Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_kZ7jPQuqvNxT_sj_GLiJRWTIcY.roa
File: _kZ7jPQuqvNxT_sj_GLiJRWTIcY.roa (raw, json)
Hash identifier: n2ot0I+h1DcfcILw8F+20JvCdlU8gKxa3oI9xc5MTR4=
Subject key identifier: FE:46:7B:8C:F4:2E:AA:F3:71:4F:FB:23:FC:62:E2:25:15:93:21:C6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F238B5CBD54B78E8C19C55095A6685A0D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_kZ7jPQuqvNxT_sj_GLiJRWTIcY.roa
Signing time: Sun 28 Apr 2024 07:11:26 +0000
ROA not before: Sun 28 Apr 2024 07:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:8b:5c:bd:54:b7:8e:8c:19:c5:50:95:a6:68:5a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 28 07:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe467b8cf42eaaf3714ffb23fc62e225159321c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:0c:28:1b:80:7c:29:31:0b:d5:bd:7e:c2:
e7:6f:b2:e9:6a:15:2f:07:1b:91:d1:f3:10:ad:4d:
86:fe:bd:45:d0:6c:c8:4a:ba:bc:50:82:e9:aa:31:
d3:58:15:e5:14:f2:2c:2b:9d:9d:0c:e0:da:27:ee:
3e:81:88:0e:38:62:b2:c6:21:9f:aa:97:f0:ed:54:
da:91:c0:2c:be:bd:59:c3:57:4f:ab:a6:8f:44:3e:
98:5e:26:58:85:b2:28:ed:14:7b:2b:d3:8a:7b:b9:
2a:3e:f8:ba:75:e7:9b:06:63:48:08:ba:c7:34:c3:
20:1f:1c:b3:15:34:57:20:c5:b2:2b:0e:fa:c3:28:
da:83:54:55:46:ed:8c:9e:a7:93:45:93:13:74:56:
5c:32:82:15:a1:f9:58:70:80:e8:8f:d5:80:da:33:
46:48:5a:00:26:c9:77:e3:a9:37:ab:5f:4e:c7:cd:
10:07:08:c5:2d:a8:23:58:2e:f1:50:87:77:b9:8d:
93:9f:20:4e:5c:e3:5f:85:6e:c7:1a:13:84:b3:39:
1a:bb:47:bd:8a:7a:24:40:51:03:ea:b3:39:15:a6:
89:bd:b9:ee:66:32:dc:21:7b:63:2d:59:b4:5f:a8:
8d:c1:95:73:2d:f8:5e:14:ca:ef:79:bc:c3:f7:9c:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:7B:8C:F4:2E:AA:F3:71:4F:FB:23:FC:62:E2:25:15:93:21:C6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_kZ7jPQuqvNxT_sj_GLiJRWTIcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
9d:80:70:50:f4:61:59:18:7a:8f:e8:68:43:2f:39:4b:ae:af:
23:54:b7:7f:a1:e7:cf:61:77:8c:10:09:09:2e:43:e7:21:22:
ca:16:6f:ac:5b:c8:1a:ad:e2:af:39:f8:6a:f8:d4:97:30:33:
99:a6:e6:45:4f:8e:95:72:90:cf:5b:b4:3a:d7:4a:fe:fa:b5:
3e:77:70:60:f0:ce:b0:f6:74:17:b1:e8:d1:0b:91:e5:01:df:
18:f8:15:68:d0:b6:09:03:ae:a7:15:2c:06:4c:1c:78:bd:ae:
cc:90:3a:24:3a:c9:37:1b:5f:49:ce:53:55:83:f9:02:f3:e8:
24:4f:bc:7c:c1:59:f1:b7:45:59:53:57:7e:c3:7f:c3:18:94:
d0:0e:a3:86:d3:53:2c:19:53:1f:5c:84:40:a8:9c:f0:cd:87:
36:e2:f1:d1:ca:6e:b1:14:d5:97:5d:f7:17:42:1d:e8:37:cb:
82:76:39:69:97:b5:11:38:f2:78:2d:7e:7c:c5:c5:2f:e3:f2:
3d:ca:89:21:de:ca:8d:16:68:c8:16:e4:81:42:fa:f7:40:a6:
e4:0b:b1:19:5f:d4:80:03:01:13:5a:e7:cc:9a:aa:f9:a6:38:
41:7b:d1:b5:1a:d7:e0:5f:de:b7:f9:bf:28:4b:53:85:1a:6f:
b5:a5:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:15:02 2025 by rpki-client