Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IFQJOGDFVT7iHCS7oKdbxxmGBqc.roa
File: IFQJOGDFVT7iHCS7oKdbxxmGBqc.roa (raw, json)
Hash identifier: 41MaYrrjv4xCgJWoDf9UIA31WbH7MzLyDClCpO9YYSA=
Subject key identifier: 20:54:09:38:60:C5:55:3E:E2:1C:24:BB:A0:A7:5B:C7:19:86:06:A7
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9FC387CC0C5D0CEF63B3EBF5BC0BCEE5
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IFQJOGDFVT7iHCS7oKdbxxmGBqc.roa
Signing time: Wed 22 May 2024 10:05:42 +0000
ROA not before: Wed 22 May 2024 10:05:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:9fc3:347e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:c3:87:cc:0c:5d:0c:ef:63:b3:eb:f5:bc:0b:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 10:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2054093860c5553ee21c24bba0a75bc7198606a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:e6:60:ae:04:8a:26:4a:ee:13:95:43:78:
6d:a6:08:e4:fe:d8:04:7d:82:33:c1:0b:40:a9:36:
08:16:0b:c2:fb:7d:fd:9e:8b:a5:44:8d:93:7f:fa:
76:6d:29:b2:4e:b7:61:0a:f0:3f:ee:e1:c1:75:44:
fb:2a:73:94:98:c6:9f:15:c8:fa:a6:a4:68:5c:77:
e3:4c:32:aa:cd:8a:d2:d5:5e:8b:36:ce:a6:5e:30:
a9:ee:7e:91:f8:0e:19:d7:8d:df:0a:de:b1:eb:f7:
9c:c3:97:13:d5:8b:03:e0:63:f6:d9:28:ca:12:68:
f3:42:e4:10:6a:b2:80:09:58:19:2c:c6:c2:08:fd:
75:91:95:c3:d8:3a:d1:80:17:4a:78:fd:41:3e:5f:
55:5d:b1:8c:43:b2:fd:bf:5f:c7:93:fe:ef:ca:8b:
fc:ad:c6:9c:64:4c:b6:30:6f:f9:6f:67:96:20:91:
5e:39:b7:6c:c0:b0:da:8e:af:2c:f5:11:e0:56:01:
cf:5d:86:21:a8:d1:07:4d:c6:c8:4d:f8:8d:7c:d2:
b8:7f:ee:37:5e:d6:3d:c6:66:dc:b8:c6:c9:bd:0d:
84:a2:a1:72:81:fe:58:e2:76:51:06:a8:db:70:17:
73:7b:5c:8e:8c:79:30:ec:a0:76:0e:fb:8c:94:da:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:09:38:60:C5:55:3E:E2:1C:24:BB:A0:A7:5B:C7:19:86:06:A7
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IFQJOGDFVT7iHCS7oKdbxxmGBqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:7b:98:ee:04:45:35:48:eb:65:f8:e1:db:1e:62:f0:61:95:
58:8b:cb:a5:0c:c4:b8:a8:90:2d:9a:d1:5f:65:c9:5e:c5:ea:
02:18:3f:33:36:7f:a2:79:80:11:93:70:5f:de:9f:88:62:c8:
b9:9a:92:f9:8a:44:87:60:b8:28:8a:4c:c4:1c:5f:7f:75:01:
29:91:31:0c:f9:5f:bc:d9:ff:8b:d2:de:f1:f3:0b:02:9f:3a:
ca:1b:06:65:28:d6:85:e5:23:c9:ae:3e:7a:31:8a:64:68:1b:
24:b5:6c:14:2d:1b:38:20:89:9f:87:ed:13:4b:ef:7e:17:d7:
ed:ac:b1:0e:06:30:e2:c0:46:c5:93:dc:9c:fe:26:01:e2:18:
c2:2e:7d:9f:a7:4b:fc:8d:18:63:20:6e:79:57:0c:4e:cd:5c:
25:f0:b8:70:20:0a:5a:93:d1:59:3c:ac:7e:14:d8:e8:db:f7:
3b:0b:db:ac:a3:54:6d:08:de:49:39:d4:55:54:05:5a:77:9a:
0f:a6:51:6d:b0:62:de:53:39:78:ba:53:af:31:86:c4:88:82:
73:6d:8b:e6:bd:7a:07:d1:6e:a1:b0:e1:3a:f6:62:5c:c2:e6:
a4:63:13:92:7e:38:c1:24:b7:b4:6a:93:2e:c0:3a:9c:43:25:
03:5a:73:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+fw4fMDF0M72Oz6/W8C87lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTIyMTAwNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDU0MDkzODYwYzU1NTNlZTIxYzI0YmJhMGE3NWJjNzE5ODYwNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZfmYK4EiiZK7hOVQ3htpgjk/tgE
fYIzwQtAqTYIFgvC+339noulRI2Tf/p2bSmyTrdhCvA/7uHBdUT7KnOUmMafFcj6
pqRoXHfjTDKqzYrS1V6LNs6mXjCp7n6R+A4Z143fCt6x6/ecw5cT1YsD4GP22SjK
EmjzQuQQarKACVgZLMbCCP11kZXD2DrRgBdKeP1BPl9VXbGMQ7L9v1/Hk/7vyov8
rcacZEy2MG/5b2eWIJFeObdswLDajq8s9RHgVgHPXYYhqNEHTcbITfiNfNK4f+43
XtY9xmbcuMbJvQ2EoqFygf5Y4nZRBqjbcBdze1yOjHkw7KB2DvuMlNpMOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCBUCThgxVU+4hwku6CnW8cZhganMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvSUZRSk9HREZWVDdpSENTN29LZGJ4eG1HQnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADh7mO4ERTVI62X44dse
YvBhlViLy6UMxLiokC2a0V9lyV7F6gIYPzM2f6J5gBGTcF/en4hiyLmakvmKRIdg
uCiKTMQcX391ASmRMQz5X7zZ/4vS3vHzCwKfOsobBmUo1oXlI8muPnoximRoGyS1
bBQtGzggiZ+H7RNL734X1+2ssQ4GMOLARsWT3Jz+JgHiGMIufZ+nS/yNGGMgbnlX
DE7NXCXwuHAgClqT0Vk8rH4U2Ojb9zsL26yjVG0I3kk51FVUBVp3mg+mUW2wYt5T
OXi6U68xhsSIgnNti+a9egfRbqGw4Tr2YlzC5qRjE5J+OMEkt7Rqky7AOpxDJQNa
c3I=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:56 2025 by rpki-client