Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Km0teUsMn2OegmJ2lHMKYFoTpHE.roa
File: Km0teUsMn2OegmJ2lHMKYFoTpHE.roa (raw, json)
Hash identifier: XwEzJNg7CsrJkXRxSl7NQ4OyS3GJzwbY2BSf9zVEgGA=
Subject key identifier: 2A:6D:2D:79:4B:0C:9F:63:9E:82:62:76:94:73:0A:60:5A:13:A4:71
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFB655FC2185069B487F87381C2D5267A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Km0teUsMn2OegmJ2lHMKYFoTpHE.roa
Signing time: Sat 20 Apr 2024 12:05:08 +0000
ROA not before: Sat 20 Apr 2024 12:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18e:fb64:7a57/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:65:5f:c2:18:50:69:b4:87:f8:73:81:c2:d5:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 12:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a6d2d794b0c9f639e82627694730a605a13a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:ba:13:8e:4d:bf:ad:b7:9b:8d:f8:d6:3a:
c1:8c:3f:01:fc:fb:f8:3d:05:79:de:77:2b:43:f4:
c5:61:d1:65:8e:8c:41:dc:77:43:3b:8d:0e:74:6d:
b5:bc:7d:0b:c2:1f:e2:8a:3b:95:12:9e:54:27:68:
fa:51:90:2d:d3:14:88:51:35:93:75:24:47:75:e7:
46:5a:29:11:02:24:1e:3a:82:3c:35:0e:9e:f4:85:
f3:e8:68:91:55:f9:44:0f:5c:e3:6c:6d:c0:07:d0:
ba:e3:8f:16:88:89:78:d6:7a:f1:fd:47:28:6a:a9:
4d:bf:5d:ce:c6:87:6e:99:72:11:17:40:07:02:e4:
d9:a2:1a:62:12:07:40:6c:27:70:4a:b9:d9:c5:42:
d7:7f:99:70:48:52:40:2d:c4:c4:18:30:1c:cc:b9:
bf:5f:7d:96:e3:8c:13:a9:50:17:9a:c7:c5:de:c0:
6c:50:dc:a4:7b:65:95:c2:60:af:53:02:af:e6:c7:
4c:5f:62:3b:07:dc:9c:72:e2:09:eb:04:35:87:de:
f5:82:12:10:e3:54:bc:2b:0c:ca:fc:cd:2c:e1:60:
a8:de:eb:2b:2f:bb:35:80:e8:9d:6e:e6:83:7c:12:
d5:85:3c:92:f3:2d:dc:86:72:38:f8:7f:8b:a3:86:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:2D:79:4B:0C:9F:63:9E:82:62:76:94:73:0A:60:5A:13:A4:71
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Km0teUsMn2OegmJ2lHMKYFoTpHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18e:fb64:7a57/128
Signature Algorithm: sha256WithRSAEncryption
11:eb:8f:92:bf:bd:30:2e:03:33:54:48:c2:ae:47:27:63:47:
9a:54:bd:3d:a3:dd:a3:45:9d:ed:9b:37:c6:11:97:a5:69:28:
8a:91:ec:35:08:0e:07:c8:c6:8d:85:15:2e:6d:ce:9b:b3:57:
ac:10:86:8d:f3:eb:48:6c:e9:c8:9c:58:f9:66:bc:b2:c9:6f:
f4:fe:e7:0b:a8:90:17:d0:30:4a:a7:f4:a7:ac:5a:e6:ae:69:
8b:cd:f4:9c:51:e0:b5:a0:44:9c:85:7e:de:b8:08:e2:9b:ef:
21:a3:75:e5:e3:f3:44:81:20:d0:85:6e:6b:df:ca:16:80:26:
7e:39:08:73:ad:fd:dc:2d:7d:33:44:52:fb:ef:da:f6:85:7c:
42:15:20:e5:19:ce:6f:ed:5e:ca:1d:a4:de:88:c6:3b:d1:ac:
92:54:49:fd:2e:af:fb:d1:c8:16:66:9e:54:c3:fb:de:df:45:
84:f3:31:1d:ee:d7:79:9a:ce:e8:8d:27:c3:09:7a:bc:d0:f2:
88:be:23:fb:05:b1:63:1d:36:37:08:e3:6c:a3:da:5c:41:00:
26:5d:33:98:12:84:a8:fc:05:5c:0d:2a:24:17:8d:3a:77:15:
44:12:0f:f5:e3:28:37:b0:36:f6:c2:06:09:5c:51:f5:00:96:
ab:d0:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org