Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E3IyrWaIQf11eTc3peq5bq7ce24.roa
File: E3IyrWaIQf11eTc3peq5bq7ce24.roa (raw, json)
Hash identifier: 6GKa0OQ1uTuMsZvbPjfOuB5w8Xo05w1nQcdyaY8WQx4=
Subject key identifier: 13:72:32:AD:66:88:41:FD:75:79:37:37:A5:EA:B9:6E:AE:DC:7B:6E
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5F30FBA17AE5BF6EE6870EB0678E80C1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E3IyrWaIQf11eTc3peq5bq7ce24.roa
Signing time: Thu 09 May 2024 21:09:56 +0000
ROA not before: Thu 09 May 2024 21:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:30:fb:a1:7a:e5:bf:6e:e6:87:0e:b0:67:8e:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 21:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=137232ad668841fd75793737a5eab96eaedc7b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:f4:57:58:bb:ec:a3:55:6b:42:7c:46:1a:
f0:d3:40:b6:56:86:37:69:b7:d6:c8:81:51:20:e9:
e3:f9:06:80:64:81:95:f3:36:1c:18:4b:71:d1:8f:
b6:68:56:ce:4c:71:a0:99:8e:df:b2:eb:9f:5c:aa:
05:f5:f1:25:5a:96:b5:ca:6f:2f:53:b9:5f:27:4c:
fe:81:e2:03:fa:6d:63:00:38:ac:9d:2b:9e:47:d7:
3a:de:b2:aa:5b:36:8b:b6:18:e2:f6:81:f5:17:f1:
65:92:a8:cd:36:a4:74:f6:38:37:06:a4:ce:73:c6:
d3:31:f9:63:37:fa:ad:31:0a:76:5c:5e:8e:a2:0a:
f4:64:83:a2:b8:4a:33:90:2e:54:26:30:ab:03:77:
d9:5b:e9:72:e7:cf:79:f6:ec:cc:15:50:bb:79:57:
82:0d:27:f6:b7:31:ce:51:56:d7:07:c9:20:0b:62:
0c:34:de:8c:9b:30:52:df:50:3c:26:67:d7:1b:48:
76:40:a3:25:c2:06:8c:0e:ff:34:db:c6:d2:aa:a2:
15:c8:88:e6:16:6e:26:14:30:27:35:62:fe:4e:e2:
cb:1a:fe:3d:c2:15:1b:bf:04:32:96:13:4d:f2:d5:
a9:57:5b:9a:9b:71:91:e9:22:84:a0:79:31:78:86:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:32:AD:66:88:41:FD:75:79:37:37:A5:EA:B9:6E:AE:DC:7B:6E
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E3IyrWaIQf11eTc3peq5bq7ce24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:07:70:22:84:39:74:02:d9:8f:a6:e6:9c:66:cd:4f:7f:a2:
d7:ce:75:26:4e:ac:05:bb:6e:6e:60:7e:68:92:b6:7e:2e:ee:
6f:13:e6:3c:86:22:a0:de:db:f3:b2:e6:5c:a4:0c:70:1b:31:
22:78:a7:33:c9:36:9e:c4:fc:35:d2:e1:ba:cb:ea:72:d9:a4:
30:78:72:e8:2b:45:42:61:5f:e1:2f:06:8f:7c:c1:0d:29:f7:
b3:9a:56:90:5c:72:12:80:da:a0:a6:b7:fe:13:0e:bd:8a:38:
c8:f7:f1:52:25:c7:68:48:9b:6a:25:7c:25:a6:38:64:08:9f:
ce:86:9e:ba:37:98:e2:9c:af:68:9d:56:94:6e:90:eb:af:18:
ea:85:08:6e:d3:e0:c1:4f:15:3f:a7:ab:22:38:ff:ba:5f:12:
8a:b7:0b:b6:5e:8c:f9:6b:f7:ce:fe:fc:5b:83:d4:ae:9d:15:
7d:a7:02:1a:22:b0:2e:ea:c8:de:e7:5f:a4:d4:ae:cb:3a:42:
ff:7c:fe:ae:32:46:cd:aa:12:f6:1e:79:c9:bc:a0:ff:93:bb:
ee:ed:8d:d5:a1:61:3d:0c:86:b6:94:dd:75:ea:6a:28:0c:4f:
f0:29:5a:1f:9e:7d:17:cd:9b:a2:09:60:5d:4c:d4:8c:7f:a8:
cd:44:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:49 2025 by rpki-client