Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa
File: UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa (raw, json)
Hash identifier: i09sEgs0giyB84LkBRdGuR/eAil8M4BbnAqkteXpxgM=
Subject key identifier: 51:91:6B:EA:74:A7:4B:EA:3A:11:6F:58:3B:78:3E:83:9F:C6:99:FD
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F65656D97201AE08F946028CB9C9D33CA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa
Signing time: Sat 11 May 2024 02:04:57 +0000
ROA not before: Sat 11 May 2024 02:04:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:6564:e2c9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:65:65:6d:97:20:1a:e0:8f:94:60:28:cb:9c:9d:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 02:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51916bea74a74bea3a116f583b783e839fc699fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:26:bd:aa:a7:e4:38:2b:3d:ad:f8:ea:09:
f8:9d:d5:17:a5:29:f7:50:f5:a2:40:40:e4:73:89:
bf:17:c6:71:f6:8b:a6:fa:e7:83:24:31:f0:a0:a1:
38:72:ba:14:39:7f:62:8e:2c:7a:66:85:e3:59:86:
4b:ee:2d:07:1a:31:79:42:04:6f:c9:c7:d2:29:4a:
e5:47:43:73:ed:dd:b8:5f:b6:9d:c6:95:e5:52:e6:
91:a2:97:74:e8:e9:2d:fa:2c:78:e1:dc:53:4f:44:
71:4d:7e:94:e5:bc:ad:06:08:45:17:fe:dd:2b:65:
e8:65:a9:26:49:21:db:ea:93:80:6b:8c:19:21:e1:
8d:56:8b:2f:c1:f3:10:02:08:56:ab:92:23:7f:90:
0d:ca:fe:a6:70:fc:59:a3:43:22:87:e7:52:b7:ff:
b9:f3:4e:7b:34:0a:38:94:ae:f6:16:f6:3c:44:60:
7b:46:52:2e:18:37:03:f3:1f:1d:59:c5:8c:6d:23:
c7:e1:94:b2:f4:49:33:b0:a9:17:43:4f:19:ba:79:
94:ce:52:67:8c:23:b1:9d:4e:7a:1f:4f:78:2e:6e:
93:3c:57:47:4a:53:e8:3a:ff:4a:ed:e6:d2:94:11:
2d:5d:91:6b:12:33:0c:3f:18:80:7b:4a:fc:f3:17:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:6B:EA:74:A7:4B:EA:3A:11:6F:58:3B:78:3E:83:9F:C6:99:FD
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:40:fd:ef:16:f8:29:8f:e0:0b:2b:0c:d1:7c:7f:d3:6e:ee:
7a:1e:cb:48:d4:7c:ca:78:f3:81:b2:db:df:34:5d:11:e1:dc:
ac:de:a0:55:7c:a2:d8:91:95:b3:cb:af:76:5f:2f:2a:c1:f4:
e3:49:71:8e:35:87:8c:d3:bd:9f:cf:cf:c7:02:d2:ff:59:13:
b5:2b:1b:7c:41:b5:25:32:82:7e:0b:0a:5c:71:29:6a:99:7d:
3f:26:e5:07:f0:31:8e:1f:06:93:ee:4c:59:63:5c:2a:72:5a:
0f:49:b6:e4:44:51:49:c2:bd:0d:56:12:6b:46:69:e6:71:ad:
b9:b5:a3:96:eb:af:f0:f5:2d:88:ba:8c:22:b6:19:86:89:5a:
f3:fe:ad:fd:10:25:d3:e9:79:83:c1:21:69:20:1e:07:6b:bc:
20:b5:ae:68:2a:d8:bc:23:4c:31:47:af:4c:c9:16:9d:42:1a:
4c:8f:2b:ce:fe:6d:21:78:2e:3a:dd:56:ff:7e:3c:02:2a:e6:
27:c7:f1:28:2c:42:e3:fd:37:52:90:53:49:a4:38:8c:98:29:
24:36:80:e4:d8:ad:61:f1:58:6b:86:81:5f:95:01:ab:35:e2:
cb:fd:60:02:34:ef:75:62:c8:d9:73:03:8d:14:5e:04:fe:5f:
76:69:23:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9lZW2XIBrgj5RgKMucnTPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTExMDIwNDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTkxNmJlYTc0YTc0YmVhM2ExMTZmNTgzYjc4M2U4MzlmYzY5OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6cmvaqn5DgrPa346gn4ndUXpSn3
UPWiQEDkc4m/F8Zx9oum+ueDJDHwoKE4croUOX9ijix6ZoXjWYZL7i0HGjF5QgRv
ycfSKUrlR0Nz7d24X7adxpXlUuaRopd06Okt+ix44dxTT0RxTX6U5bytBghFF/7d
K2XoZakmSSHb6pOAa4wZIeGNVosvwfMQAghWq5Ijf5ANyv6mcPxZo0Mih+dSt/+5
8057NAo4lK72FvY8RGB7RlIuGDcD8x8dWcWMbSPH4ZSy9EkzsKkXQ08ZunmUzlJn
jCOxnU56H094Lm6TPFdHSlPoOv9K7ebSlBEtXZFrEjMMPxiAe0r88xfJ0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFGRa+p0p0vqOhFvWDt4PoOfxpn9MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVVpGcjZuU25TLW82RVc5WU8zZy1nNV9HbWYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFlA/e8W+CmP4AsrDNF8
f9Nu7noey0jUfMp484Gy2980XRHh3KzeoFV8otiRlbPLr3ZfLyrB9ONJcY41h4zT
vZ/Pz8cC0v9ZE7UrG3xBtSUygn4LClxxKWqZfT8m5QfwMY4fBpPuTFljXCpyWg9J
tuREUUnCvQ1WEmtGaeZxrbm1o5brr/D1LYi6jCK2GYaJWvP+rf0QJdPpeYPBIWkg
HgdrvCC1rmgq2LwjTDFHr0zJFp1CGkyPK87+bSF4LjrdVv9+PAIq5ifH8SgsQuP9
N1KQU0mkOIyYKSQ2gOTYrWHxWGuGgV+VAas14sv9YAI073ViyNlzA40UXgT+X3Zp
Iyk=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:34:29 2025 by rpki-client