Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7bTRImxZRhqxkfrUqakDewpScfk.roa
File: 7bTRImxZRhqxkfrUqakDewpScfk.roa (raw, json)
Hash identifier: 6ZRNOiE8sWpj9lbR4jNG45v5AsyRso3k2g051a1awcE=
Subject key identifier: ED:B4:D1:22:6C:59:46:1A:B1:91:FA:D4:A9:A9:03:7B:0A:52:71:F9
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F65D9B1BB1D427989CF24DE6812178E51
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7bTRImxZRhqxkfrUqakDewpScfk.roa
Signing time: Sat 11 May 2024 04:11:56 +0000
ROA not before: Sat 11 May 2024 04:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:65:d9:b1:bb:1d:42:79:89:cf:24:de:68:12:17:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 04:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb4d1226c59461ab191fad4a9a9037b0a5271f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:df:7b:97:96:c9:1f:01:b8:b1:69:8a:d0:
c9:9f:c7:07:05:64:6a:41:8f:65:7f:e1:55:3e:f6:
38:17:cd:b8:ae:3a:67:17:a8:10:40:1a:27:65:42:
39:40:ce:dd:6f:ac:5d:85:33:c7:0d:20:91:ff:5d:
27:47:a3:b2:0c:6e:03:6e:bd:c1:03:d7:45:02:ca:
a4:1b:a3:e8:d6:71:5a:80:23:08:22:f2:b4:99:4a:
31:43:2a:bf:1c:dc:f4:17:a9:ee:17:96:79:9e:d8:
ef:61:50:56:ef:ec:03:78:e3:d5:af:92:b0:87:47:
92:45:05:9d:c6:ae:3e:e2:b3:15:f4:10:1b:b6:e8:
24:75:81:2f:86:c3:c4:ec:47:7e:87:f4:6e:d2:fa:
a0:c7:0c:eb:43:ad:16:5c:f7:5b:00:e9:d7:05:d0:
d9:40:c6:db:ad:39:ae:88:f4:e8:d8:5b:c7:4d:57:
90:c1:78:60:bc:96:ff:78:b5:34:e8:fd:05:93:f9:
69:7e:2f:ed:f6:71:6f:02:ae:2f:a1:5a:1c:9e:3a:
28:f8:24:41:84:2d:27:f2:30:eb:9b:b9:0b:71:b1:
01:8b:c9:6b:45:c0:99:97:8d:46:2a:88:f5:0d:26:
5c:a0:03:86:4e:a7:99:42:73:66:c4:47:db:84:73:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:D1:22:6C:59:46:1A:B1:91:FA:D4:A9:A9:03:7B:0A:52:71:F9
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7bTRImxZRhqxkfrUqakDewpScfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:ba:73:72:75:e6:b8:af:54:59:6f:01:68:7a:84:ac:74:9a:
8a:e3:5b:4f:fe:cd:5e:5b:03:42:32:05:0d:24:59:44:0e:79:
e6:b9:40:d0:7e:46:73:62:fa:2f:af:4a:8f:f1:c7:b3:8b:a2:
92:ce:11:06:2f:17:c5:6a:a4:18:1e:d1:d5:9c:c6:a7:d4:0c:
e7:64:1a:e0:8d:23:96:37:0e:f8:ab:ac:57:47:b4:68:7b:9f:
fc:b8:59:cc:2e:58:3a:55:fc:69:c4:03:b8:10:1c:81:6d:0a:
ce:72:1b:6d:4d:ca:ab:80:a2:7c:5b:a5:78:b6:89:f5:a3:05:
d6:ee:ae:7f:bf:9c:c1:88:cb:e2:2c:46:89:dc:13:f8:db:28:
31:c8:00:11:67:61:59:32:88:74:a2:26:ac:b9:c2:ce:7d:e5:
9d:3d:56:67:ad:12:f9:ae:89:7d:b8:74:b7:4d:ec:d6:c0:a1:
9a:f5:4f:6b:ae:53:48:07:3b:f9:2d:a9:7a:a5:76:e4:7b:c3:
5c:c4:80:84:83:1a:d1:dd:c4:cd:95:3d:0c:ae:26:6c:66:86:
ef:77:0b:ee:a7:bf:7a:2c:22:bd:89:30:d0:ef:42:ae:ba:f7:
60:ae:3b:b9:bb:81:71:f3:4b:6e:cd:1a:ad:3b:9f:ff:eb:16:
1b:22:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:42 2025 by rpki-client