Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZnQbJHU-2wsmPXQTQuENGyiNYCM.roa
File: ZnQbJHU-2wsmPXQTQuENGyiNYCM.roa (raw, json)
Hash identifier: rkRL1eF57mBJi8Qwm+sSIUj4eCuNmTGlq574F2gJysQ=
Subject key identifier: 66:74:1B:24:75:3E:DB:0B:26:3D:74:13:42:E1:0D:1B:28:8D:60:23
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F71DC7A4CDD719EEECF11435D3C2C3D30
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZnQbJHU-2wsmPXQTQuENGyiNYCM.roa
Signing time: Mon 13 May 2024 12:10:25 +0000
ROA not before: Mon 13 May 2024 12:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:dc:7a:4c:dd:71:9e:ee:cf:11:43:5d:3c:2c:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 13 12:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66741b24753edb0b263d741342e10d1b288d6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:d7:78:21:b2:95:0b:42:27:50:4e:0d:a9:
d8:50:3b:9d:bd:4a:5d:39:37:fa:bb:04:00:fc:a3:
02:14:90:02:97:b9:4f:8f:3d:55:3d:e4:1a:f0:54:
d7:8d:c8:dd:86:ba:2a:40:aa:4d:fa:d5:b3:c8:4e:
e4:fa:e0:ff:49:cd:13:28:6d:59:ad:b0:98:a4:c5:
27:91:57:b6:5e:ed:53:03:77:82:14:f3:2c:e0:c4:
0c:95:a9:3a:0f:a0:72:95:bb:09:59:59:3d:e1:c1:
a9:5e:c6:d3:da:32:52:b4:b4:6d:3f:78:6b:cd:5e:
f6:94:21:77:e7:76:88:4c:b8:ae:ee:01:6d:c0:38:
7e:c5:1e:4c:5a:07:97:87:cc:73:c6:ba:04:10:1d:
05:b2:9e:ac:26:f6:42:19:7d:35:17:28:26:57:91:
70:76:ad:5e:69:93:73:36:50:01:ee:2d:08:1f:e4:
4c:9a:b3:26:61:80:3d:2b:5e:bd:e1:86:db:52:46:
05:e8:14:80:d5:0c:00:2f:6f:c8:3b:9d:5e:d5:73:
05:0a:bb:20:68:f9:95:03:16:6e:c3:24:ce:0a:a9:
73:18:ed:bc:f1:a4:60:d7:ea:2b:f4:d3:05:cf:24:
bc:75:d3:9c:d8:c3:0b:19:f8:e6:38:a9:53:8e:54:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:74:1B:24:75:3E:DB:0B:26:3D:74:13:42:E1:0D:1B:28:8D:60:23
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZnQbJHU-2wsmPXQTQuENGyiNYCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d1:5a:30:8b:30:27:3b:bf:fe:e4:59:5e:c8:95:1a:75:b9:
5b:e8:d8:e4:c3:b0:1e:97:94:d0:72:2e:2e:6d:45:10:4d:0b:
46:ea:a1:1b:c2:b4:ef:ee:c5:61:76:89:86:65:b7:30:44:01:
51:7d:a7:10:1e:6b:b3:67:9e:63:8a:03:39:ad:82:7f:0d:7a:
fb:cc:5f:ac:c4:d0:0f:bf:df:49:03:20:48:e4:f0:fb:49:13:
52:32:01:9d:80:a8:95:46:0b:8e:69:ee:b9:6e:7f:dd:8d:23:
75:75:5c:24:b6:ea:1d:f9:e8:e5:f3:fe:d9:c0:65:e2:f2:17:
a8:d5:7a:85:ca:02:61:22:4b:2e:d6:7b:3d:3a:d1:29:8d:04:
a2:bd:dd:f9:58:50:30:00:93:24:18:ea:b5:1e:e1:d7:e7:47:
76:24:9b:a9:56:a9:e2:e3:2e:f8:34:c9:d2:fa:80:7c:23:bf:
4f:d5:7c:fb:0b:e5:51:88:39:49:0b:9d:c4:73:75:96:5d:be:
ce:05:de:41:57:97:f4:f2:8a:95:6f:2b:a7:ad:1c:0a:7a:1a:
2d:f0:d1:dc:6d:c5:29:2f:37:15:f0:58:3c:ec:42:dc:40:c3:
d5:68:05:b9:5a:ee:19:2d:d7:87:db:26:0c:03:fa:1f:16:fe:
f9:57:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:24 2025 by rpki-client