Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZkcgMA1zlOwxJYYE3Wqc7EKIpoo.roa
File: ZkcgMA1zlOwxJYYE3Wqc7EKIpoo.roa (raw, json)
Hash identifier: AIEo2V5QgiNCvSe3qgfCPMar4Qzl9Ql+fuM1C7UKvEE=
Subject key identifier: 66:47:20:30:0D:73:94:EC:31:25:86:04:DD:6A:9C:EC:42:88:A6:8A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7BBB5586D5435EDB3EA667714616E3BE
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZkcgMA1zlOwxJYYE3Wqc7EKIpoo.roa
Signing time: Wed 15 May 2024 10:10:25 +0000
ROA not before: Wed 15 May 2024 10:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:bb:55:86:d5:43:5e:db:3e:a6:67:71:46:16:e3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 15 10:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664720300d7394ec31258604dd6a9cec4288a68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:e0:a4:fe:25:2c:cf:c5:79:ee:6a:61:f0:
73:99:96:6e:c9:ad:31:5a:a1:4c:a7:92:5d:ea:2d:
65:dd:2d:93:3c:86:2d:96:17:d8:2c:37:6b:f4:25:
eb:10:51:0f:0d:90:f1:6f:b2:a2:c2:ce:39:0f:27:
92:fd:5d:cf:9a:40:ed:9b:2c:00:85:38:4b:db:46:
7a:ab:a0:52:e5:41:ea:28:18:47:03:ab:20:3c:38:
96:2a:b3:1b:8d:4d:80:d5:4c:07:5d:f6:c9:eb:fe:
4a:ca:d9:90:86:ef:ba:a8:27:58:51:a2:2a:19:ea:
44:04:36:a2:44:0f:b0:71:9c:59:e0:b7:27:86:8a:
53:be:47:60:60:70:e6:c7:ba:da:b3:e3:df:67:c2:
46:c2:da:ca:46:42:9c:32:6e:8a:4c:35:a9:84:36:
25:b2:9e:69:3f:c3:3c:0d:b6:d0:63:81:0a:08:a0:
cd:35:3a:62:f6:30:82:a3:03:a9:6f:4b:6f:3b:81:
c1:85:bc:2e:7c:91:6e:9a:73:07:41:18:8d:b3:6f:
1a:62:2f:25:11:29:41:41:a7:51:e7:c1:3e:41:30:
5a:6b:fd:9e:9f:6d:89:82:f6:5b:4a:18:1f:23:72:
78:03:9a:df:4c:58:a0:ae:1e:b7:b0:02:13:6f:59:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:20:30:0D:73:94:EC:31:25:86:04:DD:6A:9C:EC:42:88:A6:8A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZkcgMA1zlOwxJYYE3Wqc7EKIpoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:56:ee:a8:12:0a:af:d7:04:a7:b0:77:f2:03:94:07:cd:9b:
52:ae:11:49:73:77:76:12:2d:05:1e:f5:0e:74:87:4c:ea:68:
b0:c5:35:f9:b4:a8:a8:97:8c:33:f8:8b:c7:70:e1:6a:6f:a8:
c3:dc:3b:42:8f:d1:91:2e:d1:73:19:b0:1f:46:08:bc:ed:7a:
ef:68:38:d1:bb:dd:ca:08:10:e1:9b:be:cf:7b:e2:d2:64:ff:
00:6e:60:f5:de:8d:44:58:1c:4a:8f:ee:52:30:50:99:d0:f1:
87:9b:31:4e:de:37:4c:09:58:fe:f5:41:ce:9b:1b:c2:b9:16:
e5:c3:c2:16:dd:06:91:3e:f4:22:6d:87:b0:ed:12:88:a0:13:
31:d2:47:3a:1f:7c:35:bd:af:2c:b5:f4:36:07:dd:9a:fe:42:
bb:99:6b:e3:11:13:0a:a3:10:ae:5f:ed:c4:49:ef:1f:0e:7b:
36:7e:4f:dd:6c:b4:ad:10:71:68:e9:b9:14:0b:00:ee:e5:86:
c6:d4:9c:d9:2f:e0:6d:d4:aa:e2:47:85:23:27:85:b0:bc:80:
7d:ee:db:57:3b:33:77:35:3d:d9:52:a8:ce:23:16:d9:a9:84:
6c:28:4c:15:48:63:61:13:73:46:f5:fd:e1:03:c0:a5:74:64:
5d:29:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:02:04 2025 by rpki-client