Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I_SP7nGW7zi4-r4YAfHFwMI-jfU.roa
File: I_SP7nGW7zi4-r4YAfHFwMI-jfU.roa (raw, json)
Hash identifier: ckfiyZqC3e6fjc64BQq/T53ZMY9tBFg+8KlLgVi7miA=
Subject key identifier: 23:F4:8F:EE:71:96:EF:38:B8:FA:BE:18:01:F1:C5:C0:C2:3E:8D:F5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3035444299861010B9A626242086AA62
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I_SP7nGW7zi4-r4YAfHFwMI-jfU.roa
Signing time: Tue 30 Apr 2024 18:12:28 +0000
ROA not before: Tue 30 Apr 2024 18:12:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:35:44:42:99:86:10:10:b9:a6:26:24:20:86:aa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 30 18:12:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23f48fee7196ef38b8fabe1801f1c5c0c23e8df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:2a:03:2b:ab:9d:c4:c6:33:6d:ec:a4:4d:
09:1c:ca:e7:37:4d:1c:e0:91:3e:bb:41:1c:56:da:
dc:4a:64:47:b2:50:a1:e9:d5:1f:b0:9d:32:ba:28:
f0:19:f9:5d:b7:01:ac:2b:9f:67:dd:09:3f:f9:bb:
dc:83:09:07:72:d4:68:27:99:42:12:62:c2:9c:2c:
37:21:23:c8:c8:e2:d2:d5:91:c8:2c:58:81:d0:09:
3c:b3:e3:f9:83:1a:4b:64:58:19:80:7e:42:0d:6c:
cf:6e:8f:01:4b:1c:b2:7d:2c:a6:7a:1a:fd:4f:86:
40:a4:ee:27:c1:71:83:48:5a:bd:5c:e8:cb:b3:72:
bd:69:25:08:b1:82:7c:e5:4e:c8:13:ef:0a:bb:ac:
e2:94:1c:50:58:0e:3a:7a:e1:39:9f:84:5b:b3:69:
ed:14:44:d2:a7:00:d4:2e:9d:1d:ed:9b:48:52:20:
fc:dd:2b:16:89:69:8f:a8:69:3e:b3:87:21:89:2c:
23:fa:c9:e9:db:61:13:a2:46:ab:46:4c:56:dd:ba:
df:5d:fb:28:bd:e8:10:7c:3d:16:ad:e7:d5:52:1f:
b9:fd:88:39:2e:b4:5c:d6:ba:a9:91:6f:72:10:0b:
ee:7f:52:43:2e:e9:ad:99:c2:d6:11:34:74:f9:d4:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F4:8F:EE:71:96:EF:38:B8:FA:BE:18:01:F1:C5:C0:C2:3E:8D:F5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/I_SP7nGW7zi4-r4YAfHFwMI-jfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:fa:94:7f:5a:da:38:3e:4b:08:65:19:28:4d:0b:a9:1e:72:
36:db:a5:0e:41:f3:24:a4:e7:ab:de:3a:77:68:83:02:10:da:
9c:1b:41:63:62:d1:a7:eb:58:fc:44:6b:43:63:9b:46:b7:c6:
2e:8c:63:ee:69:d3:6d:03:2c:c4:65:a5:79:8a:6d:4f:2a:aa:
7a:54:13:d0:40:a5:ff:15:7f:ad:aa:b6:52:2b:be:9a:5b:a9:
2b:75:f0:e5:3a:57:96:7a:46:fd:53:27:03:7f:07:2b:af:6a:
44:18:d9:85:ee:ea:42:8d:8a:a2:da:e7:83:f9:27:0a:04:19:
1a:73:99:a3:e0:6b:bb:8f:2c:6c:a8:75:e0:dd:b8:73:3d:c8:
b2:8b:e5:43:9b:94:2e:c8:e1:c7:5c:97:83:7d:87:33:c6:0e:
a7:c5:dc:34:16:a9:9a:c1:d1:69:e9:40:cd:24:93:d2:07:03:
b7:e5:1f:48:f3:6a:a3:d5:19:7b:f2:6b:af:ef:cd:08:1f:40:
e5:5a:1a:6c:b7:63:14:83:93:f8:83:aa:17:db:eb:18:c4:28:
dd:32:0f:37:41:92:58:51:a6:ee:ff:9d:eb:56:80:63:86:90:
57:1e:75:1b:1c:76:5d:f9:c0:b4:d8:12:37:5d:bc:fc:2d:72:
c6:8a:57:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY8wNURCmYYQELmmJiQghqpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDMwMTgxMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2Y0OGZlZTcxOTZlZjM4YjhmYWJlMTgwMWYxYzVjMGMyM2U4ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jAqAyurncTGM23spE0JHMrnN00c
4JE+u0EcVtrcSmRHslCh6dUfsJ0yuijwGfldtwGsK59n3Qk/+bvcgwkHctRoJ5lC
EmLCnCw3ISPIyOLS1ZHILFiB0Ak8s+P5gxpLZFgZgH5CDWzPbo8BSxyyfSymehr9
T4ZApO4nwXGDSFq9XOjLs3K9aSUIsYJ85U7IE+8Ku6zilBxQWA46euE5n4Rbs2nt
FETSpwDULp0d7ZtIUiD83SsWiWmPqGk+s4chiSwj+snp22ETokarRkxW3brfXfso
vegQfD0WrefVUh+5/Yg5LrRc1rqpkW9yEAvuf1JDLumtmcLWETR0+dScKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCP0j+5xlu84uPq+GAHxxcDCPo31MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvSV9TUDduR1c3emk0LXI0WUFmSEZ3TUktamZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKb6lH9a2jg+SwhlGShN
C6kecjbbpQ5B8ySk56veOndogwIQ2pwbQWNi0afrWPxEa0Njm0a3xi6MY+5p020D
LMRlpXmKbU8qqnpUE9BApf8Vf62qtlIrvppbqSt18OU6V5Z6Rv1TJwN/ByuvakQY
2YXu6kKNiqLa54P5JwoEGRpzmaPga7uPLGyodeDduHM9yLKL5UOblC7I4cdcl4N9
hzPGDqfF3DQWqZrB0WnpQM0kk9IHA7flH0jzaqPVGXvya6/vzQgfQOVaGmy3YxSD
k/iDqhfb6xjEKN0yDzdBklhRpu7/netWgGOGkFcedRscdl35wLTYEjddvPwtcsaK
VzA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:01 2025 by rpki-client