Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1jrINjjNDSgB5zqPX-gSleR7WSQ.roa
File: 1jrINjjNDSgB5zqPX-gSleR7WSQ.roa (raw, json)
Hash identifier: x46Xrm/5rkCgkjJW1I4ypDUTfCQ/USxBdShW6hpD+/c=
Subject key identifier: D6:3A:C8:36:38:CD:0D:28:01:E7:3A:8F:5F:E8:12:95:E4:7B:59:24
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F415F50FDE14895FEEE587468C184BE38
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1jrINjjNDSgB5zqPX-gSleR7WSQ.roa
Signing time: Sat 04 May 2024 02:11:56 +0000
ROA not before: Sat 04 May 2024 02:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:5f:50:fd:e1:48:95:fe:ee:58:74:68:c1:84:be:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 4 02:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63ac83638cd0d2801e73a8f5fe81295e47b5924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:7f:6b:60:63:ed:4a:30:ec:36:83:8a:60:
e4:35:66:e9:c4:7a:9f:27:77:01:ab:71:26:49:c3:
00:38:bd:ab:91:60:42:5d:70:00:34:61:c1:f0:79:
ac:f9:18:85:38:28:09:df:9c:e1:6c:fd:20:7c:42:
d8:a0:2a:5f:bb:be:15:7c:c2:c1:72:7b:14:e5:b6:
2a:0c:4b:ee:25:32:35:67:ba:ad:08:95:eb:69:d1:
ad:fe:37:fc:af:22:92:70:ca:23:20:aa:c2:d6:fc:
a3:99:e8:99:19:74:2b:d1:e6:8b:f5:34:45:de:ce:
4b:e1:0d:7a:c5:ee:88:e5:8f:4a:35:b3:a9:40:f8:
0c:3c:aa:c8:97:ed:c1:cc:2c:d9:6d:cd:1c:48:66:
e8:54:72:a7:7b:b4:ad:9a:f1:fd:84:39:55:9b:fd:
19:d8:9b:6f:48:0d:1f:eb:67:65:5b:d8:1c:f4:72:
fa:fd:42:a6:28:f1:29:b4:ee:94:a5:6a:ac:24:5b:
00:4a:81:0a:11:18:68:65:00:65:5d:2a:be:a2:fe:
f6:84:eb:4b:04:23:8a:fb:96:b2:30:3f:79:6d:77:
98:44:7f:08:63:51:7f:ad:80:04:eb:27:03:49:c0:
3b:fd:74:b5:7c:5a:ce:0f:6e:52:71:ce:48:59:99:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:C8:36:38:CD:0D:28:01:E7:3A:8F:5F:E8:12:95:E4:7B:59:24
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1jrINjjNDSgB5zqPX-gSleR7WSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:eb:da:89:55:39:d1:3d:34:05:9d:32:b9:24:2b:23:b8:92:
64:7e:d9:df:37:37:ad:ee:4e:35:b5:97:ce:68:52:21:b5:60:
38:59:fd:43:b6:a3:f0:27:46:ed:7b:a5:f9:fa:6c:26:b9:eb:
20:8c:cd:6a:e1:c4:1c:15:aa:ae:e5:05:b8:95:96:35:f9:4d:
6b:9d:5c:79:02:3f:96:27:1b:79:f3:7f:59:b7:23:0d:d1:ad:
bc:7f:22:20:db:bc:f8:ef:c1:74:8b:4a:1e:bc:c1:8f:00:76:
3a:a8:4f:c5:02:9c:c4:7b:0a:1e:2e:40:61:e8:a8:6e:e0:1e:
83:30:ba:8b:17:55:6d:41:d5:6d:51:02:e1:1d:0e:b6:bc:2d:
8d:f7:bb:5f:16:d6:05:30:8f:21:5a:f9:1a:98:88:12:b4:ab:
a2:b3:e3:82:f2:c3:66:87:ce:ef:3b:60:4c:53:a9:e1:74:1e:
4b:28:9d:05:09:d8:50:3b:2b:47:23:24:c7:f7:9d:90:5b:fd:
9a:f5:4e:15:3c:64:51:4f:b8:40:e5:90:a7:5a:c1:52:72:fa:
ae:c7:12:af:28:a7:d3:6e:a4:52:ef:37:20:88:19:33:2c:78:
54:47:d4:5d:94:6c:64:d6:47:c1:4e:19:fc:5d:a1:50:88:12:
bb:70:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:55:42 2025 by rpki-client