Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Psa6Zw9AVwQWEbTq0swT0H8cKXs.roa
File: Psa6Zw9AVwQWEbTq0swT0H8cKXs.roa (raw, json)
Hash identifier: GMqVepTetOa4zgGVJ9rf5Jtrk4Qiz0s5i28XtGdsOaU=
Subject key identifier: 3E:C6:BA:67:0F:40:57:04:16:11:B4:EA:D2:CC:13:D0:7F:1C:29:7B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F93583D0B3DA9AC8FAEA01FC7899AD67A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Psa6Zw9AVwQWEbTq0swT0H8cKXs.roa
Signing time: Mon 20 May 2024 00:13:04 +0000
ROA not before: Mon 20 May 2024 00:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:58:3d:0b:3d:a9:ac:8f:ae:a0:1f:c7:89:9a:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 00:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec6ba670f4057041611b4ead2cc13d07f1c297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:e4:78:11:18:1e:87:28:34:4f:ec:a9:e6:
45:2e:c9:af:33:9f:57:28:53:1a:1b:73:51:6f:2d:
a6:a9:cd:8a:45:21:24:40:75:a3:7c:e2:76:32:76:
7e:7f:0f:9f:42:05:c6:41:6f:69:19:2f:a0:92:21:
a9:1d:8c:f8:df:c8:79:ad:b2:1e:01:03:1c:66:eb:
0e:3e:d4:f9:72:3d:82:2c:0e:a0:7d:18:79:18:f7:
f5:8a:9a:07:07:1c:c2:36:27:10:22:02:d7:93:ad:
f1:c6:43:6f:2d:71:e8:9c:e5:18:a9:1e:ab:84:37:
ce:fb:ec:b1:e5:96:a4:a3:ea:27:f9:ad:a2:2f:a5:
96:dd:08:27:5a:59:a5:1e:c2:46:98:29:c5:85:24:
2c:cd:67:23:e0:4b:22:aa:6a:6c:ac:14:d7:aa:bd:
a2:85:67:06:fc:ac:0b:5c:2e:c6:3a:bf:06:11:89:
f4:1d:ee:d9:35:46:e6:d3:d5:36:52:0c:24:7a:94:
3c:41:5e:35:49:cd:24:30:90:2f:c4:2b:4b:47:4b:
0d:67:18:96:19:be:d7:e0:f8:9c:5d:0b:56:76:8b:
48:5b:92:98:14:29:b2:69:23:0b:c8:cd:a1:54:82:
81:45:1d:90:5e:62:08:3c:50:b6:fc:71:d2:e9:e0:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:BA:67:0F:40:57:04:16:11:B4:EA:D2:CC:13:D0:7F:1C:29:7B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Psa6Zw9AVwQWEbTq0swT0H8cKXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:b4:30:16:d2:af:75:fc:d6:97:bd:8a:65:0c:4e:78:39:20:
a7:b2:a0:08:bb:cb:e7:17:16:06:ed:be:73:30:21:c6:7d:7f:
5e:42:c8:94:40:93:3e:15:7b:a1:0f:7d:34:2c:24:bb:89:39:
19:50:01:4d:a4:5b:fa:4e:5d:b3:b8:11:6d:cd:5d:03:bb:0c:
10:24:0f:a3:a3:0c:48:b5:89:e9:40:2c:16:1b:01:3f:b0:cd:
ef:eb:61:38:cd:75:5f:f2:2a:dc:33:71:1d:3c:bd:b0:28:6d:
11:c8:1e:10:ab:88:e6:53:cb:fb:42:11:98:18:33:62:44:4f:
4a:bc:a0:8a:2e:e7:63:0a:83:fb:fe:87:a8:db:65:0e:fd:8b:
c0:5d:56:6a:af:93:d6:f0:da:ef:09:01:9b:2d:41:ed:49:92:
60:7a:14:ae:0c:8b:bc:cc:32:6c:a8:7b:e2:eb:87:2a:b7:5e:
98:4c:51:10:cd:fc:0c:28:4d:5d:0f:08:3c:1c:a3:dd:5d:bb:
72:2e:0a:f9:a1:53:4b:0b:08:85:2a:c7:49:c9:fe:7b:45:6c:
d1:2f:72:ac:2b:a3:a8:2b:52:30:45:2d:66:c6:eb:22:0d:d2:
39:dd:60:40:83:0a:15:fa:45:d2:93:b1:99:76:6c:ec:34:a2:
5d:ef:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:21 2025 by rpki-client