Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/4y3gYADuNb5V1TK-fAPOnGbio_A.roa
File: 4y3gYADuNb5V1TK-fAPOnGbio_A.roa (raw, json)
Hash identifier: g6S9f0j2gzmqR//gODN12fyzz3ESLdZE/3Ine2XpIOw=
Subject key identifier: E3:2D:E0:60:00:EE:35:BE:55:D5:32:BE:7C:03:CE:9C:66:E2:A3:F0
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F59D5864191FCB356AD1AF6A3B72E8BE3
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/4y3gYADuNb5V1TK-fAPOnGbio_A.roa
Signing time: Wed 08 May 2024 20:11:56 +0000
ROA not before: Wed 08 May 2024 20:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:d5:86:41:91:fc:b3:56:ad:1a:f6:a3:b7:2e:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 8 20:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e32de06000ee35be55d532be7c03ce9c66e2a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:2a:94:07:22:4d:e0:00:06:c9:37:71:64:
bf:ae:d7:03:73:77:ac:b5:34:4a:11:2d:78:70:8f:
f6:28:e8:1a:0a:77:90:4c:07:e1:79:e2:60:58:ec:
12:a8:cc:0b:c1:28:a8:fb:b0:71:03:95:d4:b7:6c:
26:7e:51:bb:79:c2:25:7f:77:93:cc:61:e0:fd:3a:
0b:11:82:33:e0:50:16:b7:f2:78:93:71:5a:ea:4e:
aa:00:cd:b0:ab:7f:a3:5e:00:91:6e:c0:86:bc:58:
fd:3d:af:95:f0:4a:d8:d4:6a:c4:18:24:c8:57:7a:
9d:fd:9a:6e:fb:9d:04:e1:e5:23:8e:9e:8c:80:2d:
ff:05:d1:5f:30:ef:34:5a:97:21:27:63:b9:16:82:
dc:dc:40:4f:9b:2e:09:24:09:c8:b8:e2:95:05:69:
b4:e3:28:c4:fc:38:96:c1:8a:af:e2:cf:be:b9:38:
04:96:e2:0c:07:8c:51:30:cc:51:a3:0f:40:1f:6f:
93:5f:fc:ca:98:9f:df:60:86:9e:1e:88:91:9a:5a:
93:a5:c2:a9:ac:24:7d:73:a3:75:60:fb:7a:cd:3f:
a6:38:a7:2f:dd:9b:40:eb:c8:a3:a6:ec:f3:1f:57:
24:b5:e9:b3:b4:ac:2d:c0:33:c4:34:58:c1:dd:a1:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:E0:60:00:EE:35:BE:55:D5:32:BE:7C:03:CE:9C:66:E2:A3:F0
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/4y3gYADuNb5V1TK-fAPOnGbio_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:15:31:a1:a2:ac:76:aa:77:fe:e7:a6:9b:b3:45:94:e9:55:
3c:67:12:e2:4a:0b:bb:0e:a2:9a:5d:fd:74:59:b2:d6:01:92:
7d:2c:32:39:de:94:b7:e2:0e:76:c2:62:1c:01:a5:3a:df:3a:
77:f5:22:83:e2:3a:f6:25:16:89:2d:44:ad:b3:76:15:0e:9a:
0d:25:2c:d4:0f:46:9c:24:b6:cd:44:5b:42:0e:4b:cf:7f:d7:
72:d5:d6:d5:5f:d9:7f:a0:19:ef:c7:5b:4a:68:9a:e1:52:6c:
33:cf:39:7c:68:2a:99:34:d0:23:ea:d4:e8:b1:65:ad:e5:ac:
6a:ee:ff:e6:d1:64:28:d3:f6:94:28:3e:5c:ad:88:76:c1:62:
4c:e4:9f:c7:40:86:95:5e:39:59:2b:58:c6:dc:08:4a:34:35:
00:2a:2f:8e:fa:7b:a4:0c:8f:9e:a8:36:1f:9f:5e:02:b9:b9:
fb:cb:97:ea:33:28:e1:e2:4b:45:22:68:94:f8:90:b1:af:52:
56:70:b1:fa:1b:e8:af:e2:41:63:00:d8:76:91:66:64:86:96:
35:42:7b:95:00:8d:bc:36:0e:37:3e:38:8f:fd:b9:98:12:1a:
b8:2a:d1:20:f0:c8:f1:b0:b6:7d:d0:bb:27:54:8d:4c:c0:62:
23:29:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org