Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa
File: WuQS76VAKJAB81QGW8hV13cqNSg.roa (raw, json)
Hash identifier: Q5f5TOlmcOCK/05DfE4LkUMTkzQvJMZZuNzH51U766E=
Subject key identifier: 5A:E4:12:EF:A5:40:28:90:01:F3:54:06:5B:C8:55:D7:77:2A:35:28
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA7F32BDF7702F54B27A34791CB3FC2B0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa
Signing time: Fri 24 May 2024 00:14:42 +0000
ROA not before: Fri 24 May 2024 00:14:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:f3:2b:df:77:02:f5:4b:27:a3:47:91:cb:3f:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 24 00:14:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ae412efa540289001f354065bc855d7772a3528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:8b:43:72:7e:17:1f:2f:be:b6:f4:fd:6d:
23:08:ed:a8:fe:aa:b0:96:b1:66:ad:d0:9d:23:35:
46:b9:89:c1:38:10:cf:ed:82:0d:aa:69:8a:2e:f9:
5d:7f:7c:86:a1:8b:d0:7e:61:f3:bc:3a:6a:e7:eb:
e1:93:3c:8a:83:92:13:05:cc:fb:60:85:50:68:2b:
e5:9f:e2:53:ed:78:ce:8a:c2:e9:3c:b0:90:ed:47:
d6:54:df:c1:b0:aa:d5:16:7c:62:c0:3a:2a:c4:9b:
79:89:f4:4b:53:e9:62:00:8b:75:b8:99:4f:cb:4f:
eb:ba:1b:e9:bc:a8:df:c3:0c:9f:9b:b4:b8:c7:7f:
7f:f2:ac:55:93:e9:53:c9:48:a1:9a:df:7a:5c:f5:
f9:4b:23:65:f3:34:11:e2:14:67:af:2e:54:b8:9a:
ba:33:0c:e8:1c:28:59:9c:f1:b3:07:64:10:20:25:
47:a0:8e:4f:f9:f0:b1:41:c4:b7:f2:82:6c:26:57:
41:2c:6e:19:64:6c:e1:d7:bb:75:f4:77:6b:87:79:
f2:35:2c:7c:ab:81:6d:82:2e:67:b9:91:44:12:4e:
e4:9f:ee:a3:d3:5b:38:47:f9:64:d2:9d:16:bd:1a:
70:96:47:f8:01:1f:56:4f:fe:b6:48:e6:03:ac:35:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:12:EF:A5:40:28:90:01:F3:54:06:5B:C8:55:D7:77:2A:35:28
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:cd:fb:ba:14:aa:ba:a9:ed:e9:fb:aa:d0:fa:40:49:e8:a3:
45:8b:08:f6:a5:72:b4:ce:17:56:c4:bc:10:53:27:d5:15:74:
b4:9f:3c:d3:5e:b7:1c:9a:5d:08:22:d2:95:92:24:2d:e2:3b:
17:97:cd:69:02:61:c2:c1:e9:74:73:6c:e2:db:00:72:c3:1b:
cf:26:87:69:d5:4b:8b:d0:d8:52:0c:71:00:9d:74:77:44:3c:
c2:11:11:ed:a6:47:b4:10:20:0e:d7:36:fb:a7:e0:7b:39:67:
94:0c:5e:92:a5:68:a9:9e:02:d6:ed:67:2d:65:22:83:cd:1e:
51:3c:d2:7e:c3:de:fc:85:16:7a:20:b1:0a:f2:4c:6e:e5:71:
06:6b:2b:47:ee:1f:d9:2e:21:b2:b5:7e:65:66:d7:97:e9:69:
7f:72:f8:79:c6:bd:49:24:46:b1:53:f9:a6:75:ea:cb:b3:29:
18:ac:40:e8:6c:a6:38:01:6d:43:03:4e:e5:41:91:84:70:3a:
24:4f:00:9b:2e:0e:62:b4:19:25:0c:3c:bd:bf:91:4a:ec:81:
57:2d:88:21:cb:62:1e:01:2e:af:b0:bd:5d:6c:6c:6f:64:57:
8d:a2:95:f9:22:73:57:53:08:c5:f2:3a:d0:93:e8:0f:3e:31:
05:da:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:52 2025 by rpki-client