Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VgncRZsQTqaP2cK0LAtRfl48Kgs.roa
File: VgncRZsQTqaP2cK0LAtRfl48Kgs.roa (raw, json)
Hash identifier: uR3M5jLUi6it1AIqr5jYyxRFYvoV2B/nMi2UMrvcasQ=
Subject key identifier: 56:09:DC:45:9B:10:4E:A6:8F:D9:C2:B4:2C:0B:51:7E:5E:3C:2A:0B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F2C20906A727DB012E55314F132942F68
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VgncRZsQTqaP2cK0LAtRfl48Kgs.roa
Signing time: Mon 29 Apr 2024 23:11:22 +0000
ROA not before: Mon 29 Apr 2024 23:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:20:90:6a:72:7d:b0:12:e5:53:14:f1:32:94:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 29 23:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5609dc459b104ea68fd9c2b42c0b517e5e3c2a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:97:a6:49:ca:2d:e5:94:e0:b7:fe:ac:31:
89:60:ca:24:74:87:f6:46:90:67:b4:e9:d1:64:a9:
47:f5:1a:e4:fa:d6:f0:83:84:e9:2e:88:21:56:20:
02:e7:9e:7a:a6:e6:4f:1c:9b:4e:00:51:05:1a:f4:
a0:27:a0:95:1e:82:dc:f3:10:8f:72:1d:3f:59:4f:
6a:f6:0f:1f:d5:e2:63:2e:12:81:80:b2:04:e5:57:
95:68:61:7a:d3:7f:f6:d1:8c:97:44:2a:36:b1:2a:
39:9a:1f:83:13:88:45:94:b0:6f:e4:74:da:66:4f:
8d:77:16:32:0f:08:79:9d:57:9c:28:96:c4:f6:8f:
9d:ae:c2:61:f2:9a:86:a8:c1:96:76:65:8e:ff:90:
ed:38:ab:c8:a3:87:7f:6a:01:4a:d8:f9:44:70:ff:
18:6e:ff:80:11:08:49:66:db:9b:83:8d:4a:f1:64:
3b:4d:3d:98:ec:d6:e9:f0:cd:5f:b4:dc:2e:93:1a:
f0:29:54:df:d0:4d:39:18:2c:95:df:dc:f3:d3:1a:
12:df:81:34:88:3c:fc:2e:ba:23:74:07:cc:1c:3c:
b2:58:49:a2:49:c3:da:31:cf:7b:91:9d:52:ed:c4:
37:f9:a0:c2:c7:da:13:9a:2d:b2:14:dc:e3:16:51:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:DC:45:9B:10:4E:A6:8F:D9:C2:B4:2C:0B:51:7E:5E:3C:2A:0B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VgncRZsQTqaP2cK0LAtRfl48Kgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:42:16:03:c6:87:71:41:fd:36:de:f1:31:80:d3:cd:6f:59:
3b:16:b6:0d:89:bc:3e:42:f1:85:19:d4:22:a6:af:28:9c:11:
e8:58:c6:be:c7:b3:22:d5:ab:32:4e:dc:d8:b3:08:5d:29:93:
a0:b3:a4:d1:d1:ab:47:85:9e:7d:0b:6e:87:7e:f1:60:23:cd:
a3:35:ca:1b:a7:eb:01:d8:98:1a:0a:ed:cd:67:d5:1d:dd:d6:
6d:68:5d:9c:fe:fe:0f:c2:97:d2:64:59:b7:fe:39:11:97:dd:
54:14:19:40:4a:de:2d:97:91:12:23:76:8f:40:d2:c2:db:6a:
fc:88:68:fd:b7:b9:e7:07:48:35:66:71:ca:9b:de:96:45:5d:
33:0a:3b:32:d9:44:26:e0:3b:7c:a6:f7:56:e5:a2:a8:05:28:
cc:5f:66:05:47:17:72:d6:b8:64:7c:f6:e4:86:1e:a9:13:c7:
fb:df:7b:75:61:f4:be:86:f8:e1:7d:ce:ff:9e:1e:9b:6c:5d:
5a:cc:e8:aa:93:04:9a:38:5f:be:83:31:27:af:53:11:30:53:
72:48:ee:00:fe:dc:60:67:6e:55:06:f1:84:b4:d7:f1:61:a1:
e8:66:4b:7a:11:05:a4:0b:f6:24:a6:86:da:5b:00:9c:37:09:
34:d8:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:12 2025 by rpki-client