Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QDpBm7_Nut0nl6F35oB5uJaUsjE.roa
File: QDpBm7_Nut0nl6F35oB5uJaUsjE.roa (raw, json)
Hash identifier: dAE3ZelgzZGeFENSxzxaYMnqXpU7/dQ5t3cxot+kPoc=
Subject key identifier: 40:3A:41:9B:BF:CD:BA:DD:27:97:A1:77:E6:80:79:B8:96:94:B2:31
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9469FABC9C0AD4DD78A2EF6F441A5149
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QDpBm7_Nut0nl6F35oB5uJaUsjE.roa
Signing time: Mon 20 May 2024 05:12:04 +0000
ROA not before: Mon 20 May 2024 05:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:69:fa:bc:9c:0a:d4:dd:78:a2:ef:6f:44:1a:51:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 05:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403a419bbfcdbadd2797a177e68079b89694b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:41:72:27:fa:80:e0:55:96:ef:b6:3c:0b:
70:73:91:ec:72:c0:3c:ad:14:6c:81:28:e5:87:5a:
ea:47:63:4d:04:2b:08:d2:f6:12:44:54:ec:38:a1:
cd:36:b7:9a:ee:bf:19:15:aa:b3:bf:c6:34:38:02:
bf:d1:6b:07:21:07:1e:c8:7f:c9:16:24:c1:35:b7:
79:43:19:d5:8b:3e:e9:3a:8c:b9:1e:6b:76:38:05:
4f:e2:8d:a8:4a:d5:d0:7f:71:1e:14:ed:75:33:88:
55:ea:45:c5:cd:7a:68:9b:0d:34:e7:0c:e1:cb:29:
e0:e0:ec:20:55:e7:3b:77:6b:ad:d3:5e:c0:60:63:
80:ca:84:69:a2:e9:08:36:3c:4d:20:e4:57:2c:79:
03:33:bd:9a:d6:c3:d3:aa:a7:7b:e6:81:f5:55:1f:
e4:57:57:f5:df:02:da:5d:93:c2:e7:55:24:ce:be:
b3:f7:2b:c1:db:ad:9b:0f:82:e1:b8:dc:ad:b3:cd:
11:6a:b5:86:c5:72:e0:58:69:b9:67:12:34:2a:22:
3c:85:f3:1b:5e:bf:fb:71:bc:21:22:65:59:e4:e3:
e6:15:72:9c:f7:33:9e:4f:e4:58:50:71:2a:ac:6d:
3c:57:80:1d:4f:a5:57:96:d7:60:12:b3:6b:aa:3d:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:41:9B:BF:CD:BA:DD:27:97:A1:77:E6:80:79:B8:96:94:B2:31
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QDpBm7_Nut0nl6F35oB5uJaUsjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:49:f3:fd:7a:91:46:d6:6b:9a:bf:77:db:33:2b:ab:5a:c7:
71:d3:f5:27:a2:c2:18:cf:30:c9:7a:72:a0:d9:f3:e6:bc:55:
07:c6:f1:8e:ae:75:0f:a2:ea:3b:1f:ae:09:0d:2a:26:ab:4f:
ce:77:4a:42:cd:08:68:86:14:c9:47:e9:d4:14:f4:ad:4d:59:
97:47:1d:51:21:af:42:21:c3:3a:c2:d7:ab:d5:ab:72:03:a2:
f7:21:69:0c:20:5e:31:f2:f8:16:b7:e1:38:22:a5:18:91:71:
94:ff:ea:cd:a7:a4:24:ed:ad:81:11:ab:30:f9:0a:1a:3a:23:
0b:ef:34:55:cc:ab:f5:0a:e7:54:62:7c:98:ea:9f:97:b0:34:
99:e6:59:fd:9d:2a:ef:2d:76:25:e4:50:c7:3d:a6:5e:93:65:
62:99:68:d0:d7:a0:25:89:c2:4c:f5:13:0a:f0:e1:db:20:21:
38:ee:03:2e:c3:f6:0f:9c:5d:5b:c1:3f:f6:1f:8c:a6:ff:6e:
71:9c:aa:1b:e3:4c:e1:d8:42:6d:5f:2c:72:31:63:97:ca:77:
fd:f5:34:8f:4a:38:8e:90:d6:64:b5:8d:5a:51:be:0a:d3:6d:
21:31:c4:6c:78:2b:e1:d3:e4:6e:c0:2c:d6:51:7d:fd:61:ed:
c6:41:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:00 2025 by rpki-client