Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Som9L-qsVBXdjGREg9VNA-9mgJ0.roa
File: Som9L-qsVBXdjGREg9VNA-9mgJ0.roa (raw, json)
Hash identifier: foL7CdZTisoIuqQmgo4ec7R1qirZ9mmrWjvGXbdDsP8=
Subject key identifier: 4A:89:BD:2F:EA:AC:54:15:DD:8C:64:44:83:D5:4D:03:EF:66:80:9D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4CBDC7A0B63B48F3BDD9A526A37527A8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Som9L-qsVBXdjGREg9VNA-9mgJ0.roa
Signing time: Mon 06 May 2024 07:10:56 +0000
ROA not before: Mon 06 May 2024 07:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:bd:c7:a0:b6:3b:48:f3:bd:d9:a5:26:a3:75:27:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 6 07:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a89bd2feaac5415dd8c644483d54d03ef66809d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:0c:be:7b:ad:2f:42:5a:c4:19:b9:37:ec:
5b:7d:0e:c7:6a:8f:e1:17:6e:b0:39:65:29:db:21:
33:c5:b5:e4:0b:0c:ed:64:d8:e0:d6:00:54:6d:99:
db:ef:a7:93:32:0d:e8:47:7f:6e:06:83:c1:96:8b:
80:f0:ff:0a:ce:c6:c9:e2:81:71:ee:da:28:26:06:
8e:88:e3:5c:32:1b:d6:ab:c3:87:89:95:d9:0f:61:
b9:61:0c:52:75:61:0a:f2:2b:3c:dc:99:0e:7e:01:
b5:12:fc:c0:92:8f:3a:ae:14:00:7c:e5:20:e1:a2:
27:4e:03:97:0f:0c:b5:a4:50:03:2b:44:35:46:0f:
a6:70:f9:02:52:4e:53:32:e6:9f:84:9c:48:38:74:
17:9a:8d:ae:a8:c4:1f:9a:39:2d:77:56:91:ce:4b:
3b:68:03:69:55:ef:d6:59:78:a6:55:60:e3:c8:b6:
6d:a9:09:77:8a:b7:4c:a6:d9:a8:34:86:79:1e:61:
4e:ba:59:51:4e:69:98:3a:d0:96:4c:e2:6e:08:44:
99:d7:30:a7:ad:8b:85:ef:ae:85:f4:9e:ee:ab:d3:
c2:a6:ed:5c:1e:28:25:9f:b0:e6:0c:ce:ab:f0:66:
7f:5c:8a:4a:d7:d3:ac:37:ff:b0:28:7a:1a:38:38:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:BD:2F:EA:AC:54:15:DD:8C:64:44:83:D5:4D:03:EF:66:80:9D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Som9L-qsVBXdjGREg9VNA-9mgJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:b1:43:b3:5e:b4:62:02:e9:d8:66:67:ce:8a:ce:f1:ca:f8:
36:d4:ff:2c:74:12:ac:ac:5d:9b:5b:59:cb:61:51:82:a9:3c:
c1:1a:fe:6d:08:d1:47:3a:df:fc:92:5f:01:01:1c:fc:66:a0:
0b:6f:7b:d8:3b:df:05:92:fc:65:31:34:64:40:84:9d:99:e0:
a3:a1:74:9e:c8:13:cb:f4:76:3a:2a:af:5e:8b:22:e8:a8:47:
e9:57:13:4c:83:bf:6f:c0:88:8b:1c:43:4d:88:22:9e:0c:b1:
4a:ed:a4:34:89:4d:29:42:9a:0b:d0:7b:91:89:dc:a2:b2:04:
c6:07:e3:ad:4c:53:70:10:04:6e:f9:58:60:85:cc:57:d3:c5:
7c:d7:9a:38:6a:e7:52:4f:d3:7e:e7:69:24:64:fd:ca:f0:1b:
b2:16:64:4e:8c:83:f5:71:d9:6e:2a:de:97:c9:03:f8:51:62:
b8:5f:d6:f8:5f:ec:27:0e:3b:01:bc:88:f0:97:65:67:71:9e:
35:a5:6e:48:94:80:0e:35:c2:6f:d1:63:67:68:b2:a4:cb:a1:
a2:e6:37:af:7c:2f:6a:e0:a4:44:11:a4:e8:f2:7f:c4:0a:e9:
95:ce:a5:93:79:bf:91:33:2c:78:df:99:1c:73:c3:1b:cb:f9:
e9:cb:fb:97
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9MvcegtjtI873ZpSajdSeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA2MDcxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTg5YmQyZmVhYWM1NDE1ZGQ4YzY0NDQ4M2Q1NGQwM2VmNjY4MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/gMvnutL0JaxBm5N+xbfQ7Hao/h
F26wOWUp2yEzxbXkCwztZNjg1gBUbZnb76eTMg3oR39uBoPBlouA8P8KzsbJ4oFx
7tooJgaOiONcMhvWq8OHiZXZD2G5YQxSdWEK8is83JkOfgG1EvzAko86rhQAfOUg
4aInTgOXDwy1pFADK0Q1Rg+mcPkCUk5TMuafhJxIOHQXmo2uqMQfmjktd1aRzks7
aANpVe/WWXimVWDjyLZtqQl3irdMptmoNIZ5HmFOullRTmmYOtCWTOJuCESZ1zCn
rYuF766F9J7uq9PCpu1cHigln7DmDM6r8GZ/XIpK19OsN/+wKHoaODi/TwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEqJvS/qrFQV3YxkRIPVTQPvZoCdMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvU29tOUwtcXNWQlhkakdSRWc5Vk5BLTltZ0owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEmxQ7NetGIC6dhmZ86K
zvHK+DbU/yx0EqysXZtbWcthUYKpPMEa/m0I0Uc63/ySXwEBHPxmoAtve9g73wWS
/GUxNGRAhJ2Z4KOhdJ7IE8v0djoqr16LIuioR+lXE0yDv2/AiIscQ02IIp4MsUrt
pDSJTSlCmgvQe5GJ3KKyBMYH461MU3AQBG75WGCFzFfTxXzXmjhq51JP037naSRk
/crwG7IWZE6Mg/Vx2W4q3pfJA/hRYrhf1vhf7CcOOwG8iPCXZWdxnjWlbkiUgA41
wm/RY2dosqTLoaLmN698L2rgpEQRpOjyf8QK6ZXOpZN5v5EzLHjfmRxzwxvL+enL
+5c=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:21:23 2025 by rpki-client