Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W_lbGhCQOYAA6i3SSK_0rIjenIg.roa
File: W_lbGhCQOYAA6i3SSK_0rIjenIg.roa (raw, json)
Hash identifier: cs/QK3TMzpsYLC1ONSKo8w5QuPwj+NF0L/EuvewMWHM=
Subject key identifier: 5B:F9:5B:1A:10:90:39:80:00:EA:2D:D2:48:AF:F4:AC:88:DE:9C:88
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F42A7FD2CD86C13492DAEDFDCF0AB4287
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W_lbGhCQOYAA6i3SSK_0rIjenIg.roa
Signing time: Sat 04 May 2024 08:10:56 +0000
ROA not before: Sat 04 May 2024 08:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:a7:fd:2c:d8:6c:13:49:2d:ae:df:dc:f0:ab:42:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 4 08:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bf95b1a1090398000ea2dd248aff4ac88de9c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:0c:d9:fa:30:f1:9c:cc:ea:38:13:d2:42:
48:70:9f:2a:13:4d:5b:36:84:8c:ea:8e:76:00:45:
1b:02:49:96:c4:f5:3a:04:ea:dd:a4:b0:96:f8:7a:
31:c2:2f:be:ff:7d:9a:9d:e7:e6:c2:0d:4f:7f:52:
4f:60:25:d6:1c:0c:e2:f5:77:b9:49:f6:ae:2e:6e:
4b:89:fb:46:aa:11:bd:9c:41:43:a6:e9:42:47:df:
4f:34:04:75:4c:dd:b6:48:90:2c:70:32:92:2e:d6:
2a:67:98:7c:66:bb:33:af:0f:cd:41:7f:61:ad:d7:
10:ce:55:df:3f:66:41:b5:13:d1:23:da:09:2e:4d:
13:a9:61:aa:b3:8c:28:eb:c6:5d:f4:71:00:ba:97:
82:91:07:43:bd:6c:1f:51:98:33:5c:52:8f:57:ee:
f4:22:58:cd:bd:7a:ee:7c:3a:5a:63:98:7c:0e:64:
fd:da:e7:9c:65:37:fd:d5:27:a8:44:58:d4:da:03:
2a:37:97:53:c5:c7:35:c1:12:28:c3:96:cf:eb:96:
f0:49:41:f9:b6:eb:be:36:6d:52:08:11:55:9d:61:
28:f5:4a:53:ff:89:e6:cf:36:4b:29:86:c1:ac:24:
e9:e6:ea:e4:dc:fe:48:b1:da:e7:37:29:19:01:3a:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:5B:1A:10:90:39:80:00:EA:2D:D2:48:AF:F4:AC:88:DE:9C:88
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W_lbGhCQOYAA6i3SSK_0rIjenIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:bf:59:a7:a4:46:19:06:fa:e8:41:df:c8:eb:57:1a:3d:e3:
5b:43:cf:c7:c2:8a:15:4e:9d:aa:c3:a8:63:3e:76:27:b4:70:
24:fd:23:16:54:a5:e6:d3:9e:6b:c1:cf:c3:25:91:8d:43:e7:
66:b7:f1:78:a1:ae:7b:94:ac:3a:d1:1e:20:8d:aa:b8:d2:e3:
20:e9:26:83:ca:62:0f:a0:59:db:25:6d:fa:55:ac:3e:63:d7:
2c:c1:c6:37:19:70:1a:e8:29:d0:4b:d4:99:d0:bb:0f:5e:cd:
ce:69:3a:27:7f:ec:a3:55:8f:f4:f1:47:31:b4:d7:db:14:48:
60:84:7c:c3:7f:00:8e:2c:94:1d:55:e9:b1:b9:5e:6f:fc:aa:
23:ba:33:33:56:82:3d:86:e7:f2:de:53:fc:34:31:9f:2b:2e:
0e:b3:e2:75:17:3d:b9:68:1f:e1:cb:97:c1:ed:2f:cd:2c:d9:
38:64:34:74:a3:7f:96:13:b9:a8:37:1e:8d:72:56:4e:b3:ef:
9a:9d:86:d1:ae:74:9d:0a:ec:1a:56:3f:c5:43:9f:44:10:6f:
0c:fb:e4:eb:be:30:18:3c:e8:f3:49:c2:fa:9d:f6:0c:4f:cf:
3d:49:c3:52:3a:03:66:44:86:d8:bd:48:30:40:b1:af:aa:e2:
93:95:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:11 2025 by rpki-client