Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa
File: JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa (raw, json)
Hash identifier: zxICidgSrr+7jHAkx9q647U+UtfzTxzU49HVrbpFGYo=
Subject key identifier: 26:3A:98:E5:C8:98:1B:11:06:31:79:63:B9:92:3F:D6:5F:C1:6E:64
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F87F8DD2766C9A4D675343662F32FE967
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa
Signing time: Fri 17 May 2024 19:13:04 +0000
ROA not before: Fri 17 May 2024 19:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:f8:dd:27:66:c9:a4:d6:75:34:36:62:f3:2f:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 17 19:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263a98e5c8981b1106317963b9923fd65fc16e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:f4:a9:9c:97:24:5e:32:3f:65:6f:4c:2a:
21:28:e0:63:e9:26:ca:75:ef:d5:1d:1a:c4:2b:09:
78:59:6e:09:95:e9:66:d2:33:14:ef:38:c6:a7:6f:
c6:60:35:c7:89:6c:22:b5:02:ab:5f:9d:da:17:ad:
14:5a:1d:78:a6:e6:aa:4a:7d:bd:0f:ef:1b:8f:44:
ac:b7:65:98:fb:49:6d:2d:a8:a7:b7:e3:a1:6b:7d:
ca:e7:24:80:d6:b9:e6:4d:27:8d:64:af:f0:c4:a4:
1e:dd:3f:2e:65:13:86:9f:6f:a2:eb:25:07:ea:eb:
93:d3:38:07:7f:24:d7:ab:b1:1c:8f:5f:09:c8:81:
3c:28:bf:f8:5d:34:d4:a3:36:a4:7e:e2:b7:ac:1f:
30:ec:07:57:a8:7e:10:df:21:40:66:32:50:ca:05:
61:cd:64:81:76:9e:d1:7a:46:dc:f7:28:56:08:77:
0f:de:0f:6a:b4:e4:24:50:74:24:fa:77:c4:e7:63:
46:75:8d:55:26:dd:8a:31:3b:c1:db:c9:f3:8b:d6:
00:05:12:ab:dc:45:a6:88:64:80:ca:a3:72:ef:91:
6b:89:a7:44:14:a8:8f:ae:99:56:92:34:40:9e:3a:
da:e1:6d:db:89:0b:76:9e:ef:37:4f:44:b4:9a:5f:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:98:E5:C8:98:1B:11:06:31:79:63:B9:92:3F:D6:5F:C1:6E:64
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:f1:9c:da:bb:9a:75:9b:3d:f5:d0:1f:89:85:5a:ec:c8:da:
04:e0:cc:f3:5f:41:4f:3b:58:1f:1b:3e:86:8f:be:70:6a:79:
58:61:fd:5b:7b:22:c6:71:16:e7:67:7b:b6:19:50:fb:b6:1f:
56:e9:46:48:31:6c:01:5d:e8:6b:89:88:de:0d:36:0b:75:d1:
f0:3d:3f:ea:ea:95:85:0e:1e:31:d9:e3:3b:e5:7e:b5:ce:c5:
56:c1:8e:a2:0e:89:05:84:07:d4:d1:c3:4b:ac:d4:86:2c:77:
42:56:e2:ca:eb:d5:cc:29:ca:a2:47:c6:75:0d:87:cc:72:4c:
0a:a8:c6:12:1c:15:4c:18:0b:5c:22:a9:c7:7b:56:42:20:9f:
ed:08:5b:8a:d6:f4:e1:f4:27:e9:3d:b6:98:6f:92:f2:56:d5:
b4:20:f7:fb:86:03:cb:b4:0e:58:e6:53:58:35:ea:97:48:03:
3c:39:14:8f:6a:39:a9:15:e8:c5:fd:79:20:41:38:21:86:0b:
fb:36:1d:3e:aa:77:74:37:85:11:5f:80:2a:f7:8f:72:37:91:
e5:bf:24:42:c2:aa:00:8f:f8:5b:bd:81:c4:a0:9c:3f:12:42:
83:09:70:f7:68:3d:87:a7:63:3c:a0:ed:7c:3a:ae:4f:d0:cd:
49:e3:64:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+H+N0nZsmk1nU0NmLzL+lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE3MTkxMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjNhOThlNWM4OTgxYjExMDYzMTc5NjNiOTkyM2ZkNjVmYzE2ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xv0qZyXJF4yP2VvTCohKOBj6SbK
de/VHRrEKwl4WW4Jlelm0jMU7zjGp2/GYDXHiWwitQKrX53aF60UWh14puaqSn29
D+8bj0Sst2WY+0ltLaint+Oha33K5ySA1rnmTSeNZK/wxKQe3T8uZROGn2+i6yUH
6uuT0zgHfyTXq7Ecj18JyIE8KL/4XTTUozakfuK3rB8w7AdXqH4Q3yFAZjJQygVh
zWSBdp7Rekbc9yhWCHcP3g9qtOQkUHQk+nfE52NGdY1VJt2KMTvB28nzi9YABRKr
3EWmiGSAyqNy75FriadEFKiPrplWkjRAnjra4W3biQt2nu83T0S0ml9OPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCY6mOXImBsRBjF5Y7mSP9ZfwW5kMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvSmpxWTVjaVlHeEVHTVhsanVaSV8xbF9CYm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIfxnNq7mnWbPfXQH4mF
WuzI2gTgzPNfQU87WB8bPoaPvnBqeVhh/Vt7IsZxFudne7YZUPu2H1bpRkgxbAFd
6GuJiN4NNgt10fA9P+rqlYUOHjHZ4zvlfrXOxVbBjqIOiQWEB9TRw0us1IYsd0JW
4srr1cwpyqJHxnUNh8xyTAqoxhIcFUwYC1wiqcd7VkIgn+0IW4rW9OH0J+k9tphv
kvJW1bQg9/uGA8u0DljmU1g16pdIAzw5FI9qOakV6MX9eSBBOCGGC/s2HT6qd3Q3
hRFfgCr3j3I3keW/JELCqgCP+Fu9gcSgnD8SQoMJcPdoPYenYzyg7Xw6rk/QzUnj
ZP4=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:31 2025 by rpki-client