Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxOXHDUXUXvB5-ZmN6L21HH5e8U.roa
File: ZxOXHDUXUXvB5-ZmN6L21HH5e8U.roa (raw, json)
Hash identifier: 6NVVlCCNCoVurvt8ade+l9e5CumL0SXXC3xrEdyJxaw=
Subject key identifier: 67:13:97:1C:35:17:51:7B:C1:E7:E6:66:37:A2:F6:D4:71:F9:7B:C5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FAA81C5A89CB4DA8A8360185ECE84F832
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxOXHDUXUXvB5-ZmN6L21HH5e8U.roa
Signing time: Fri 24 May 2024 12:09:42 +0000
ROA not before: Fri 24 May 2024 12:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:81:c5:a8:9c:b4:da:8a:83:60:18:5e:ce:84:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 24 12:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6713971c3517517bc1e7e66637a2f6d471f97bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:0c:c8:e8:66:94:8c:90:e6:6f:b8:46:f0:
52:43:2c:df:f0:0e:76:c0:00:b7:b5:f4:07:51:66:
38:fd:bb:ea:ed:55:67:e1:f7:98:a6:33:61:d4:b1:
ca:0e:fa:38:55:59:17:e6:d9:96:8f:1a:23:52:90:
98:80:5c:3e:77:a8:aa:07:fb:c2:1b:df:45:d2:db:
e0:b6:9d:9f:46:1f:f0:00:57:97:04:44:5a:a2:ad:
22:d9:30:dd:d2:61:a8:a2:0a:ca:f5:b9:f7:9c:50:
48:64:58:ea:5f:3f:41:2c:48:88:e4:39:db:92:40:
85:0c:7d:55:2b:0c:1a:a2:19:bf:03:5e:ef:4c:c4:
85:ec:c5:04:63:af:be:60:23:7e:58:81:5b:82:af:
7c:57:4c:3a:de:46:96:a9:83:46:b7:80:13:0f:4c:
7d:da:37:7c:8a:58:06:7f:3e:96:60:e0:49:29:c2:
79:16:79:8c:0b:d5:13:e5:4c:b7:da:ef:7e:52:02:
72:9c:b4:cd:63:dc:7c:d0:26:55:04:92:8e:b3:2b:
ac:d4:d6:3b:03:1f:3c:98:f6:e6:25:14:8f:a7:da:
ee:04:9a:90:67:40:a9:2c:61:f6:0f:3f:59:cf:a1:
d5:a4:61:2f:12:c7:7a:95:ad:68:ba:da:2b:71:fc:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:97:1C:35:17:51:7B:C1:E7:E6:66:37:A2:F6:D4:71:F9:7B:C5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxOXHDUXUXvB5-ZmN6L21HH5e8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ff:ff:f7:20:77:77:fc:b9:18:a1:6e:bb:c1:c6:4b:1d:95:
22:02:36:d5:16:9b:e5:37:c6:e1:f2:26:0a:7b:28:15:9c:c5:
c2:f6:90:bd:be:f8:75:71:e2:b7:46:21:ca:36:01:27:90:d0:
97:48:0c:6e:c5:de:b6:86:9c:80:6d:5e:8f:52:c8:61:d3:53:
fe:f0:db:b9:b5:ff:b5:4c:b8:17:39:11:eb:a7:51:2d:58:99:
fb:9b:47:69:ac:f8:ec:f3:ac:de:e3:c7:62:ed:d1:40:4e:92:
f3:9f:52:10:56:d1:b0:da:d7:34:b7:55:b1:20:88:8f:a8:6e:
00:e5:c6:da:a4:86:1b:6b:b2:21:0b:37:2b:f7:b3:b7:3e:e2:
43:9f:b6:7c:39:dd:2d:56:1c:fb:0a:1f:a8:43:cb:60:fc:0e:
03:79:08:b5:85:01:94:e6:dc:38:33:7e:75:be:7b:f2:bb:f6:
21:16:2e:aa:cc:70:36:f7:c7:00:60:55:29:fe:1e:46:9a:fc:
65:56:d6:84:ab:34:0e:dd:71:b6:a6:5a:93:e1:00:e3:2e:92:
51:c9:82:d5:e2:d0:41:6f:53:83:bf:cb:51:fa:d8:26:16:61:
7b:15:ca:1e:16:e1:82:d1:9f:78:fd:83:2f:6b:ef:f0:01:f7:
25:97:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org