Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9CwxVRB8F084qodeaVCPOhaDW78.roa
File: 9CwxVRB8F084qodeaVCPOhaDW78.roa (raw, json)
Hash identifier: o06guAirQfJZgLKKg/DJudphiiJGQ6WuX1PZ7I+WxYc=
Subject key identifier: F4:2C:31:55:10:7C:17:4F:38:AA:87:5E:69:50:8F:3A:16:83:5B:BF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3BCB17755B0552CDADFC94A19DACCE1D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9CwxVRB8F084qodeaVCPOhaDW78.roa
Signing time: Fri 03 May 2024 00:11:56 +0000
ROA not before: Fri 03 May 2024 00:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:cb:17:75:5b:05:52:cd:ad:fc:94:a1:9d:ac:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 3 00:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f42c3155107c174f38aa875e69508f3a16835bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:b9:3a:db:63:d6:67:38:00:00:ff:26:8b:
2e:ff:5c:6b:c2:98:c6:98:d4:d2:3b:ff:d6:40:38:
c7:a8:04:b1:68:8c:01:92:1b:de:35:83:41:0a:8e:
d3:e5:cb:9a:ed:64:62:0f:f7:86:5a:da:f0:03:11:
bf:25:d7:b4:1f:71:8d:35:04:ea:e2:5b:b9:0e:4f:
91:97:fa:8b:4c:34:31:09:b9:51:0a:58:6e:f5:5e:
ed:55:d9:66:18:43:f5:5a:3b:b0:85:30:5c:67:b7:
5b:36:34:96:49:5e:37:ed:61:b0:9b:fc:18:48:f8:
81:e0:43:85:bf:7f:a3:b5:93:e3:1f:c8:47:2f:4b:
2e:01:66:5b:4b:05:03:30:05:65:14:9b:af:35:fc:
0f:30:fb:66:d4:92:3e:90:75:33:5d:d9:c9:9c:ed:
e3:86:25:75:c1:f4:30:64:d2:ce:69:65:5d:a8:38:
c3:20:67:3c:45:fd:38:9d:8e:ee:51:37:70:ac:f8:
b4:10:50:97:0c:92:31:ed:e0:6d:30:bd:b0:e8:1a:
cd:7b:0a:90:33:33:4b:7f:1c:8a:4e:80:9c:16:9f:
07:4b:5f:af:3e:b8:c1:ed:5c:85:bf:54:4e:f1:29:
60:f6:2a:43:86:56:f1:6c:91:27:d2:14:c4:40:29:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:31:55:10:7C:17:4F:38:AA:87:5E:69:50:8F:3A:16:83:5B:BF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9CwxVRB8F084qodeaVCPOhaDW78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ea:07:cb:63:b8:db:0c:48:6f:18:28:7b:be:72:9e:0b:3b:
35:a3:36:90:42:9f:66:ca:08:b7:73:b8:86:94:94:dc:4f:ee:
65:46:f3:16:79:70:29:52:63:1d:71:aa:76:a2:ae:91:2f:bc:
d9:b8:e1:28:13:27:8a:75:1c:47:1c:02:80:e9:8f:2c:50:27:
91:d7:12:4f:71:71:42:90:2c:77:c7:9d:ef:9a:d8:db:38:f7:
43:14:5e:ce:97:0d:4b:56:d1:46:c1:b7:8c:17:d1:c9:f7:20:
c0:71:b6:97:f7:7e:c6:7b:54:7d:d3:e7:c5:8b:d5:f7:4f:a4:
8b:41:26:2a:43:e8:27:0c:be:bf:a9:c4:e6:64:05:7c:04:e3:
28:d8:e2:2f:36:9e:8d:30:bc:5c:3f:5d:23:42:5c:22:99:80:
79:a0:e0:ae:0a:4c:fd:ad:c2:1f:9b:7a:4e:a2:45:72:df:dc:
42:08:11:d8:27:60:0b:c1:b6:34:b6:dc:df:ca:b2:65:44:2f:
fe:41:e8:eb:31:2f:a1:3f:1b:be:59:05:f5:6f:fd:9e:92:c2:
0d:d4:3a:e5:7b:f5:63:fc:ba:e2:83:c0:4e:52:05:54:6a:85:
a6:13:d7:94:74:d9:07:ff:7e:80:d6:ad:35:e1:7c:09:32:b6:
1a:24:4a:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY87yxd1WwVSza38lKGdrM4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTAzMDAxMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDJjMzE1NTEwN2MxNzRmMzhhYTg3NWU2OTUwOGYzYTE2ODM1YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPy5Ottj1mc4AAD/Josu/1xrwpjG
mNTSO//WQDjHqASxaIwBkhveNYNBCo7T5cua7WRiD/eGWtrwAxG/Jde0H3GNNQTq
4lu5Dk+Rl/qLTDQxCblRClhu9V7tVdlmGEP1WjuwhTBcZ7dbNjSWSV437WGwm/wY
SPiB4EOFv3+jtZPjH8hHL0suAWZbSwUDMAVlFJuvNfwPMPtm1JI+kHUzXdnJnO3j
hiV1wfQwZNLOaWVdqDjDIGc8Rf04nY7uUTdwrPi0EFCXDJIx7eBtML2w6BrNewqQ
MzNLfxyKToCcFp8HS1+vPrjB7VyFv1RO8Slg9ipDhlbxbJEn0hTEQCnk3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPQsMVUQfBdPOKqHXmlQjzoWg1u/MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvOUN3eFZSQjhGMDg0cW9kZWFWQ1BPaGFEVzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABzqB8tjuNsMSG8YKHu+
cp4LOzWjNpBCn2bKCLdzuIaUlNxP7mVG8xZ5cClSYx1xqnairpEvvNm44SgTJ4p1
HEccAoDpjyxQJ5HXEk9xcUKQLHfHne+a2Ns490MUXs6XDUtW0UbBt4wX0cn3IMBx
tpf3fsZ7VH3T58WL1fdPpItBJipD6CcMvr+pxOZkBXwE4yjY4i82no0wvFw/XSNC
XCKZgHmg4K4KTP2twh+bek6iRXLf3EIIEdgnYAvBtjS23N/KsmVEL/5B6OsxL6E/
G75ZBfVv/Z6Swg3UOuV79WP8uuKDwE5SBVRqhaYT15R02Qf/foDWrTXhfAkythok
SrI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org