Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/P1Cnow0QgRO05ZLhHhoBF_WJBW8.roa
File: P1Cnow0QgRO05ZLhHhoBF_WJBW8.roa (raw, json)
Hash identifier: VvmFzasjP8srtt9UaXvymVqn4wAt30h/CvTMaXHC0IU=
Subject key identifier: 3F:50:A7:A3:0D:10:81:13:B4:E5:92:E1:1E:1A:01:17:F5:89:05:6F
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9545B52164AF88107CE196F99DB3E3AC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/P1Cnow0QgRO05ZLhHhoBF_WJBW8.roa
Signing time: Mon 20 May 2024 09:12:04 +0000
ROA not before: Mon 20 May 2024 09:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:45:b5:21:64:af:88:10:7c:e1:96:f9:9d:b3:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 09:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f50a7a30d108113b4e592e11e1a0117f589056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:e4:e3:ab:c3:d5:4a:f5:f3:ba:ea:40:5c:
e9:92:2c:4d:a7:b4:7d:73:60:e6:28:90:49:4f:57:
40:b6:72:38:a1:b0:e9:f9:29:9c:4f:30:0d:4a:f8:
4f:13:d0:a9:43:3b:5d:d1:9b:4b:40:d6:8e:a8:00:
f5:53:7f:fc:29:07:d5:40:19:c9:47:8a:45:38:fa:
52:d6:50:f3:0a:ad:07:1d:66:33:0b:c1:fb:e2:b5:
ee:68:ab:42:07:34:d6:f9:d8:a6:6e:98:d9:63:a4:
c1:eb:03:75:e5:0d:83:d9:3b:01:b7:c4:88:82:f9:
59:91:5b:66:d0:f1:82:ac:39:86:75:ce:81:34:de:
9d:37:3d:0d:49:0c:dd:1f:43:c8:92:d4:c3:a8:69:
e3:34:f6:85:b9:14:27:da:a8:7e:29:95:e5:bb:7f:
ed:a1:68:b7:f0:7c:66:e4:87:51:d5:c0:2b:49:7e:
ed:2d:ca:20:d1:13:94:f5:06:0c:af:d3:44:96:46:
01:c1:a7:88:f2:f1:e9:76:3b:20:db:d8:b7:f7:9b:
a4:99:46:d9:c6:c6:ca:03:e6:6d:9c:f9:b1:6d:25:
26:c8:49:98:39:a6:fe:13:67:20:27:3b:4d:1e:ec:
41:d7:6c:0a:f2:4d:04:af:2c:be:82:9d:0e:dd:ad:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:A7:A3:0D:10:81:13:B4:E5:92:E1:1E:1A:01:17:F5:89:05:6F
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/P1Cnow0QgRO05ZLhHhoBF_WJBW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:06:92:87:f6:4e:2d:48:34:2c:be:81:cd:9f:1e:db:72:42:
c7:b5:fe:a0:12:d0:da:d7:b1:45:17:9b:e1:24:44:4f:b3:77:
5a:e4:ab:77:58:10:a9:23:0a:62:81:73:ec:f6:e3:1b:eb:94:
8d:e4:a8:d6:77:56:4a:5f:05:87:1e:37:93:eb:d7:81:c3:c0:
36:e9:46:88:24:d8:10:d7:3e:25:8f:ba:6b:41:43:11:78:00:
d2:74:5e:55:00:a1:80:69:5c:b6:55:ed:ed:b7:29:91:14:db:
52:d4:98:0d:d8:93:a4:a7:4d:34:dc:ed:15:5e:83:28:3d:d8:
5d:6b:c2:ee:78:91:6f:b0:eb:07:c9:59:58:3a:36:30:c9:8f:
7f:38:f1:ac:33:e8:06:fb:f8:d8:cc:75:a0:d2:de:11:b8:f0:
88:cf:2e:f7:0e:ad:3d:0d:fd:4d:ea:cf:c1:8e:8a:69:63:0e:
45:60:12:0c:65:6d:e6:4f:a4:09:f2:ae:29:3d:42:7a:f0:32:
64:4b:d5:f7:db:8b:66:ef:f3:93:f8:45:9f:1c:f9:39:98:bc:
4f:46:47:a9:98:3e:59:23:8c:67:37:74:a3:9b:2e:35:76:86:
da:0a:4d:5f:b5:2c:39:3d:fe:de:17:3a:60:0d:a9:4e:71:0d:
c9:79:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:17 2025 by rpki-client