Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MYbiGpS8IvS93rhzRkL1MTcZMTQ.roa
File: MYbiGpS8IvS93rhzRkL1MTcZMTQ.roa (raw, json)
Hash identifier: /EASsJ4E32xBPJK7XizwjpYj2G70BmdWn7xGf571YMk=
Subject key identifier: 31:86:E2:1A:94:BC:22:F4:BD:DE:B8:73:46:42:F5:31:37:19:31:34
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7DE190B100882A48E92BF66FAEC6B944
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MYbiGpS8IvS93rhzRkL1MTcZMTQ.roa
Signing time: Wed 15 May 2024 20:11:25 +0000
ROA not before: Wed 15 May 2024 20:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7d:e1:90:b1:00:88:2a:48:e9:2b:f6:6f:ae:c6:b9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 15 20:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3186e21a94bc22f4bddeb8734642f53137193134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:14:1f:5f:1f:50:87:28:31:d2:44:18:28:
47:3b:ce:c4:41:a4:8d:0a:e9:3c:dd:63:2d:79:77:
95:7b:8b:49:ed:3d:fa:af:70:67:d8:8a:22:80:d3:
36:6a:f9:44:01:29:1c:19:ea:b4:9c:fc:79:e3:04:
b7:a7:e1:fa:ba:86:27:1b:0b:af:ee:07:18:62:40:
88:83:ae:d5:d5:da:b0:00:1e:66:cb:4c:31:7e:3b:
25:5e:8f:f0:24:88:20:ec:48:eb:0c:e7:b0:86:4e:
63:64:4c:dd:c3:9e:b9:0c:28:cc:9f:e8:cd:4c:f6:
14:f5:c9:dc:93:5b:d6:0b:9d:72:9e:9b:1b:50:6e:
23:7f:13:77:a5:dc:e9:e8:ca:95:18:6f:c8:fc:d7:
e7:8d:77:9c:38:a2:57:bd:3e:a5:ba:76:5d:2c:b5:
f9:bc:5e:13:87:8b:ad:2b:db:e0:69:65:d0:60:98:
a7:26:93:f1:a2:64:a5:bd:c5:2d:3d:a4:86:8f:a0:
03:2d:50:52:3e:00:58:b2:47:5b:4c:6a:4f:80:8b:
a9:ff:96:72:e2:68:89:a2:50:73:21:20:37:15:77:
73:31:ce:bc:fa:cb:b5:eb:c0:d1:14:3f:58:3c:fc:
af:23:16:ed:d7:5d:86:a4:90:36:06:26:43:49:46:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:E2:1A:94:BC:22:F4:BD:DE:B8:73:46:42:F5:31:37:19:31:34
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MYbiGpS8IvS93rhzRkL1MTcZMTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:27:2a:4e:23:e5:3b:bc:68:2e:84:43:e0:f9:82:5f:74:18:
95:76:a5:11:aa:59:c9:23:51:36:41:5f:22:f2:57:a5:7b:8a:
02:1a:48:51:89:7b:48:85:dc:c0:9e:20:aa:cb:f1:6e:b6:57:
c9:ab:ed:44:c2:aa:dc:1b:29:cb:52:a8:b3:60:e4:ce:96:87:
bb:36:d3:72:5a:bc:d0:c7:db:5f:9a:c6:21:da:a4:3c:5d:4e:
24:e6:b3:f8:18:55:38:bf:0c:83:f4:32:2a:88:68:78:09:f4:
51:77:2b:0b:28:32:33:3c:dd:03:67:04:c8:8b:e3:b3:a5:7f:
5f:4d:c0:bd:cc:1f:e0:d5:4e:ac:d7:f6:8e:db:6b:92:79:4f:
f2:5d:85:21:10:ed:20:dd:33:8a:b3:55:82:ea:c1:72:e6:04:
4f:cd:d1:fe:60:c3:fe:ba:c5:b4:ba:37:14:5e:7e:68:bf:a3:
ff:a1:ef:f8:73:58:7b:12:9c:48:d7:e1:bb:c1:cc:56:a6:b8:
14:46:9f:ea:f2:0c:14:89:8c:a2:ff:4a:49:13:49:5c:eb:14:
66:dc:85:89:82:6b:02:e0:73:bd:48:8c:c3:f9:da:45:25:d9:
7b:74:2f:4a:24:9f:9b:0e:4a:a5:74:fe:c3:cd:05:f5:af:9a:
3c:9e:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:14 2025 by rpki-client