Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/G7ebDlWwpz4w1anhqjW91ciVITY.roa
File: G7ebDlWwpz4w1anhqjW91ciVITY.roa (raw, json)
Hash identifier: RPFSA6OppCr8kl+6o2k9YHfTRAtHCJFEUvoGwi8s3xU=
Subject key identifier: 1B:B7:9B:0E:55:B0:A7:3E:30:D5:A9:E1:AA:35:BD:D5:C8:95:21:36
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F727CB1DDBD8916E210B29543BEA2D39A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/G7ebDlWwpz4w1anhqjW91ciVITY.roa
Signing time: Mon 13 May 2024 15:05:25 +0000
ROA not before: Mon 13 May 2024 15:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:727b:e0f8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:7c:b1:dd:bd:89:16:e2:10:b2:95:43:be:a2:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 13 15:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bb79b0e55b0a73e30d5a9e1aa35bdd5c8952136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:e6:b7:9b:65:a6:b3:71:e5:12:d4:a3:20:
98:32:40:15:e1:87:ab:8c:2c:d3:7f:55:99:d1:d1:
0b:4e:da:50:43:70:bb:fd:73:32:f3:2c:9b:a9:a8:
7c:78:f7:13:44:0d:f0:ff:3e:c9:71:da:5f:96:d5:
49:ef:2f:10:08:80:7b:a7:71:c4:58:e3:99:f5:20:
7a:2e:02:f5:f9:b0:ae:92:d4:b8:50:09:88:1e:97:
8e:fa:98:a5:3a:d7:65:ed:b4:2c:89:d6:fe:dc:05:
83:e8:e8:a5:b6:a6:48:92:d7:dd:10:2d:66:6f:a2:
36:36:b1:9b:7c:88:d0:08:53:0c:f5:48:2a:03:94:
82:73:0d:c0:bb:7c:0c:63:a9:59:c6:91:58:84:ce:
44:33:ac:f9:c8:ae:ba:50:8e:1c:a8:11:42:dc:d6:
ae:a4:1e:f6:24:b9:46:1b:b8:c3:18:36:c2:d0:39:
9b:15:67:5e:94:5b:7f:3b:b8:b7:ba:77:ef:12:93:
c7:bb:fa:16:f2:7b:0a:51:97:10:4c:d7:de:b5:9f:
e4:dd:c1:20:a9:4c:17:99:d8:92:af:95:7b:17:07:
d8:2f:74:d9:60:d8:15:fe:43:3e:c6:81:89:73:f2:
0d:8f:b9:08:07:d5:06:60:a5:ec:dd:31:87:c7:69:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:9B:0E:55:B0:A7:3E:30:D5:A9:E1:AA:35:BD:D5:C8:95:21:36
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/G7ebDlWwpz4w1anhqjW91ciVITY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:95:4e:ae:68:38:c4:08:b8:e8:2c:2c:45:03:6c:6f:04:68:
7c:e4:fa:de:b7:c3:30:39:4c:3c:b5:58:54:c0:fb:de:39:d5:
7b:d5:8d:cd:ee:57:a5:e6:d1:1d:17:f9:8a:78:69:ce:49:8a:
a9:79:57:0c:0e:70:67:eb:95:67:82:98:93:6d:ff:04:35:9e:
79:80:13:d7:57:3d:da:4e:f7:e6:f8:bb:01:e4:09:ed:72:a8:
3a:29:3b:b9:b0:90:d7:ec:62:66:25:d4:cf:41:cb:ef:af:5d:
60:8e:9e:a1:5b:23:af:65:d6:bc:32:67:51:1c:fd:26:9c:fe:
b4:fb:2a:18:59:c0:55:dc:e2:36:59:c5:88:b1:67:c8:73:75:
df:ad:a5:bf:1b:bb:02:33:ca:d3:55:23:ab:4f:f5:01:01:d8:
1a:2a:8a:93:1e:84:80:8d:86:c9:c5:31:e7:57:52:b0:1f:09:
f8:cb:3e:02:cb:96:26:a8:17:75:7c:51:d0:b6:fc:50:16:9c:
e1:76:ff:0e:d8:e7:dd:45:b6:4d:37:96:ab:3e:3b:f9:6a:c1:
75:6a:db:9e:c2:fd:24:6a:f2:25:ef:77:31:c9:59:a6:b2:12:
0a:30:91:8b:5a:24:74:c2:3b:43:dd:89:be:c9:4e:18:fc:53:
20:14:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:24 2025 by rpki-client