Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BmmtZHXfgWqaI0pXo65vzOMRB5U.roa
File: BmmtZHXfgWqaI0pXo65vzOMRB5U.roa (raw, json)
Hash identifier: 11AKehg5Cs91qhOjvauhVUent8vnmTbZ8nIcpzQv8n4=
Subject key identifier: 06:69:AD:64:75:DF:81:6A:9A:23:4A:57:A3:AE:6F:CC:E3:11:07:95
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F976931E1D485E3F389EBD810E4A3DF2E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BmmtZHXfgWqaI0pXo65vzOMRB5U.roa
Signing time: Mon 20 May 2024 19:10:04 +0000
ROA not before: Mon 20 May 2024 19:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:69:31:e1:d4:85:e3:f3:89:eb:d8:10:e4:a3:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 19:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0669ad6475df816a9a234a57a3ae6fcce3110795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:51:f8:8e:ca:56:9a:b3:2e:58:86:44:87:
bc:fb:9f:2f:6f:83:3b:7e:37:fa:5a:16:bc:3d:97:
37:3a:37:fe:b4:3d:3d:f8:96:d0:aa:84:9b:a4:44:
fe:25:2c:1d:3b:03:96:ae:ac:d9:3f:52:22:ce:e6:
ce:03:bb:8c:dd:c8:77:29:75:fc:df:fc:8f:ff:77:
5b:1a:db:76:6c:62:56:3f:04:8c:54:e1:69:03:65:
72:50:26:c6:b3:0c:10:61:64:81:c8:62:2d:e3:56:
22:e2:ee:95:74:8a:54:41:55:4b:23:06:de:f0:21:
1f:30:d4:c1:89:cb:6e:80:ba:47:af:21:d7:02:db:
ec:8b:ce:f1:d0:8a:82:03:50:fd:2b:fc:a1:c6:ab:
38:48:65:aa:0b:b2:6b:72:ac:82:96:18:3b:0e:07:
89:e4:6a:2d:5b:f7:6e:ec:73:aa:83:c6:cd:f6:5a:
70:67:03:e4:34:7c:60:57:7a:d0:2e:de:ce:2c:f9:
a9:79:24:63:23:8e:ef:27:2c:6e:a0:dc:ee:a7:97:
aa:f0:c5:0f:44:74:13:07:d2:06:9c:ad:50:4c:5d:
3b:f2:73:3c:fe:49:c1:80:21:01:c2:1d:81:f4:02:
30:57:62:44:6d:ee:34:e4:f4:34:60:df:15:af:02:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:AD:64:75:DF:81:6A:9A:23:4A:57:A3:AE:6F:CC:E3:11:07:95
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BmmtZHXfgWqaI0pXo65vzOMRB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ec:7e:05:d1:a4:22:c7:45:4e:8f:b5:1e:44:a0:7d:6f:67:
c3:41:a3:99:2d:0c:ad:e5:2a:8d:92:3d:51:80:1a:af:49:17:
f5:05:59:db:e0:95:35:b6:c3:31:75:eb:a3:e0:a1:ed:cc:7f:
8c:32:bc:aa:45:01:c6:e1:2f:6a:bc:72:90:7f:37:f8:75:96:
35:61:b3:4f:0f:9e:ed:c0:36:0a:c3:d2:af:f3:52:cc:ff:96:
14:a8:86:dc:20:02:6e:ae:79:8d:9e:9d:c4:88:89:2c:18:06:
3a:ad:a5:9c:70:d4:f6:5c:41:bd:d9:93:fd:b0:36:64:d7:37:
12:12:a0:79:5b:d1:c7:19:84:84:79:70:72:b3:cb:2c:fa:b8:
4e:21:ba:ed:8d:db:2a:ea:1a:3b:3a:15:23:e1:02:f9:45:ea:
11:8b:2e:dc:45:31:31:f9:55:b8:32:43:f4:f3:29:ff:66:77:
b4:02:47:a5:9b:e3:cc:11:12:54:e7:03:39:dc:86:f5:1a:e6:
a8:5d:28:85:d2:48:a1:d8:48:ef:d1:d1:d2:95:b1:01:c3:1e:
ef:92:a1:8f:c2:46:8f:c8:83:c6:b6:37:35:23:81:d9:38:46:
a0:67:97:82:05:cd:15:80:8f:e3:c3:d2:e9:37:68:39:70:09:
7c:0e:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:41 2025 by rpki-client