Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-l_oqvAINGGsFWUIZkRajk69xj8.roa
File: 1-l_oqvAINGGsFWUIZkRajk69xj8.roa (raw, json)
Hash identifier: jF6p4FUDXPxk9QCMlMiYzEr5sKStU6vecSRkSEhiv78=
Subject key identifier: FA:5F:E8:AA:F0:08:34:61:AC:15:65:08:66:44:5A:8E:4E:BD:C6:3F
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3FDECB3484F560ABC34CE6FFF0AAFC1B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-l_oqvAINGGsFWUIZkRajk69xj8.roa
Signing time: Fri 03 May 2024 19:11:56 +0000
ROA not before: Fri 03 May 2024 19:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:de:cb:34:84:f5:60:ab:c3:4c:e6:ff:f0:aa:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 3 19:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa5fe8aaf0083461ac15650866445a8e4ebdc63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:db:4c:41:f4:5e:0f:21:91:91:ea:71:37:
0e:47:a1:7b:2b:54:b3:cf:52:1c:f2:88:6c:3f:e7:
1e:85:30:ab:1e:de:f7:36:54:69:e5:59:00:2c:2e:
6d:d7:4e:02:fb:f4:1c:1b:3b:90:0a:e0:5f:66:ee:
fc:b9:0e:94:7d:bf:89:66:db:2d:5b:43:6e:ee:c0:
aa:20:b0:97:19:d9:38:e2:e6:e3:ea:ee:4e:af:ef:
09:d1:11:f2:cd:7d:ae:bb:8b:b0:aa:6e:d4:11:ff:
26:d8:bb:74:c8:9f:60:2c:9b:ae:99:79:0c:0d:78:
60:a7:03:72:da:ee:f7:06:99:4d:3a:c7:26:30:64:
dc:98:06:08:c1:fa:18:69:e5:b0:78:06:2d:56:48:
3e:6f:55:f1:7d:79:41:5a:95:25:15:5a:39:87:e4:
3e:dc:0d:bb:72:2d:a8:99:5f:5c:2d:72:63:0a:e9:
03:2d:9c:fc:c9:7f:bd:28:c2:05:95:d9:ad:df:ed:
01:83:17:ae:83:9a:7e:09:bd:8b:c4:9a:6d:e9:05:
39:7c:3b:03:a7:77:62:53:05:6f:39:78:42:b9:15:
21:c3:e0:6c:a0:e2:55:69:5f:13:99:ca:47:55:c1:
e1:ae:a5:71:fc:2c:8f:b2:5b:09:d5:69:af:56:b0:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:E8:AA:F0:08:34:61:AC:15:65:08:66:44:5A:8E:4E:BD:C6:3F
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-l_oqvAINGGsFWUIZkRajk69xj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:f4:7e:0a:f6:3f:78:0d:e6:fd:68:5e:d0:81:c7:a9:63:0b:
3e:a9:d6:e3:23:5f:9e:34:8a:62:c3:55:94:91:1c:ab:6a:fa:
32:03:b6:02:a7:6b:ea:02:7c:ae:4f:b9:3b:62:5d:c1:23:b6:
b6:24:e7:84:60:8f:b6:1b:34:9d:18:87:cc:7c:27:28:ed:e7:
c4:e0:8f:2d:2f:a7:4b:6e:3a:66:36:f7:bc:20:67:b2:8e:de:
1c:cb:68:c0:b3:17:ab:8b:4c:ac:ef:85:2f:d6:c8:bf:96:e1:
05:59:24:d5:4c:e5:d2:fd:00:79:7b:fd:c3:3c:43:eb:ea:ad:
02:31:26:d3:c0:d0:4c:57:c2:be:78:b0:4e:c2:6a:f9:41:50:
7a:c0:b5:e8:4b:e2:5b:70:ca:de:05:31:43:8a:23:dc:dc:da:
d4:b9:cc:af:b0:3b:15:c2:4b:77:f9:c4:47:e7:fc:58:1a:22:
79:a0:8e:f2:75:04:58:5c:67:16:04:56:0d:20:c7:65:e4:87:
bc:c0:32:98:43:e3:71:f6:73:c9:95:a9:05:7d:25:11:89:fa:
04:8a:8e:4a:b9:c4:f5:72:59:77:c8:4e:dd:4a:eb:d5:32:d2:
a7:44:49:6b:11:75:f8:a1:4c:c0:c8:4a:51:c4:25:ef:22:b5:
ae:d3:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:29 2025 by rpki-client