Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_Ou_wLzy7H2RkKwCV6MY9cHDC18.roa
File: _Ou_wLzy7H2RkKwCV6MY9cHDC18.roa (raw, json)
Hash identifier: UrcG5v1P+9oqDOIZ4FVjvYdA3FiGry7U++29yp0G1dk=
Subject key identifier: FC:EB:BF:C0:BC:F2:EC:7D:91:90:AC:02:57:A3:18:F5:C1:C3:0B:5F
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F2F8F8E5FE3CE753B94B2DE1C529E9FD4
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_Ou_wLzy7H2RkKwCV6MY9cHDC18.roa
Signing time: Tue 30 Apr 2024 15:11:28 +0000
ROA not before: Tue 30 Apr 2024 15:11:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:8f:8e:5f:e3:ce:75:3b:94:b2:de:1c:52:9e:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 30 15:11:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcebbfc0bcf2ec7d9190ac0257a318f5c1c30b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:4e:10:b2:91:ec:ff:8e:3b:56:46:1a:08:
a4:2b:15:0c:0a:b3:3a:6a:32:5b:b5:be:d2:8a:d1:
49:e6:29:bf:74:78:ba:db:a6:56:96:4e:fc:54:90:
91:92:3a:6f:a9:82:03:db:49:14:e8:99:1a:97:d6:
8a:f1:1b:db:e4:f3:1d:67:0c:6b:a9:c8:df:c2:77:
7a:65:ef:e2:62:94:7e:bf:81:e8:9d:7f:32:b5:38:
5e:5e:a4:2f:d8:9f:a9:78:38:b3:42:57:30:3b:71:
e6:e6:3b:13:d0:27:23:51:13:59:5a:0c:dd:95:6f:
a9:dd:2b:78:2d:a0:da:d9:6f:9a:9c:b4:c1:63:4f:
1e:ad:ea:c0:18:36:6f:72:1c:80:d4:da:34:d1:be:
df:49:aa:a6:0d:e4:3e:9c:bc:9d:f4:6b:aa:a8:14:
46:35:9e:7e:96:b4:00:c8:d2:98:70:4a:5b:8a:a7:
c5:3e:b5:60:05:4e:9d:30:b0:4a:86:86:f6:28:14:
ee:71:e2:e9:70:47:54:fb:85:14:a7:97:14:80:6d:
18:ff:42:c7:98:55:05:e1:65:81:48:b1:81:25:77:
94:c7:9c:a6:b0:a9:84:4c:fa:c1:f3:12:fe:53:dc:
43:36:5d:15:9e:eb:8c:c8:f0:98:87:22:64:3c:81:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:BF:C0:BC:F2:EC:7D:91:90:AC:02:57:A3:18:F5:C1:C3:0B:5F
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_Ou_wLzy7H2RkKwCV6MY9cHDC18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ff:c1:78:c3:0a:05:f3:33:36:fd:75:29:89:3d:8d:74:cb:
44:74:a3:fd:f9:ae:80:e6:db:7d:7b:50:ea:b3:d6:d9:42:0e:
b1:66:fb:24:4b:e7:61:13:29:d1:41:5c:da:7e:89:d2:60:7b:
f5:dd:73:de:06:93:49:03:97:6d:fa:0e:7f:4d:29:c3:2d:ac:
1b:c1:30:2c:fb:b8:09:e1:22:84:13:12:6a:bd:d9:86:61:92:
f5:32:80:46:f2:6b:14:0d:ea:64:a3:f7:19:fa:80:29:80:74:
ce:e0:fc:8c:e7:db:99:db:b5:31:99:21:ed:e6:a3:7d:2d:6d:
17:f7:82:43:7b:03:c2:aa:97:af:9a:5f:44:fd:af:1e:7b:e9:
e9:00:21:89:bd:f5:de:7f:94:2e:9d:83:f6:01:bc:95:44:ca:
78:12:fe:d9:fb:5a:ea:c2:25:dd:63:3c:ac:2e:14:b9:5e:f2:
2b:34:f8:38:9c:a0:43:8e:50:d2:1c:fd:b2:df:cc:cf:b6:fc:
70:fa:45:0d:df:79:f0:09:16:4f:0b:d5:e0:de:7a:f7:49:1b:
51:c8:fa:8a:ac:8f:ec:0a:c8:80:08:10:06:9f:62:4d:14:97:
cf:5a:66:19:92:65:a7:87:aa:f8:04:e3:b0:30:32:2c:78:34:
c6:06:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org