Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SYFpZLWfGzM0V_WulCNXanyNNZU.roa
File: SYFpZLWfGzM0V_WulCNXanyNNZU.roa (raw, json)
Hash identifier: AD/UEj6/zy7MnYLukq80kIYsESoEXuXH0nZFZfPP7Zc=
Subject key identifier: 49:81:69:64:B5:9F:1B:33:34:57:F5:AE:94:23:57:6A:7C:8D:35:95
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F366DCCE67D4B13467F5D61824CB52A40
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SYFpZLWfGzM0V_WulCNXanyNNZU.roa
Signing time: Wed 01 May 2024 23:11:56 +0000
ROA not before: Wed 01 May 2024 23:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:6d:cc:e6:7d:4b:13:46:7f:5d:61:82:4c:b5:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 23:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49816964b59f1b333457f5ae9423576a7c8d3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:ec:3d:6d:d0:d7:25:00:e6:38:37:04:49:
51:30:f5:fb:e4:09:df:8e:7f:38:ab:5b:d7:28:33:
95:55:63:50:e0:1e:ea:08:e8:a3:a0:e7:38:b5:6e:
bd:08:e0:27:a4:58:df:4f:19:04:b1:0d:65:ca:39:
a4:53:d2:fe:36:54:87:cc:e4:64:32:21:8a:d0:6f:
a8:14:7c:56:55:55:64:b1:3c:02:63:04:31:d9:cf:
37:60:14:36:da:e1:76:de:11:1e:14:9a:3a:71:6c:
12:58:24:0a:9f:8d:cb:21:6d:03:b1:13:49:ee:9c:
81:41:38:ab:cb:01:68:2e:20:f5:dd:14:6e:8e:f3:
bf:d4:f9:52:a9:24:54:e0:66:39:40:bd:98:61:b0:
50:0c:43:45:ac:2c:15:36:9f:04:d2:1e:38:da:2b:
34:13:c8:51:55:b4:2a:66:15:06:a6:05:ea:e1:0c:
88:a4:9f:dd:ee:64:e1:c1:3c:b0:51:f0:c1:64:d6:
97:8d:57:80:02:b9:d2:4a:28:da:31:99:6d:c6:c4:
f0:28:6d:94:07:9a:d5:14:f1:1e:6c:e8:5e:95:47:
0d:61:0d:22:75:45:99:00:dd:8c:03:e6:a9:a8:dd:
61:95:08:a2:ba:b0:0e:99:58:39:76:a7:d8:0a:8d:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:69:64:B5:9F:1B:33:34:57:F5:AE:94:23:57:6A:7C:8D:35:95
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SYFpZLWfGzM0V_WulCNXanyNNZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:0c:7f:76:eb:88:c8:6b:2e:22:61:31:29:58:94:df:14:d8:
69:2f:4c:1b:11:13:76:c9:f0:42:9c:44:4d:af:d1:59:0c:3c:
23:2e:37:da:c6:11:32:e4:e2:56:79:ef:48:8c:67:a9:a4:13:
22:f6:00:f5:9b:8d:61:f0:df:c9:8f:49:1d:4e:7a:7d:fe:40:
33:ff:55:92:1a:df:34:f8:8f:5f:c6:f1:af:d3:b3:67:d9:5d:
c1:a8:2a:c7:b2:32:ca:40:d1:3f:fe:51:4f:41:e0:29:5a:9d:
cd:38:99:51:77:36:8b:af:8b:fe:5c:a0:23:d7:8e:73:2a:48:
25:8a:d3:76:65:f2:91:6d:cc:46:f6:c3:82:1e:10:73:60:4a:
f6:f3:f2:73:cd:11:11:82:e2:30:03:ec:55:93:78:a2:97:41:
25:c7:6c:7e:13:43:c4:65:d8:72:dc:02:c9:e3:88:b9:f2:2a:
ed:02:5f:5c:9c:fa:59:90:e8:84:05:92:f5:9f:ee:7a:15:dc:
c2:ce:d6:96:b1:f2:97:4a:3c:4d:da:bd:9e:11:9b:c2:e3:46:
d6:32:47:25:0e:e4:33:a1:99:8e:29:c6:64:0c:25:35:37:22:
e6:62:48:3c:e6:f6:24:57:56:76:31:c9:3a:c5:ad:d3:3b:f5:
29:1b:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:02:28 2025 by rpki-client