Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KHFBYwuwq39G7v_yyDXsskeEIxs.roa
File: KHFBYwuwq39G7v_yyDXsskeEIxs.roa (raw, json)
Hash identifier: ExPlO/v4fwHPOT+eYAUgVLMF5+T+TCUHzEP9Fagk4ms=
Subject key identifier: 28:71:41:63:0B:B0:AB:7F:46:EE:FF:F2:C8:35:EC:B2:47:84:23:1B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F634685916FDF978CED111873F7E42E0A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KHFBYwuwq39G7v_yyDXsskeEIxs.roa
Signing time: Fri 10 May 2024 16:11:57 +0000
ROA not before: Fri 10 May 2024 16:11:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:46:85:91:6f:df:97:8c:ed:11:18:73:f7:e4:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 16:11:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287141630bb0ab7f46eefff2c835ecb24784231b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1b:3f:16:df:5e:22:65:15:42:93:b3:a2:09:
33:eb:26:48:d5:22:6a:bb:2a:69:4d:f8:9b:4e:9e:
0a:f6:c5:a7:04:cc:47:7a:bc:c4:1a:c5:e7:69:a5:
dc:2a:57:d0:5a:0f:9c:76:ea:06:44:3e:2c:75:3b:
55:70:5e:4a:7b:9e:b4:20:3d:2e:ec:10:0c:8a:3f:
d1:8d:fa:6a:cb:8f:e7:fe:e7:a9:d2:00:3b:5c:7c:
37:98:cf:a0:7a:7a:70:d7:67:c8:a5:57:dc:70:a7:
6f:d5:66:65:97:73:fe:af:51:29:3c:19:b0:ec:e2:
ac:58:e8:6d:3d:fe:3d:87:7a:5b:1d:ef:25:28:36:
66:7f:e7:23:dd:62:71:eb:de:f5:ee:41:04:d1:06:
0d:05:b2:96:75:9a:a6:f9:ae:b2:d6:66:96:0c:92:
24:76:db:16:d0:d9:40:ef:e5:1d:e0:1f:f6:53:8d:
0e:66:b8:d3:e2:51:80:e9:09:48:cb:32:0e:89:7b:
71:6d:33:c9:72:20:2b:34:5d:9e:ea:de:72:23:41:
ef:c1:eb:1b:29:b4:05:d0:e7:e4:f1:8c:da:42:24:
25:ab:df:5a:04:d0:ea:3b:1e:1e:07:d4:e0:e8:d7:
25:33:d0:b9:8d:05:ec:76:87:f9:96:88:4c:2e:1f:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:41:63:0B:B0:AB:7F:46:EE:FF:F2:C8:35:EC:B2:47:84:23:1B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KHFBYwuwq39G7v_yyDXsskeEIxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:15:b0:9a:91:ef:b2:5e:2e:53:0c:0e:6e:7e:4d:68:cc:41:
59:7b:f0:48:16:b8:0e:2a:84:05:7c:8c:69:19:dd:59:57:01:
6d:d5:4f:8d:35:5b:34:bd:32:35:8c:72:8e:ed:0e:ac:7b:27:
d2:6d:e2:08:b5:b4:5b:40:d0:5d:23:3f:75:0f:c2:eb:6e:6c:
c5:df:4a:bd:eb:f2:24:a1:72:4d:71:dc:60:a5:d1:0e:de:a7:
f0:2b:3f:e1:7d:c3:73:78:bb:22:41:8c:83:5b:89:1c:17:a3:
5c:d6:67:2d:4b:cd:3e:8a:4a:1a:aa:55:90:b6:15:34:da:d7:
a1:f4:a1:e1:e9:68:47:a4:06:2f:80:6d:a5:c1:a8:e3:9c:c3:
c7:93:73:e4:2d:b0:d6:4d:37:c1:0c:6b:ad:99:a5:e5:b1:21:
67:53:ad:06:60:1f:c9:b6:91:47:68:67:e5:c8:fe:3f:2c:4f:
11:64:10:20:ac:e9:a7:27:d8:1a:63:93:c3:60:05:75:7a:5f:
ab:da:83:c6:a1:83:ad:18:da:80:82:ad:6f:18:58:0f:94:e5:
66:85:a2:78:ce:a4:10:6c:5d:d4:ae:79:d1:4d:2b:a8:c0:73:
8d:6a:64:8c:02:bf:63:45:4d:09:cd:b8:af:97:68:e7:e5:bf:
e1:8f:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:42 2025 by rpki-client