Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa
File: F548nbQiubMcc6CjOJswzR3lH2I.roa (raw, json)
Hash identifier: sf7hAUK8b4OJNqRYA2srsvdRDcmsOb/KGjBYAkIfqP4=
Subject key identifier: 17:9E:3C:9D:B4:22:B9:B3:1C:73:A0:A3:38:9B:30:CD:1D:E5:1F:62
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F29424FFCAD1EBE679B9EBB65C6440282
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa
Signing time: Mon 29 Apr 2024 09:49:22 +0000
ROA not before: Mon 29 Apr 2024 09:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:42:4f:fc:ad:1e:be:67:9b:9e:bb:65:c6:44:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 29 09:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179e3c9db422b9b31c73a0a3389b30cd1de51f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:56:ae:7f:99:c6:9d:6e:19:a9:d6:aa:8b:
a9:2b:9e:f8:9b:80:d2:3d:97:0c:4f:ab:71:0d:5f:
85:97:3e:12:c4:90:11:b3:dc:2d:18:e1:10:f5:cf:
a4:8b:fe:17:cd:61:63:56:93:d8:2d:21:3d:3b:55:
21:20:90:c7:0c:37:15:e1:41:f3:bb:10:88:f7:13:
8b:05:58:92:73:0f:6a:de:64:da:45:93:06:be:4e:
93:0a:45:b2:37:a3:60:13:37:49:61:6e:a1:08:23:
48:04:1a:62:d3:35:66:2b:59:10:80:5a:41:6a:13:
ff:0e:2e:db:fa:c1:0c:bb:58:ac:96:e8:c2:e0:92:
c6:f4:f5:7e:7c:64:70:66:45:8c:0e:e9:7e:1e:3b:
b7:b6:20:82:dc:2d:de:6a:19:98:f8:e9:8a:99:3a:
cd:5f:e4:af:36:3b:8f:62:2e:4c:67:ea:0e:91:a9:
2e:9d:10:31:9a:60:44:e2:42:76:57:d9:f1:4c:74:
62:a3:78:87:07:0e:c4:34:a2:26:ac:c7:ef:77:58:
73:2e:29:f3:d4:87:c6:ad:db:bc:8c:f5:be:7e:59:
c2:1b:e4:ea:92:5d:26:34:c4:e1:5e:da:7f:d6:b4:
77:d2:e9:9f:0e:a6:df:71:5c:fd:83:d1:bf:90:1a:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:3C:9D:B4:22:B9:B3:1C:73:A0:A3:38:9B:30:CD:1D:E5:1F:62
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a6:6d:34:3a:7d:98:c9:61:cc:9d:f9:8e:f0:1a:eb:3b:13:
55:8b:eb:b2:49:5b:82:87:7d:72:d0:3f:d2:90:f6:37:95:f2:
ea:2d:14:81:ac:f1:1d:46:18:33:88:67:68:23:3a:6b:a8:38:
77:45:91:56:a0:7a:ff:f6:ed:ad:2c:05:7e:de:7c:82:47:64:
a7:36:9c:34:10:5f:b4:48:3c:dd:cf:2b:a7:8d:4c:2a:73:d8:
6e:42:62:5b:6c:0b:63:ac:bf:ab:5b:70:98:03:6e:b5:d1:f2:
5e:95:4a:92:01:17:65:ff:fa:46:1c:4e:d5:18:52:23:cb:49:
e3:5a:2a:cc:2a:85:93:1c:b1:49:f9:21:4c:f7:57:8f:2e:a7:
48:1e:e6:f0:84:58:72:6d:4f:03:17:9a:96:f6:f9:61:c5:db:
8e:16:13:ac:8e:03:0c:c0:44:92:2f:6e:66:c2:88:f5:8c:2e:
5e:65:6e:42:2e:e4:d6:38:84:9b:b1:6d:12:f9:ab:17:15:fd:
fb:c7:f9:a2:ad:a1:56:0d:1d:3d:cb:22:46:0d:8d:60:53:c0:
3b:b4:a0:e3:6e:17:ce:e1:93:ed:6f:98:77:6e:40:31:c5:c1:
9b:36:0f:53:e1:16:69:07:98:13:63:f1:53:f7:01:27:df:b2:
e9:2b:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:34 2025 by rpki-client