e1:da:fe:57:46:c0:7e:a6:d4:a8:9d:ea:1e:
c3:04:bc:9a:26:4b:19:86:3e:6a:d5:3c:d1:79:f3:3d:66:91:
94:d0:10:d2:87:be:a5:3d:49:79:67:38:a2:ba:05:5c:5c:15:
da:ea:95:07:b9:b6:39:9c:ae:12:2e:a7:c2:35:90:c9:f6:42:
80:ae:37:13:0b:a1:06:07:72:84:98:10:70:c1:6d:5c:b7:f3:
13:47:18:d1:96:30:b8:7d:2a:fb:4a:b5:f8:be:aa:72:49:9f:
cd:d9:ad:72:d7:c1:0b:ae:cc:bb:70:16:11:9b:c9:2a:db:eb:
a9:20:de:ed:7f:ef:ac:27:2f:e2:7f:ce:c2:c8:9d:7f:db:87:
3c:bd:b6:cd:52:8b:94:c6:79:10:29:e5:8b:f0:7a:e2:2c:6b:
63:31:09:97:15:66:e0:77:57:a3:a2:cc:9f:e6:f1:50:56:a8:
86:42:10:38:89:d2:1f:89:5c:25:3b:66:d8:99:d8:13:ad:c9:
6a:e5:23:6d:dc:6f:4d:a3:15:43:62:16:b1:75:e1:be:2e:de:
c8:74:42:0a:c0:ee:c9:31:27:70:00:3e:30:77:17:79:e6:ef:
6f:d3:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:32:18 2025 by rpki-client