Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VwADiJQNLYyXmaxT0OHS6l_dCV4.roa
File: VwADiJQNLYyXmaxT0OHS6l_dCV4.roa (raw, json)
Hash identifier: j0W7lpW01qLqULrJo3AweQ036M6tY5pPD8586MdEvN0=
Subject key identifier: 57:00:03:88:94:0D:2D:8C:97:99:AC:53:D0:E1:D2:EA:5F:DD:09:5E
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA4B78885B8947313A157275F11F189C7
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VwADiJQNLYyXmaxT0OHS6l_dCV4.roa
Signing time: Thu 23 May 2024 09:10:42 +0000
ROA not before: Thu 23 May 2024 09:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:b7:88:85:b8:94:73:13:a1:57:27:5f:11:f1:89:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 09:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57000388940d2d8c9799ac53d0e1d2ea5fdd095e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ec:43:30:86:c7:0a:95:00:d0:94:6a:fa:2c:
3b:54:3f:95:aa:3a:98:c6:cd:37:51:b9:d5:6d:b5:
d7:81:21:e6:6a:b9:6b:71:4a:4c:17:41:37:41:35:
16:5b:ed:4f:a2:31:44:a5:a5:e5:f3:a4:35:60:37:
b6:1a:34:45:47:ba:56:5d:77:ae:8a:a6:c4:56:d0:
db:ce:0e:6d:10:64:39:58:f8:8c:c4:8d:e2:b4:22:
ad:28:5a:69:8a:05:13:ca:f9:33:73:09:f2:f9:d7:
d8:77:75:e5:68:30:51:1f:e3:d2:b9:cb:e7:1a:85:
24:41:b8:c2:da:29:c8:62:d8:73:00:57:9c:e6:00:
92:25:0c:5a:52:bb:2a:51:7b:45:2f:80:30:33:98:
92:05:af:8d:77:e9:27:fd:b6:f7:53:f6:b8:38:09:
10:59:ef:4e:b2:43:4f:aa:95:e2:f7:8d:f0:19:3a:
3d:69:66:8e:f7:e9:a1:b1:37:fe:4c:82:4f:19:2b:
dc:f4:f7:bb:8c:29:3f:b7:c4:dc:23:1e:a0:20:78:
2a:ef:e3:6b:79:2b:6b:42:f4:56:a2:35:d0:03:d1:
62:89:7c:5c:2d:9c:a4:66:9e:f8:67:c6:3f:d4:27:
1e:2d:57:38:c3:a2:81:0a:4d:b3:6f:83:2b:1e:2c:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:00:03:88:94:0D:2D:8C:97:99:AC:53:D0:E1:D2:EA:5F:DD:09:5E
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VwADiJQNLYyXmaxT0OHS6l_dCV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:f4:7e:82:b0:03:ab:e9:4b:b3:5a:85:b6:d6:34:b1:69:26:
ac:39:c9:8c:8d:65:7e:53:a0:4c:cb:4f:c1:3e:0b:04:ca:60:
93:2f:33:0e:32:41:bf:2d:60:a0:11:4a:37:bb:e5:fe:b3:4c:
e8:4e:ac:f1:9b:f5:32:0f:36:e5:e7:0a:5c:54:e4:d0:27:34:
a0:3f:a1:b5:84:0b:a2:f4:25:a0:d1:72:dc:df:05:64:21:11:
89:83:0f:fa:bb:bf:c9:2e:b7:7e:65:25:8a:21:f4:27:4e:c6:
74:25:64:48:ec:62:ff:07:5c:ad:36:17:4a:43:42:08:27:74:
95:60:b7:34:b9:3d:55:5d:44:c4:41:92:33:05:d4:b7:03:19:
a9:65:9e:82:2f:78:a2:4b:29:00:b4:60:a5:ac:c2:fc:17:25:
b3:52:17:0e:d0:46:b3:6f:a1:bd:0d:b0:fb:83:3a:1e:e7:76:
63:ee:4e:ae:bf:6d:2a:cd:2a:18:29:73:9c:63:b7:98:1a:53:
c1:4a:d7:ca:2f:47:58:33:dc:fa:b3:d8:ed:6d:35:6d:c1:41:
77:55:4e:4f:9f:03:54:85:93:40:f3:31:4d:d7:e2:cc:bb:8f:
14:a2:90:87:b5:61:d6:fb:14:d5:c8:3f:a9:db:20:35:2f:76:
12:71:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:10 2025 by rpki-client