Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa
File: LDWzwU8ofSPsKsgsNkiCCneS5K0.roa (raw, json)
Hash identifier: 8t/H3Pw48P4jNUX9x9lW49AcCUQltQdZCsZKIxdHWP0=
Subject key identifier: 2C:35:B3:C1:4F:28:7D:23:EC:2A:C8:2C:36:48:82:0A:77:92:E4:AD
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F363075E398AB948014CF9995CC4C045B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa
Signing time: Wed 01 May 2024 22:04:56 +0000
ROA not before: Wed 01 May 2024 22:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:362f:ec2d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:30:75:e3:98:ab:94:80:14:cf:99:95:cc:4c:04:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 22:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c35b3c14f287d23ec2ac82c3648820a7792e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:4b:06:b6:5c:99:68:55:e4:06:17:59:af:
da:66:40:78:6c:b4:d3:6e:a3:91:49:c3:67:41:f8:
a6:05:a6:f5:cd:0b:50:8b:26:c6:a4:47:4e:e2:0c:
f8:99:d6:b7:d7:99:f8:1d:90:de:28:48:a3:d7:ae:
3c:59:6a:54:3a:96:b3:ff:a9:1d:f9:76:b0:52:b3:
22:2c:92:4d:01:06:7a:41:92:fb:27:3d:3f:05:13:
6e:00:61:3f:76:96:81:ef:84:fe:a5:55:5d:ef:6a:
86:a5:a4:de:af:c0:0d:bc:fa:1d:da:ab:bb:e8:ed:
eb:ae:ba:04:78:9c:4b:f8:f8:50:d0:2c:aa:49:c8:
3a:d4:6f:d6:29:94:2c:c6:70:36:55:c8:5c:91:82:
07:b8:98:bc:8a:8f:c7:6e:a2:06:bf:e8:84:d3:67:
a8:33:51:a2:db:68:ff:29:0d:98:e4:c3:99:b2:a3:
5a:1b:1a:da:8a:91:9f:68:18:4d:6d:f9:03:82:40:
c0:a0:42:e2:db:b1:46:a8:78:56:56:91:ec:24:a0:
09:fa:9c:6b:74:9a:8f:8a:8a:bc:2c:12:9b:d3:2d:
45:be:22:a8:4d:5b:f4:65:33:a0:0a:3b:41:2a:14:
ff:b1:b6:58:b0:c2:5b:14:e6:9c:7f:86:d7:67:83:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:B3:C1:4F:28:7D:23:EC:2A:C8:2C:36:48:82:0A:77:92:E4:AD
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:cc:81:90:53:14:ae:6a:24:80:b2:b6:69:5e:b4:09:bb:d7:
b8:f0:83:04:41:fe:4d:53:6c:2c:f8:c1:bc:b6:3f:8d:50:7d:
25:33:dd:2f:e8:7e:67:e2:37:00:39:42:66:30:2e:c6:05:9a:
1f:95:55:35:2e:27:d4:e4:e6:f8:65:04:12:a4:71:f5:bf:cd:
33:b6:a8:28:48:ca:de:db:33:fe:fc:3c:ec:04:eb:cf:df:9e:
17:8a:22:73:e9:51:94:f3:4c:dd:ca:76:73:53:7d:12:9a:b8:
b2:57:95:88:65:a3:ee:26:53:f0:2a:9d:8b:fb:ba:a7:f3:61:
ee:3b:d0:a3:05:20:90:37:eb:1b:e2:59:34:6d:3c:13:ed:cb:
0f:de:e6:f1:a9:af:7d:74:e1:21:c1:a5:a1:7a:b2:07:f1:2c:
bd:5c:7b:e4:7e:3d:61:86:e0:bd:3d:49:7e:44:f2:3f:ba:7f:
2c:cc:b2:4c:03:c4:59:c2:9d:9b:25:d8:84:eb:4a:1a:20:30:
7d:90:34:f1:b9:4c:ef:b6:60:fd:3e:e8:6b:24:a6:e8:34:2d:
01:cc:9d:f8:c2:c1:dc:62:b1:5d:6c:9b:eb:b2:c7:32:40:9a:
9e:81:e3:fa:92:12:04:39:79:33:2e:0b:d1:e4:a1:f0:76:25:
6a:22:44:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY82MHXjmKuUgBTPmZXMTARbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTAxMjIwNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzM1YjNjMTRmMjg3ZDIzZWMyYWM4MmMzNjQ4ODIwYTc3OTJlNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fJLBrZcmWhV5AYXWa/aZkB4bLTT
bqORScNnQfimBab1zQtQiybGpEdO4gz4mda315n4HZDeKEij1648WWpUOpaz/6kd
+XawUrMiLJJNAQZ6QZL7Jz0/BRNuAGE/dpaB74T+pVVd72qGpaTer8ANvPod2qu7
6O3rrroEeJxL+PhQ0CyqScg61G/WKZQsxnA2VchckYIHuJi8io/HbqIGv+iE02eo
M1Gi22j/KQ2Y5MOZsqNaGxraipGfaBhNbfkDgkDAoELi27FGqHhWVpHsJKAJ+pxr
dJqPioq8LBKb0y1FviKoTVv0ZTOgCjtBKhT/sbZYsMJbFOacf4bXZ4OmIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCw1s8FPKH0j7CrILDZIggp3kuStMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvTERXendVOG9mU1BzS3Nnc05raUNDbmVTNUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACvMgZBTFK5qJICytmle
tAm717jwgwRB/k1TbCz4wby2P41QfSUz3S/ofmfiNwA5QmYwLsYFmh+VVTUuJ9Tk
5vhlBBKkcfW/zTO2qChIyt7bM/78POwE68/fnheKInPpUZTzTN3KdnNTfRKauLJX
lYhlo+4mU/AqnYv7uqfzYe470KMFIJA36xviWTRtPBPtyw/e5vGpr3104SHBpaF6
sgfxLL1ce+R+PWGG4L09SX5E8j+6fyzMskwDxFnCnZsl2ITrShogMH2QNPG5TO+2
YP0+6Gskpug0LQHMnfjCwdxisV1sm+uyxzJAmp6B4/qSEgQ5eTMuC9HkofB2JWoi
RDg=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:09 2025 by rpki-client