Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LjZSZh2t0j1ITtiilki4l_VpmA.roa
File: 9LjZSZh2t0j1ITtiilki4l_VpmA.roa (raw, json)
Hash identifier: fpXYrE/VDoBxXquNuazXuyNrDxDYuZ8ml8EvKrTMpt4=
Subject key identifier: F4:B8:D9:49:98:76:B7:48:F5:21:3B:62:8A:59:22:E2:5F:D5:A6:60
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6C817DA17132C515031B5DC6D2DFAA1F
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LjZSZh2t0j1ITtiilki4l_VpmA.roa
Signing time: Sun 12 May 2024 11:12:56 +0000
ROA not before: Sun 12 May 2024 11:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6c:81:7d:a1:71:32:c5:15:03:1b:5d:c6:d2:df:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 11:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4b8d9499876b748f5213b628a5922e25fd5a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:d3:85:a8:21:cf:8d:79:dd:9c:47:f3:c7:
a9:38:2f:3e:79:62:6e:e7:d4:70:58:47:14:58:d6:
ec:4c:0a:0c:97:ce:5a:d8:d3:3a:a5:74:84:c8:17:
23:7b:b7:7e:bf:55:52:ae:f9:b7:8a:cb:bd:30:7c:
98:10:15:35:43:96:55:d7:f5:70:77:14:05:ca:e2:
7c:2c:bc:e5:c3:d1:b9:7f:46:2c:33:1d:5d:72:00:
d4:d9:bf:af:01:2b:bc:fb:fb:49:a7:1b:0d:95:3a:
25:38:71:72:71:2a:c5:62:ed:67:c6:6e:3c:a3:d9:
d2:66:1d:54:c5:24:e3:1f:bd:67:0d:f8:9b:29:80:
f1:55:8f:8a:9d:36:37:0e:d1:24:e8:6f:77:67:a0:
93:41:f3:3c:65:bf:de:b1:4e:b1:16:bf:90:ca:fc:
2b:b8:8c:de:d4:14:6f:b0:e6:70:12:d2:42:35:44:
57:a5:af:44:1e:95:41:ee:bb:44:69:9a:f0:0b:9c:
a4:3b:c7:2f:81:c0:7a:ae:c1:42:3b:8a:48:13:e5:
f8:05:79:fa:64:6c:9e:39:94:6b:ec:ed:10:34:9e:
3b:11:76:49:1b:6e:1d:83:31:33:24:04:dc:41:f8:
92:d3:10:fb:b9:4b:ff:2f:75:76:da:ac:45:ec:b0:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:D9:49:98:76:B7:48:F5:21:3B:62:8A:59:22:E2:5F:D5:A6:60
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9LjZSZh2t0j1ITtiilki4l_VpmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:d9:c3:9b:14:81:77:78:2c:9d:c2:c2:ca:e7:22:f3:8e:b3:
28:e5:00:86:56:42:68:f3:55:4a:3f:f9:3c:78:da:5f:c9:32:
66:e0:fa:75:90:14:3c:a4:24:9b:56:00:e5:78:f9:f1:96:77:
c7:80:c8:16:d9:e7:7c:75:cb:15:2f:bd:50:c8:5a:f6:cd:86:
41:9a:1b:bb:f1:0f:4b:23:01:58:b5:cc:07:4d:d0:d7:0b:af:
90:de:d6:9a:4e:f6:f7:86:90:d7:c3:db:01:62:b9:b0:e4:99:
c4:06:0f:c2:14:19:61:00:5e:eb:39:4b:b0:ab:06:fd:09:ed:
86:58:2a:32:76:87:74:84:b1:e7:d5:83:c3:ac:0f:65:bb:2d:
f0:b1:2d:59:f6:e7:a4:58:b3:fb:5f:83:f4:b3:07:76:43:41:
f0:19:ec:df:25:fd:2d:f7:7b:5f:f3:5f:5d:ff:2b:bb:ec:c3:
b9:e5:ab:6f:01:31:4b:80:4b:ab:3d:65:3c:0a:4b:5b:f0:21:
40:a4:bb:08:7e:37:54:e7:fc:85:c2:2c:dc:91:5f:67:a5:35:
c0:37:ac:c7:81:32:68:0f:73:eb:c2:d0:c4:d7:36:0c:4f:0d:
65:95:4e:13:81:a8:a1:84:6b:c4:55:4c:64:f8:2a:98:b8:14:
78:fe:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:43 2025 by rpki-client