Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/U3KNDo68S7QfLjXslziM3K6_zwc.roa
File: U3KNDo68S7QfLjXslziM3K6_zwc.roa (raw, json)
Hash identifier: cUSYsuyZI6mgDaZdjwCg5ArqICmQjpVTkDtigj3J6WU=
Subject key identifier: 53:72:8D:0E:8E:BC:4B:B4:1F:2E:35:EC:97:38:8C:DC:AE:BF:CF:07
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F510C12FF8F547A049C04B7EAA6105E98
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/U3KNDo68S7QfLjXslziM3K6_zwc.roa
Signing time: Tue 07 May 2024 03:14:56 +0000
ROA not before: Tue 07 May 2024 03:14:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:0c:12:ff:8f:54:7a:04:9c:04:b7:ea:a6:10:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 03:14:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53728d0e8ebc4bb41f2e35ec97388cdcaebfcf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:de:61:38:2a:38:51:2b:a5:cb:b3:0f:f3:
bf:68:a3:85:9f:1f:0f:67:e3:f3:74:27:c2:f6:b0:
66:c7:76:2c:b7:f7:f0:8a:20:09:f9:25:db:4d:43:
6f:c8:a9:db:b6:ad:24:e2:79:18:84:bf:02:69:b3:
13:85:9a:5e:a9:3a:b3:9d:dc:cd:c9:0b:60:00:78:
fe:06:f6:91:6d:91:d0:f6:37:ff:ff:24:56:3d:e6:
69:30:16:40:75:33:82:2b:5c:df:ae:8d:22:ff:86:
d8:68:73:f4:09:f4:ba:fc:8b:b8:d8:27:29:be:56:
d9:85:42:b2:c8:48:7b:7d:75:9a:3b:46:77:36:89:
8e:68:c0:2f:d6:3f:ba:bd:4d:b4:5e:b7:62:37:ae:
28:6a:e2:f5:a3:6a:b1:d8:65:c2:06:8a:73:4d:38:
2a:cd:8e:7a:65:bc:a5:93:e0:68:38:45:85:04:cf:
76:41:e3:3e:cd:dd:2a:01:ba:26:8d:62:4a:6f:0c:
62:7b:cd:a6:29:43:94:2f:df:1c:a6:07:cd:e8:a0:
70:90:ef:6d:05:60:2b:d1:3c:7d:44:72:41:8b:ca:
50:b9:67:ab:ca:12:78:a5:71:cd:2a:7c:27:db:e3:
c7:8f:2f:cf:7c:90:05:85:b9:b3:65:f6:4c:8b:39:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:8D:0E:8E:BC:4B:B4:1F:2E:35:EC:97:38:8C:DC:AE:BF:CF:07
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/U3KNDo68S7QfLjXslziM3K6_zwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:a2:a6:6f:24:2c:82:57:15:0f:89:7e:1c:83:1d:c5:19:e6:
8d:44:ad:07:36:22:c5:72:a6:6c:41:b1:d6:e8:32:fa:2c:54:
e6:16:6d:89:e6:c8:da:a4:b8:b3:c8:e5:e7:e3:73:5f:ae:bd:
9e:6d:e7:1e:0e:15:ba:63:8b:cf:df:d4:2d:75:8b:f8:60:0b:
0a:68:17:7f:15:b6:95:68:b1:6b:e3:31:8e:0f:f7:23:28:5c:
53:13:92:35:1e:15:e7:d3:b9:14:6a:1e:c6:d5:1f:f9:64:03:
10:4d:7a:9b:92:07:8e:9c:c2:98:5a:0a:da:31:0c:e6:63:c2:
b9:b1:48:de:c1:47:0a:a9:bb:63:0d:5f:d7:28:db:b6:5a:09:
1c:4a:28:56:c9:88:35:af:f1:22:dc:7c:c8:81:53:93:a4:20:
12:32:7c:26:09:43:b5:26:20:35:19:5b:de:d2:0c:9f:b9:21:
b3:82:df:5c:a5:e4:c0:79:5d:01:36:16:ba:00:71:7f:f5:20:
27:13:f1:79:7d:80:51:d9:e0:03:79:ff:37:b0:3c:52:7c:e4:
1b:18:1b:a7:00:eb:ab:4c:3e:20:9a:3f:3e:a1:7e:10:d5:a5:
c8:3e:f6:48:d2:03:33:ea:ab:a2:5d:87:46:69:4b:16:72:ac:
ee:53:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:48 2025 by rpki-client