Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SLnfcQa6nRqaSh1njmPsh8cPHXQ.roa
File: SLnfcQa6nRqaSh1njmPsh8cPHXQ.roa (raw, json)
Hash identifier: MOSpj3UAeZahQBfcv7wID/KFn4DynF7LbRiY1jDYXII=
Subject key identifier: 48:B9:DF:71:06:BA:9D:1A:9A:4A:1D:67:8E:63:EC:87:C7:0F:1D:74
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F1753B5F6FAB15894C0051ABB83BEA2E2
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SLnfcQa6nRqaSh1njmPsh8cPHXQ.roa
Signing time: Thu 25 Apr 2024 22:15:13 +0000
ROA not before: Thu 25 Apr 2024 22:15:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:53:b5:f6:fa:b1:58:94:c0:05:1a:bb:83:be:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 22:15:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b9df7106ba9d1a9a4a1d678e63ec87c70f1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:0a:9d:55:78:16:97:81:fb:a8:9e:9a:4c:
a6:e1:b2:04:c5:c6:48:ba:b2:2e:71:5c:c8:c3:cc:
2e:58:48:d2:f7:d5:ee:0f:29:c8:7d:2a:3d:92:8a:
f0:1e:19:d9:3c:2b:50:bf:8b:6c:79:a1:0d:81:29:
ef:58:8d:ba:77:20:32:b3:e9:31:f8:2c:cf:08:87:
d6:a1:88:13:d9:d9:e0:e1:00:b9:85:eb:c7:2f:65:
0b:6d:4f:66:5e:ab:2d:a1:88:26:0e:59:95:9d:99:
fd:2d:7e:ac:e2:79:c3:82:10:d9:6b:78:df:af:9e:
ad:84:1e:78:e8:54:94:7f:a5:e8:53:c4:ca:71:e1:
6c:1e:67:9f:95:15:c9:8b:d9:07:a0:69:3f:70:aa:
fc:b6:85:8a:80:26:f0:5b:7e:a6:4a:f7:75:6e:f9:
54:51:6b:2b:ab:58:b6:b6:b4:52:24:12:eb:4d:fd:
44:a8:6b:be:32:9d:ce:68:5c:bf:64:12:4c:02:f3:
41:81:4a:02:a9:99:71:9e:07:25:f7:77:9b:9a:15:
a7:f9:c5:86:a7:b0:96:52:85:6d:3d:8c:aa:f1:e7:
fb:36:56:0f:85:39:b8:1c:16:ed:24:74:cf:34:a2:
29:76:c1:d6:41:7e:d7:a6:45:b4:83:ac:ef:41:83:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:DF:71:06:BA:9D:1A:9A:4A:1D:67:8E:63:EC:87:C7:0F:1D:74
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SLnfcQa6nRqaSh1njmPsh8cPHXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
78:76:c5:1a:4f:65:b0:b0:9b:d9:25:01:72:80:97:20:21:4b:
60:b7:5c:89:42:ca:c3:9a:b4:4f:c7:2f:f9:06:8a:a1:0d:58:
bb:fc:00:1c:4e:9e:90:15:d9:9a:22:1f:fe:a1:bf:cd:28:a4:
77:54:97:06:e1:58:6b:2b:10:dd:71:02:fd:6d:37:e9:37:c9:
4d:14:76:a2:e7:5a:af:a3:6d:2e:08:d4:f2:12:e8:64:53:83:
e6:da:c3:35:11:5e:e3:35:a2:b9:f7:5b:d9:a3:f6:31:98:40:
54:e4:b6:8e:8d:c0:08:5e:f3:e8:36:74:73:5c:03:fa:12:cc:
e4:f3:6b:06:65:ae:26:2e:d0:62:79:fa:a6:ef:f3:f7:c6:c1:
84:b5:df:a4:72:41:c3:d0:a9:7b:60:52:4a:ce:a1:74:8f:cf:
8e:c2:66:2b:b9:de:e0:93:58:02:05:3d:cc:47:3b:0c:4c:ab:
d1:42:b6:9c:c8:a7:ad:37:08:5c:43:46:b1:08:18:5c:bd:46:
3e:56:18:f3:65:2b:50:5e:05:10:b9:72:2e:94:b7:f6:5f:3a:
ab:61:57:00:70:ec:ec:40:3c:c1:51:1f:53:5b:38:70:cc:30:
97:6b:ec:ef:fd:fe:bf:41:f4:b2:6f:75:d7:90:cc:0a:4d:37:
0e:30:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:14 2025 by rpki-client