Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa
File: CdYVAbWEBSX_n2SZVv06hMyTFTw.roa (raw, json)
Hash identifier: S7fQCQcYz4Zc3SWT4A4SzA4A2qfQRuE/yfog20+cryc=
Subject key identifier: 09:D6:15:01:B5:84:05:25:FF:9F:64:99:56:FD:3A:84:CC:93:15:3C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F97A01FC8A8903A4E451DAC66391E9E05
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa
Signing time: Mon 20 May 2024 20:10:04 +0000
ROA not before: Mon 20 May 2024 20:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:a0:1f:c8:a8:90:3a:4e:45:1d:ac:66:39:1e:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 20:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d61501b5840525ff9f649956fd3a84cc93153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:21:be:a6:d0:96:6d:7d:ba:8e:79:a9:dd:d9:
68:a6:12:7c:90:b4:46:6e:09:5f:e3:06:cf:31:ba:
58:8d:16:0c:2a:2b:a0:14:66:5d:98:82:b7:81:21:
84:cd:95:c8:18:3b:02:57:bd:b2:0a:65:9e:0c:56:
5a:87:1c:73:b6:ab:fe:82:d0:a2:ca:c2:67:de:90:
ce:0c:7c:66:ef:7b:fa:91:44:0f:75:e7:8f:a1:a8:
8d:23:d5:e5:07:58:94:8f:dd:25:fa:9e:09:41:e3:
2a:ec:44:21:d3:95:4f:3b:fc:72:28:89:78:00:e3:
a4:b4:e4:75:74:2e:e7:be:f8:35:69:fe:ec:40:5b:
27:40:6d:27:c6:41:07:53:eb:77:b4:81:ce:49:f1:
aa:93:cc:c9:65:b3:e3:2e:19:c9:58:9c:aa:67:f2:
aa:6c:dd:b8:dc:74:ad:5c:8b:a5:e7:dd:c0:86:22:
06:7d:10:13:08:e2:37:7c:b5:2a:1b:38:d5:3e:c5:
81:2c:7a:a1:13:be:5d:4a:4e:3b:94:21:06:30:a6:
ec:f3:ad:2e:08:c5:a7:e9:9c:fb:94:da:b1:d9:59:
71:39:14:96:a2:fd:b5:10:95:db:0b:99:08:63:6f:
28:44:05:2a:92:5f:b8:01:c6:ff:21:ae:86:0a:96:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:15:01:B5:84:05:25:FF:9F:64:99:56:FD:3A:84:CC:93:15:3C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a5:27:ce:ad:80:d8:94:8e:b0:f2:5b:fd:cc:58:fd:31:79:
d4:d4:63:07:74:3c:56:41:21:6a:07:dd:1c:8a:f0:46:d5:d9:
dc:61:59:38:35:da:fc:01:36:c2:8b:28:63:04:f0:50:46:5c:
74:1d:e3:89:1e:51:02:8b:a2:52:97:61:8d:2e:04:25:a5:b4:
96:65:d1:44:82:32:e4:8a:99:05:26:66:e2:65:e0:67:16:99:
0a:92:86:c6:be:20:f9:b0:e0:a5:c0:cc:d2:b9:38:4f:e9:02:
f4:8b:d4:9c:c4:84:d2:1b:46:24:e0:45:89:78:c0:02:78:6c:
12:1a:5f:ca:b5:d5:85:42:b8:9f:5b:46:0d:1f:67:f5:31:e1:
8a:63:44:ae:86:7d:6b:cb:2c:31:f3:2e:85:dd:6d:9e:1e:e5:
9d:8b:12:48:51:b5:bb:d1:d2:b0:cb:b1:ac:d3:3c:1a:40:9e:
a4:52:94:a4:97:65:5a:b1:5a:c2:7c:9b:50:06:40:d7:b9:87:
83:bd:42:f4:b3:f7:81:01:e1:e4:29:a1:dc:f9:14:0e:bc:90:
88:1a:f8:3e:5d:b0:ba:64:69:a4:7f:e3:82:0b:ca:6e:1c:71:
8e:6d:c4:33:9e:39:61:57:73:7c:c4:96:cd:9c:72:2b:6a:ed:
8c:9c:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:12 2025 by rpki-client