Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6W2j77fypM8Lw8328ikgfslo_rE.roa
File: 6W2j77fypM8Lw8328ikgfslo_rE.roa (raw, json)
Hash identifier: 9zq0VwR8BIE7FM4J0uEQAQBi61IwIR01vqaA7yYpTR4=
Subject key identifier: E9:6D:A3:EF:B7:F2:A4:CF:0B:C3:CD:F6:F2:29:20:7E:C9:68:FE:B1
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3F70EE57C3ED9BFC49AAD13AEA3051D9
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6W2j77fypM8Lw8328ikgfslo_rE.roa
Signing time: Fri 03 May 2024 17:11:56 +0000
ROA not before: Fri 03 May 2024 17:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:70:ee:57:c3:ed:9b:fc:49:aa:d1:3a:ea:30:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 3 17:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e96da3efb7f2a4cf0bc3cdf6f229207ec968feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:7e:55:ca:c1:26:c2:d6:92:ca:4e:41:3a:
be:25:a6:57:c7:84:bf:94:7a:1d:67:d3:fb:37:79:
de:5a:ae:50:b8:81:fa:a6:43:90:55:e8:3c:72:21:
bf:18:36:ea:db:6f:53:ea:30:25:c6:a0:0c:38:49:
a6:47:a7:94:98:16:b8:6a:13:df:5c:ba:c9:34:de:
bb:d7:7f:c0:18:49:5f:c6:dd:23:e2:df:0b:c9:b0:
6b:a7:73:29:b8:f5:c8:7d:1a:19:72:d5:32:4f:5b:
13:59:f2:8d:22:2f:15:6c:09:3b:54:a6:30:4b:47:
62:e9:ce:b0:f9:ce:1b:91:44:ad:f5:ca:49:ae:08:
58:d5:69:2f:57:ae:02:3d:69:18:aa:f9:87:f7:dc:
0b:b3:de:5e:83:96:5c:31:89:07:cc:f3:51:91:ee:
19:cd:b5:63:69:85:87:a9:68:91:5e:65:56:6b:51:
ea:af:71:e1:30:33:f7:e6:c6:02:16:77:dd:00:54:
f9:63:00:b2:83:22:22:86:9d:4b:72:6f:30:e8:7a:
df:a1:72:c1:56:c7:c9:15:28:24:72:d3:d7:cd:c9:
a7:37:22:e9:a6:89:34:8b:82:1d:6f:08:25:45:f7:
d4:5c:88:0e:f5:ac:a1:a1:c1:ac:23:46:38:15:40:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:A3:EF:B7:F2:A4:CF:0B:C3:CD:F6:F2:29:20:7E:C9:68:FE:B1
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/6W2j77fypM8Lw8328ikgfslo_rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8a:44:6c:d1:84:cd:03:15:d4:cb:7b:f7:c4:b3:38:5f:c2:
7a:1f:35:9d:6e:62:b3:bc:0c:c8:6f:0d:82:c1:6b:f4:85:89:
95:a5:93:06:40:c1:b1:a4:32:aa:ab:83:0a:20:69:29:eb:3f:
06:6d:f3:01:48:ef:0f:76:02:e6:d3:b7:10:23:2c:34:fc:df:
54:0a:e0:33:c1:d2:27:58:90:1e:ed:97:b2:1c:8e:e4:89:b1:
0c:18:15:97:76:28:ef:ff:3a:f3:40:df:57:a5:82:97:b6:b6:
08:74:82:cf:df:d4:76:a4:43:3a:a3:5a:38:6f:c0:e9:80:c3:
dc:0f:0c:f7:aa:e3:06:11:82:9f:92:b9:da:00:59:84:79:f1:
67:6b:32:5a:03:82:79:68:a0:0d:62:a2:90:16:fc:19:cb:d1:
33:ee:9b:25:58:56:90:0c:70:54:5a:d2:10:84:d8:81:26:b5:
e6:0f:0c:ef:9a:d5:a9:26:30:c9:dd:8f:6c:a5:f8:b9:0e:be:
34:9c:51:f0:3c:d9:46:7d:f6:d4:84:6c:39:ec:99:7f:a1:6d:
85:01:93:71:9e:3a:37:c9:00:4a:dc:42:98:16:a7:78:6f:eb:
19:7b:75:c1:47:0e:a3:81:8c:d0:75:52:1d:f5:18:78:8d:ad:
61:ab:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:17 2025 by rpki-client