Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UwUuHZXXEy8MqWlMAKhHxYCF1LE.roa
File: UwUuHZXXEy8MqWlMAKhHxYCF1LE.roa (raw, json)
Hash identifier: fciErgskPtahVNrVPc1Ci5la8PWRuBW5apoyI8qgUAU=
Subject key identifier: 53:05:2E:1D:95:D7:13:2F:0C:A9:69:4C:00:A8:47:C5:80:85:D4:B1
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F0CC6D65E091EB238CFC33C5418BB42DC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UwUuHZXXEy8MqWlMAKhHxYCF1LE.roa
Signing time: Tue 23 Apr 2024 21:05:08 +0000
ROA not before: Tue 23 Apr 2024 21:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:cc5:ed90/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:c6:d6:5e:09:1e:b2:38:cf:c3:3c:54:18:bb:42:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 23 21:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53052e1d95d7132f0ca9694c00a847c58085d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:54:d7:63:de:bd:16:9a:dc:a1:71:d5:6e:
91:28:6b:08:28:9c:37:dc:18:94:f0:46:5f:57:81:
b9:7b:b5:89:19:c5:df:d0:e8:28:70:c0:26:41:73:
bb:99:a4:53:e5:de:ad:cc:37:3b:97:86:00:52:28:
eb:9f:c0:bd:b3:ea:7b:e4:2c:a1:3a:2b:d6:db:39:
b6:89:e7:da:e4:4b:59:9c:86:3f:12:fc:48:a9:82:
16:b7:f8:16:af:96:0e:42:f2:59:f2:fd:65:67:d6:
50:5c:7a:aa:1c:48:33:8d:63:c4:49:50:35:5a:ce:
1e:0b:0c:df:33:f3:fd:ea:ea:fb:f6:77:19:ff:10:
78:a8:ae:81:eb:71:86:d4:6f:35:2a:a5:81:ee:18:
f0:bc:95:0e:c7:a7:ad:97:f6:b5:8f:62:b9:5d:f7:
32:3c:fe:c5:c6:bb:b2:c5:fa:5a:76:a3:84:f3:38:
30:1c:30:2f:e1:70:bf:ea:80:df:57:c1:ff:56:7c:
96:55:f3:f5:b3:6f:04:00:89:f5:d4:28:97:c2:30:
12:8d:77:2b:e8:5c:c5:3c:49:aa:c0:6a:4f:f0:b2:
e2:b4:ee:ae:7d:cc:59:17:f9:0c:3e:ed:d1:bb:8a:
73:c6:41:d3:3a:a8:a8:2d:89:9d:64:21:15:2a:5d:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:2E:1D:95:D7:13:2F:0C:A9:69:4C:00:A8:47:C5:80:85:D4:B1
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UwUuHZXXEy8MqWlMAKhHxYCF1LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
2001:67c:64:ffff:0:18f:cc5:ed90/128
Signature Algorithm: sha256WithRSAEncryption
c4:54:89:b9:6e:bc:b2:10:e8:c3:7e:2f:a5:8d:89:8f:2c:40:
10:41:57:ea:64:ac:52:e1:a6:f5:5f:5f:49:b1:ec:ab:8d:00:
c2:14:34:03:32:82:c3:d9:39:f9:57:55:71:dd:8d:d9:bb:4d:
e6:f9:cb:73:db:cd:3d:48:e8:76:ad:54:e3:c6:68:b3:16:68:
00:6d:67:de:91:7b:b7:a4:7b:54:50:3b:07:aa:e5:61:97:78:
7a:b3:e4:61:d3:40:27:60:66:91:4d:98:b8:6d:f1:5a:02:76:
50:11:04:69:0e:8e:24:85:84:9d:56:d7:89:87:a2:3e:87:80:
18:84:77:80:89:b7:d7:ba:9e:30:0e:1e:81:53:a7:c4:3a:fb:
f6:cb:a7:f2:6e:d4:cf:23:8d:20:89:50:9c:4c:be:b5:49:36:
c5:d9:0b:b7:81:94:a6:4a:dc:72:5c:d1:04:fb:24:ce:28:86:
c1:9d:88:7c:83:4b:bb:93:93:1b:aa:69:ba:08:29:d6:6d:4b:
2d:8e:ad:82:19:4e:39:94:0d:03:ef:c2:d8:52:12:72:f3:12:
bd:85:d0:b8:79:56:50:7f:e8:c9:84:a8:48:06:86:1a:d3:ae:
e2:30:8e:f0:8c:4e:99:48:d2:f6:97:38:09:e4:f2:4a:1f:ba:
bb:ad:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org