Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WE4bXRNQq8ABVRL4_y9fvYvVcsY.roa
File: WE4bXRNQq8ABVRL4_y9fvYvVcsY.roa (raw, json)
Hash identifier: wWJG8iGdPRsttSc6Fmy/TiVYSpu4bZ6P2ix+j9UPv7o=
Subject key identifier: 58:4E:1B:5D:13:50:AB:C0:01:55:12:F8:FF:2F:5F:BD:8B:D5:72:C6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F1449A880347B1BA231A07A9960A4559B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WE4bXRNQq8ABVRL4_y9fvYvVcsY.roa
Signing time: Thu 25 Apr 2024 08:05:22 +0000
ROA not before: Thu 25 Apr 2024 08:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:1448:b4ae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:49:a8:80:34:7b:1b:a2:31:a0:7a:99:60:a4:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 08:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584e1b5d1350abc0015512f8ff2f5fbd8bd572c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:90:92:12:85:b0:4a:ab:70:65:e4:5c:39:
4b:4b:d9:38:04:44:92:02:6d:b1:f6:7f:31:1a:15:
75:0b:db:f2:11:e9:b5:96:f1:84:7c:65:60:16:2a:
8b:18:db:c5:cb:b6:a2:94:3a:8d:e7:d1:57:aa:65:
81:b6:4d:a0:de:72:a1:f2:cf:5e:0f:8a:d4:96:02:
94:49:39:08:2a:9f:80:ee:95:3d:e5:a6:04:72:ba:
d9:13:e7:f4:94:32:dc:f6:f2:a6:9d:27:30:96:a1:
89:bc:16:a8:6b:a7:d9:e1:08:00:a0:72:65:ef:4d:
1d:d2:11:2a:89:a1:d7:21:66:4c:6c:16:8b:c7:24:
7a:d3:61:cf:31:47:36:c3:3f:7b:84:bd:c7:f4:e9:
d5:fb:29:db:fa:1a:28:78:28:86:be:60:c3:42:08:
31:3f:0a:65:15:47:c1:1d:25:21:4a:c8:3d:09:cd:
6a:22:77:2b:44:15:10:07:f1:f2:f9:2f:3f:2b:68:
08:7b:d5:98:6f:0b:13:b1:51:71:66:a4:d4:1c:13:
db:c8:5f:65:4f:69:19:cc:67:ec:97:92:be:90:27:
91:b8:cf:74:03:50:ab:95:65:ef:45:ba:e7:ea:e1:
da:1d:7a:7a:e0:cd:28:dd:f2:5e:3f:6e:64:d9:8b:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:1B:5D:13:50:AB:C0:01:55:12:F8:FF:2F:5F:BD:8B:D5:72:C6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WE4bXRNQq8ABVRL4_y9fvYvVcsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
2001:67c:64:ffff:0:18f:1448:b4ae/128
Signature Algorithm: sha256WithRSAEncryption
85:bf:67:24:87:96:f9:fd:ab:89:8d:e9:e1:bc:a5:16:fe:30:
5c:6c:8b:d7:99:c4:a1:10:4e:8e:5b:3f:74:4e:cc:72:d3:a5:
92:0f:50:e1:76:6b:a5:03:df:3d:c8:ea:49:d7:0e:e4:e2:96:
87:fe:16:da:c2:39:9c:5e:60:1a:d9:65:38:b0:0e:a2:17:a6:
ec:2a:1c:51:22:f4:50:4c:d8:ef:7c:9d:1a:1e:6d:08:f7:89:
79:f0:14:cf:b0:87:d9:4e:1c:3a:65:d9:bc:2e:15:1a:81:05:
75:f5:f5:7a:5c:ab:fd:9e:42:2d:e5:c3:73:a7:18:1b:37:34:
a1:9c:5c:2b:fe:73:c6:67:97:4e:3e:b9:92:5a:48:dd:56:39:
b4:6b:e0:d8:fa:e0:8e:24:71:df:ae:3e:ba:a7:d1:7d:3c:d4:
64:81:61:20:4d:87:81:01:4d:ae:83:3e:ff:f2:58:b3:44:cf:
9d:60:a1:a7:24:82:77:c4:0d:54:b7:6c:e9:32:66:44:e1:40:
8a:df:8f:cb:5b:8f:5c:99:53:33:b2:70:32:ff:25:11:93:f9:
1e:a1:73:fb:ba:22:7d:27:92:ed:e9:67:89:67:97:3f:a0:19:
ec:a2:f5:5d:c4:40:dd:43:62:ea:14:61:9a:6b:9d:ac:77:66:
c4:78:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:34:48 2025 by rpki-client