Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KbnSAckLlC2D0nYalgrFeF6nYMU.roa
File: KbnSAckLlC2D0nYalgrFeF6nYMU.roa (raw, json)
Hash identifier: FNQrKnSW5vYcTz0Cvvx2oHRe2oqW8qryOe7zEoZLnH4=
Subject key identifier: 29:B9:D2:01:C9:0B:94:2D:83:D2:76:1A:96:0A:C5:78:5E:A7:60:C5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7C2A1D3054D6451808A6A9B3151F5D9C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KbnSAckLlC2D0nYalgrFeF6nYMU.roa
Signing time: Wed 15 May 2024 12:11:25 +0000
ROA not before: Wed 15 May 2024 12:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:2a:1d:30:54:d6:45:18:08:a6:a9:b3:15:1f:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 15 12:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29b9d201c90b942d83d2761a960ac5785ea760c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:98:e1:20:47:a2:87:a9:8a:bd:43:f0:08:
27:ab:42:e4:40:b2:56:cc:78:21:93:89:dd:54:a1:
7e:6c:94:89:4d:d1:b5:0c:04:ed:a6:83:cd:cc:fc:
f5:71:28:e3:ca:6e:f4:da:b9:92:c5:dc:de:b3:ac:
ae:b7:fd:fa:c2:dc:a2:5f:17:dc:a4:fb:9b:58:ac:
af:41:ea:eb:f5:45:88:e1:93:f0:ac:3b:57:9a:8f:
20:69:25:1d:98:77:1d:07:10:f7:6e:0d:7f:80:14:
8b:f2:57:5b:65:1b:63:b5:c1:4a:db:a0:bd:d9:b3:
c0:21:f9:e4:9a:6f:fc:7d:36:2b:d7:b9:80:64:eb:
a9:b2:28:80:43:c9:aa:af:52:cb:3e:32:7f:d2:0a:
ee:f1:8a:d7:d3:68:d4:0e:53:20:1d:76:c4:b5:08:
90:7c:ce:3a:67:cf:27:21:23:32:5f:da:9c:fa:40:
73:e4:10:95:a0:6b:e7:4d:f8:3a:0c:fc:da:92:76:
df:a8:56:42:6a:bf:66:ae:f8:d3:9e:e1:e0:76:7a:
b2:cc:95:97:ba:7b:fc:b6:0f:cb:eb:b2:da:ec:c5:
a9:0d:57:39:9a:2c:5c:61:21:ce:c5:27:da:52:97:
63:70:bc:e0:88:ab:51:d9:19:b9:5a:18:0c:14:5d:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:D2:01:C9:0B:94:2D:83:D2:76:1A:96:0A:C5:78:5E:A7:60:C5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KbnSAckLlC2D0nYalgrFeF6nYMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5a:69:06:ac:5e:03:99:fb:15:23:8a:45:5d:57:24:f8:75:
6a:34:a5:37:0c:0c:b7:31:cc:c4:36:a2:7b:29:cb:2e:17:5f:
87:5b:c3:44:b1:3d:99:03:55:35:69:83:46:6d:9b:3c:66:63:
be:a7:e6:3f:9e:f4:ef:35:46:2c:37:58:f8:f5:6a:af:62:81:
4a:46:a2:3e:6e:1a:da:3d:b4:bb:31:a9:d7:53:41:9d:14:9a:
41:01:c9:2d:e8:3b:9d:ac:93:83:8a:1d:a6:1f:ee:31:26:d8:
07:1a:68:23:39:65:21:f5:06:c4:a1:3f:46:55:20:f8:99:af:
88:f4:33:e1:f7:ba:6a:a7:3d:5a:27:0d:d5:1c:0d:d4:55:1e:
75:58:aa:60:7e:87:12:67:ee:f0:7c:17:12:f4:ef:b4:04:35:
dd:b9:0e:91:5d:86:66:93:f3:86:83:dd:54:f8:4c:82:c2:e2:
00:80:95:ae:9c:af:00:21:7d:31:01:6e:13:ed:2c:4b:ce:14:
3f:f6:b5:e8:19:fc:3b:4f:4a:11:7f:37:d5:9f:2b:e0:d8:9e:
6b:9c:fa:a4:6d:05:16:03:77:56:62:ac:24:4a:6b:9e:86:d8:
5a:3a:64:3a:d9:e2:7d:e5:98:20:fa:99:a1:6d:3f:9f:f5:fd:
ba:9e:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:35 2025 by rpki-client