Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WEWIoW0H0Ykc5_LZiags6QHEqZs.roa
File: WEWIoW0H0Ykc5_LZiags6QHEqZs.roa (raw, json)
Hash identifier: szsGvLQZaMaT14pHML6QSLEAW3woVY4820FHfLCu2vI=
Subject key identifier: 58:45:88:A1:6D:07:D1:89:1C:E7:F2:D9:89:A8:2C:E9:01:C4:A9:9B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F64C61EF79FE6C6586B3E95C765EEF469
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WEWIoW0H0Ykc5_LZiags6QHEqZs.roa
Signing time: Fri 10 May 2024 23:10:56 +0000
ROA not before: Fri 10 May 2024 23:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:64:c6:1e:f7:9f:e6:c6:58:6b:3e:95:c7:65:ee:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 23:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584588a16d07d1891ce7f2d989a82ce901c4a99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:3a:1b:f7:e2:0e:7c:e0:95:c5:17:03:fc:
2a:7a:43:72:f6:e8:84:e4:ed:34:72:ed:35:d6:2c:
3f:47:35:aa:b3:db:71:01:db:99:80:71:30:06:a0:
27:e6:56:5e:b3:7f:6d:b6:b7:dd:83:f5:fc:49:3d:
48:b8:81:89:9c:82:25:9e:d9:97:9e:c0:4c:05:dd:
b2:17:bf:c0:04:b3:c8:1c:9b:82:54:07:5e:47:30:
15:da:c9:2c:5b:9b:1a:2c:67:72:16:a1:26:bf:cb:
b1:ff:3c:14:a7:7d:f5:02:f7:78:8e:ff:ac:e3:15:
ef:80:87:c1:5e:04:a8:35:cc:ac:d0:17:8b:43:31:
bf:12:c7:88:6c:71:54:c9:6e:dd:ef:9d:da:21:af:
80:04:18:e2:6e:09:f3:d4:8d:26:d2:63:d0:30:1d:
a9:19:87:c3:73:0a:93:cb:cd:55:ec:e6:8e:67:d7:
8c:4c:d8:d5:c8:27:00:66:60:3c:b6:b6:d4:fc:5b:
ce:49:db:4c:04:4a:6f:5c:97:dd:aa:e7:3c:5e:d7:
34:17:c8:78:3b:e0:b2:e9:b9:66:ba:05:bc:4b:94:
66:1a:a8:c4:01:ac:ad:d9:22:b4:1f:a1:2c:a1:19:
15:6f:4a:a6:c8:ab:7b:2e:c4:6a:9e:68:f3:9c:1a:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:88:A1:6D:07:D1:89:1C:E7:F2:D9:89:A8:2C:E9:01:C4:A9:9B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WEWIoW0H0Ykc5_LZiags6QHEqZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:da:1d:f4:f9:12:fb:27:c6:b4:35:11:19:6a:c1:13:c3:2d:
e6:5b:4d:c4:60:2b:42:72:ac:87:f6:27:be:e2:4b:e1:40:d0:
5e:01:ec:f5:5a:f8:5b:e5:fc:14:91:92:19:64:8a:a8:d9:99:
2f:e0:d3:14:82:18:b5:0a:0e:a1:c5:33:32:f1:25:9c:05:87:
6b:fc:90:f5:53:18:4c:b8:85:29:85:69:d1:b0:7b:b0:8c:b3:
a6:70:fa:7a:8f:36:db:e1:20:b3:ac:0b:22:d5:bd:a0:01:78:
33:fb:95:30:7f:59:74:d9:c5:1d:fe:d4:48:b0:23:ee:e0:25:
13:75:1c:9b:c6:03:d8:f3:98:df:57:fc:85:d8:d3:3b:38:c8:
81:21:57:13:e6:4e:94:80:05:ba:1a:b6:60:6c:3b:f2:09:64:
2c:75:38:43:f8:64:a1:d1:66:b0:d9:4e:85:8b:0a:01:25:48:
20:11:53:26:d3:45:4c:c7:c9:3f:b4:47:e9:4a:52:f3:4c:00:
ef:ba:21:94:ba:cd:4d:c3:90:08:c8:5e:f8:87:98:19:63:6f:
1a:a0:31:49:a2:b7:5b:f6:82:dc:9d:52:04:12:65:f5:94:e5:
52:bd:51:71:da:8f:85:03:89:94:df:85:d0:7c:76:8f:78:55:
c2:60:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:02 2025 by rpki-client