Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SiIrcvAMfXMqVYTxo6NnBUtzg-w.roa
File: SiIrcvAMfXMqVYTxo6NnBUtzg-w.roa (raw, json)
Hash identifier: agGYdoA7Jhs3DMSveq26S+IeoxbglAb3/NlxPATpW2U=
Subject key identifier: 4A:22:2B:72:F0:0C:7D:73:2A:55:84:F1:A3:A3:67:05:4B:73:83:EC
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFB6CB332E098F4C98979F35FAF0A4466
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SiIrcvAMfXMqVYTxo6NnBUtzg-w.roa
Signing time: Sat 20 Apr 2024 12:13:08 +0000
ROA not before: Sat 20 Apr 2024 12:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:6c:b3:32:e0:98:f4:c9:89:79:f3:5f:af:0a:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 12:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a222b72f00c7d732a5584f1a3a367054b7383ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:17:89:5b:8b:22:2f:d6:b9:12:c8:0a:62:
d6:e6:d1:93:e6:c9:c1:82:49:a7:5c:d5:87:8e:55:
b3:5c:69:2f:fa:77:32:53:1b:1c:e3:3e:cd:bb:51:
3f:14:d2:83:ce:0c:9e:13:e5:20:55:4d:49:ae:15:
83:20:0a:00:98:08:70:74:ec:57:22:af:44:d7:17:
26:a9:ad:cd:4f:b2:54:90:50:64:b8:ad:45:e3:9e:
f5:ad:01:96:25:c8:c2:e4:8f:d5:34:c6:d0:2a:1b:
d6:ef:b4:99:2f:58:b3:64:e0:eb:d7:e7:19:8b:72:
dd:3f:91:a9:dc:12:32:dc:bc:1f:c0:ef:3a:81:01:
2d:67:9a:be:93:50:69:53:01:b4:00:08:fe:62:7d:
02:79:7c:2b:44:a8:cc:57:57:4a:b5:50:a5:6c:24:
6d:c6:3b:b8:5e:83:98:05:60:e0:b4:69:dd:0d:cd:
c5:1a:af:98:21:ab:81:5b:fc:1a:74:32:50:f5:75:
19:1f:60:c2:8c:59:fd:97:5e:55:42:04:34:f3:39:
a8:ff:c8:93:42:dc:90:64:63:fd:32:b6:57:43:00:
ad:5c:9a:e0:30:39:3e:a4:a1:95:eb:2f:b9:39:6b:
d5:76:bd:b3:b2:a3:ca:82:c0:fa:9b:a3:ff:e6:bc:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:2B:72:F0:0C:7D:73:2A:55:84:F1:A3:A3:67:05:4B:73:83:EC
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SiIrcvAMfXMqVYTxo6NnBUtzg-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
69:07:78:a8:d6:85:ca:64:ec:47:60:88:cb:ba:d9:d0:98:bd:
b6:0d:d1:8d:46:dc:55:61:65:c8:1a:f7:ae:71:aa:3f:ee:06:
7b:d3:2c:38:1a:5c:6d:66:97:07:21:f3:47:df:c6:3d:c0:96:
3a:37:5e:31:6f:1d:73:22:92:75:8b:00:06:97:fb:7d:8e:f6:
6c:68:77:8d:63:2a:eb:c4:fe:57:22:01:31:f2:d4:04:b6:e9:
9d:38:80:0c:4b:54:d3:6b:99:b5:c5:f5:e8:de:c9:fa:e4:42:
18:c2:6c:a6:63:97:85:53:78:1e:57:12:3c:6f:aa:d3:bc:ed:
ed:76:ba:ff:c3:af:dd:8a:ea:eb:3a:ee:7d:5e:39:5f:aa:ac:
b6:1b:27:13:68:7b:dc:37:ed:45:4d:ba:46:76:2b:b3:ce:e1:
bc:fb:30:f4:da:4c:11:63:8e:89:2c:4a:ce:24:69:26:28:ab:
84:15:f6:ee:06:73:cc:e1:f3:43:d2:e6:62:87:51:82:7b:2b:
f6:77:34:85:fe:95:54:d5:97:47:1a:40:93:03:9f:8f:3a:30:
dc:5f:da:08:95:4e:83:89:0a:d2:24:88:29:ba:50:04:28:48:
3f:3e:1f:fe:61:06:59:98:3f:f4:fb:eb:7d:61:71:75:a2:b9:
eb:83:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org