Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/HXwDs5PtK_0QRN6itLOxys3q9BU.roa
File: HXwDs5PtK_0QRN6itLOxys3q9BU.roa (raw, json)
Hash identifier: ItadPKI/KKBVHrn4018qSaFdoT1fFPFUPJABwIzxT9E=
Subject key identifier: 1D:7C:03:B3:93:ED:2B:FD:10:44:DE:A2:B4:B3:B1:CA:CD:EA:F4:15
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8D5627814E1D28D9199FFBB23C932284
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/HXwDs5PtK_0QRN6itLOxys3q9BU.roa
Signing time: Sat 18 May 2024 20:13:04 +0000
ROA not before: Sat 18 May 2024 20:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:56:27:81:4e:1d:28:d9:19:9f:fb:b2:3c:93:22:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 18 20:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d7c03b393ed2bfd1044dea2b4b3b1cacdeaf415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:ac:7a:2e:22:82:49:24:10:c0:e3:7c:73:
f4:2c:b3:68:04:d1:64:28:e7:1d:00:6e:ea:aa:ba:
ec:c2:76:c4:9c:2b:20:3e:6a:e1:99:a3:fb:46:dc:
5a:53:cc:23:90:bb:02:fa:ff:75:dd:da:f6:05:0f:
96:c2:7d:bf:89:22:37:7a:03:e3:e5:fa:ea:ac:40:
a0:5d:77:a7:ae:c4:39:b2:aa:42:24:1e:89:d4:19:
c2:b1:7c:5a:01:f2:55:76:18:18:68:4d:1b:30:a3:
77:2c:36:60:6c:c3:0e:3f:fc:a0:5b:e4:e7:da:f3:
ae:ee:b0:ac:73:24:21:3f:45:53:30:21:cb:3b:cc:
48:23:d0:f8:af:68:35:4c:fb:0b:d3:c0:a6:65:8f:
82:a3:21:b7:84:77:61:58:a2:15:c7:9b:bb:7a:3c:
ce:57:41:36:e8:66:fe:0a:1f:95:25:c2:d1:20:ec:
23:b9:92:71:58:f3:52:b3:87:16:29:63:bf:59:d1:
da:6c:e5:00:f7:8a:35:6c:e2:c7:55:3a:7f:6d:30:
97:3a:18:54:4a:ce:6f:5e:36:94:34:c8:04:11:9a:
07:ef:c1:49:ad:88:d6:57:f7:7a:96:b7:3f:1e:fa:
c8:ab:01:0a:78:2b:30:36:46:25:57:da:c4:24:59:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:03:B3:93:ED:2B:FD:10:44:DE:A2:B4:B3:B1:CA:CD:EA:F4:15
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/HXwDs5PtK_0QRN6itLOxys3q9BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ac:c1:f7:d9:ff:11:43:55:f7:7b:32:9b:a8:23:af:45:d1:
f9:28:fb:78:f4:3f:40:25:bc:1f:2f:23:79:83:f5:87:7e:8c:
c3:45:e6:f3:c1:7f:a2:26:5e:45:c7:8b:cb:fe:37:03:22:9f:
64:ec:c0:88:e5:cc:fc:46:07:93:58:9e:cf:bf:1a:b9:6e:dc:
19:7d:b6:02:1c:e7:3f:a3:af:09:7d:04:85:4c:8a:52:0c:5e:
80:78:76:ef:16:7e:ba:b5:ac:aa:a4:58:c8:7c:7c:27:fd:2a:
0f:80:87:44:84:e5:f3:c5:e0:a2:bd:55:2e:02:38:9d:1c:30:
fc:0f:6b:ce:a2:4c:83:15:27:8e:4c:ab:1a:92:1a:56:93:40:
d4:70:d1:95:bb:2d:0a:c7:92:95:19:f2:53:2e:47:13:82:c4:
31:b6:01:a3:9b:a0:76:7d:c6:13:08:4e:86:68:71:e4:c1:d2:
0e:bd:a9:74:22:b8:ee:5c:35:03:b3:c1:88:49:fc:87:9e:d5:
04:ac:c9:fd:ab:4d:19:ca:d0:c2:18:24:d6:eb:4a:39:bb:9d:
1e:b1:3d:3f:35:99:e0:4a:d1:48:5e:79:6a:d3:4f:b5:5f:7b:
88:e5:f6:74:4a:f2:ea:70:24:d0:29:e6:1b:68:e1:d4:6c:97:
bf:4c:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:49 2025 by rpki-client