Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ShCX4OiNJj0RNYXs-KePGNB_4Ko.roa
File: ShCX4OiNJj0RNYXs-KePGNB_4Ko.roa (raw, json)
Hash identifier: 9//3Wj/UiNlEfh+zKcFg8g9f+5AO4j/Soky1JTlmQEo=
Subject key identifier: 4A:10:97:E0:E8:8D:26:3D:11:35:85:EC:F8:A7:8F:18:D0:7F:E0:AA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7214534B0EC31205C10F5F34F3F5F071
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ShCX4OiNJj0RNYXs-KePGNB_4Ko.roa
Signing time: Mon 13 May 2024 13:11:25 +0000
ROA not before: Mon 13 May 2024 13:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:14:53:4b:0e:c3:12:05:c1:0f:5f:34:f3:f5:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 13 13:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a1097e0e88d263d113585ecf8a78f18d07fe0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:25:48:3b:f3:c9:75:f9:78:86:3c:7e:3e:
d3:9a:4a:91:84:c9:88:e1:04:52:bf:2b:f0:09:cd:
5f:8e:2b:6c:90:7b:67:59:45:af:85:c6:43:ce:0f:
8d:ef:ec:ce:1e:39:04:37:b3:96:4b:f7:e6:f4:7f:
9f:b2:fd:02:9d:c6:a4:69:97:e3:8f:40:91:b2:b2:
6c:6c:bc:6a:cc:67:39:09:c0:37:c9:3c:ab:1e:30:
26:51:4e:8d:24:cc:c2:89:51:76:d5:27:8a:fd:79:
75:55:c5:76:70:1f:2d:0e:b6:50:5d:2e:d0:c9:31:
04:dd:51:08:a4:72:e9:70:33:9d:4a:3e:2b:96:9c:
c6:72:83:b1:a3:88:95:db:d7:c0:b6:bb:19:34:de:
d3:0f:62:8a:5d:75:82:86:c7:97:1b:f1:00:e6:52:
6e:fc:c2:61:59:54:de:b3:11:60:1b:1d:0b:47:64:
74:c7:3e:2d:7e:9e:fc:81:fb:b1:f1:ae:c2:e9:1f:
88:c7:90:32:ad:b8:3d:c4:6d:33:7e:5c:e3:31:42:
4c:e6:d9:ef:46:ed:bd:72:e0:c8:a5:0e:41:9e:63:
56:be:06:cb:d9:f4:96:c2:3a:bc:a2:ad:b2:39:c3:
db:74:71:5c:a9:96:6e:23:99:ba:26:00:49:16:15:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:97:E0:E8:8D:26:3D:11:35:85:EC:F8:A7:8F:18:D0:7F:E0:AA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ShCX4OiNJj0RNYXs-KePGNB_4Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:b3:91:54:28:20:49:4e:86:1b:18:ff:5e:fd:0b:d0:7f:8e:
c5:55:de:8d:3c:ec:d4:eb:6c:3c:ca:b8:f0:11:b0:c3:3a:5b:
da:d4:77:54:95:af:b4:d8:8c:0c:8f:00:14:6b:ef:42:a1:ae:
b6:82:61:b5:e9:53:e1:ca:31:bc:79:9c:f9:74:9a:c2:11:7c:
77:5e:02:e4:1f:a4:ca:99:ec:47:f8:1c:0d:64:a7:c5:22:ad:
1a:3a:05:8f:83:90:03:93:16:d6:96:ac:61:03:0f:ab:b7:bd:
15:09:70:6d:26:d5:fc:68:a7:b1:ea:14:ae:4f:39:d2:e7:48:
bc:fd:e1:53:f3:c8:2b:a8:e7:f1:11:62:9b:c2:b0:6a:74:3e:
cb:21:75:7d:17:fe:dc:a0:7e:24:b4:de:c6:09:b8:fe:37:e3:
d7:0e:89:fa:fe:1b:f1:4e:02:4e:3a:39:01:df:eb:60:74:98:
92:fe:ec:d2:0f:99:cb:bc:d2:7d:d7:2d:62:e6:29:fb:16:ec:
d0:a3:65:c8:7d:46:5b:c4:dc:6e:e6:dc:87:63:53:81:0f:89:
12:21:ea:68:35:e5:7b:de:a8:4b:52:76:45:82:2a:1e:42:b2:
71:e0:be:be:29:73:10:27:41:65:3c:6c:a0:70:db:55:9b:7c:
1a:8d:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:53 2025 by rpki-client