Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa
File: E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa (raw, json)
Hash identifier: sxUOOxufDGsEZqXQOwV/dcoTYRKnZ9F1rrtVApskIFs=
Subject key identifier: 13:99:16:14:4F:4C:1C:66:21:3A:56:68:01:1B:17:EC:2A:F6:70:00
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F78EBBA7DD5631E312123004306516A25
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa
Signing time: Tue 14 May 2024 21:04:25 +0000
ROA not before: Tue 14 May 2024 21:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:78eb:91f9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:78:eb:ba:7d:d5:63:1e:31:21:23:00:43:06:51:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 14 21:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139916144f4c1c66213a5668011b17ec2af67000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:04:ff:36:96:93:77:51:18:8c:7d:07:47:
5c:b1:62:40:e9:9e:da:ad:7a:ef:61:ed:f0:e4:dc:
35:10:89:4d:80:61:2a:93:41:cf:18:a9:be:df:7e:
c8:d8:80:5b:89:cd:49:cf:c7:33:80:b2:b7:3a:58:
1e:f9:0d:2a:7d:54:db:8c:70:9d:a5:09:8b:a4:30:
ec:4e:21:aa:bf:65:fd:ee:a7:ab:9b:e2:10:06:9c:
7d:25:d8:92:77:d8:b2:59:c9:a2:76:37:cb:33:f8:
61:66:a2:99:65:61:07:4f:7f:59:4b:c0:a0:d7:a6:
19:83:e6:0d:05:10:0e:55:0e:c1:9a:17:27:99:a2:
32:34:ff:25:77:9a:af:17:75:f0:d7:35:f2:1e:cc:
42:88:7f:fa:a0:e7:01:5b:9a:54:52:54:ed:5e:63:
77:fd:c2:cd:f5:6a:17:49:20:1e:50:42:fb:63:e8:
6a:6c:0d:a8:3e:00:e2:9e:81:29:82:8f:df:2e:d1:
4a:1c:04:37:09:f1:89:2c:ed:ea:99:41:54:59:fb:
2d:b1:85:52:d2:a0:70:41:bf:82:f4:9a:04:3c:52:
1b:fc:9b:19:15:ce:f4:97:6f:5e:83:9f:93:09:d1:
78:4c:93:82:45:e9:f7:18:e4:ff:42:91:71:e8:41:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:16:14:4F:4C:1C:66:21:3A:56:68:01:1B:17:EC:2A:F6:70:00
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:44:39:03:8c:f1:b5:bd:3a:05:45:6b:54:63:4c:f1:4d:33:
ca:d0:3b:c4:cd:0a:eb:00:21:41:d4:3b:c9:53:dc:23:3d:a3:
2e:84:47:a7:fc:35:4e:5a:ab:67:7e:1c:72:1c:c6:e2:ef:c3:
cf:3e:16:05:51:af:29:a8:8a:2a:64:fa:5a:fe:3b:3e:62:ca:
fd:18:c4:33:50:7a:09:56:1f:8b:b4:78:e7:89:cc:47:c5:09:
1f:b3:90:67:b0:63:10:c6:1e:75:70:90:58:6f:8c:16:e0:2c:
d9:3f:8e:ce:63:d3:12:03:a9:11:1b:53:da:50:8a:7e:e9:9a:
e2:74:43:57:70:76:dc:a2:9f:ab:31:e4:cf:d1:2e:44:65:64:
f2:e9:94:20:8f:1f:7b:3a:b8:2e:57:3a:ec:73:23:54:df:d0:
b1:67:80:b4:9b:0f:27:8f:a8:9f:2c:f0:7a:ff:14:57:e1:53:
f2:70:1a:61:68:35:d5:d8:bb:33:30:6c:2e:28:31:47:c0:96:
9a:86:c7:f4:03:61:51:11:06:2e:bc:8c:57:5d:88:f4:09:93:
a3:db:eb:36:5b:29:a2:b6:aa:68:90:96:14:b5:31:ae:b7:05:
70:35:e8:1a:93:c5:15:ea:61:b8:29:35:6b:aa:09:ee:b9:ff:
15:ec:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:20 2025 by rpki-client