Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aB-bIZt8DQljDEYmG9hZGzqqIjY.roa
File: aB-bIZt8DQljDEYmG9hZGzqqIjY.roa (raw, json)
Hash identifier: fDPCmosa1vZhp7a6Tlj9f1OZqvB4c/OR60Q6FRlCxQU=
Subject key identifier: 68:1F:9B:21:9B:7C:0D:09:63:0C:46:26:1B:D8:59:1B:3A:AA:22:36
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F588A1A32AA7789F213633373BF014F98
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aB-bIZt8DQljDEYmG9hZGzqqIjY.roa
Signing time: Wed 08 May 2024 14:09:56 +0000
ROA not before: Wed 08 May 2024 14:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:8a:1a:32:aa:77:89:f2:13:63:33:73:bf:01:4f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 8 14:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681f9b219b7c0d09630c46261bd8591b3aaa2236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:4b:b6:35:b1:1c:7e:51:a2:e5:8c:4f:2c:
16:50:eb:7d:fd:63:45:b5:1f:98:c5:a0:da:4d:41:
7e:75:0b:4d:ae:3e:99:38:c6:fd:2a:8b:7a:3a:0d:
1e:cb:cf:de:0a:cb:a1:51:7a:b2:3f:4e:68:88:1f:
e9:76:a0:7e:8b:09:6c:be:2d:61:c5:61:98:d9:85:
47:d6:6a:6a:11:2d:b5:dd:40:70:54:e1:ed:67:55:
11:82:52:3a:ad:d4:44:95:66:34:55:72:77:0b:78:
76:26:51:77:0e:5a:19:f5:6c:29:cb:e4:d7:9a:87:
ac:38:d5:0c:98:19:91:8c:db:c0:12:4c:41:6d:54:
ff:19:93:6d:0d:d9:87:54:ae:a4:3b:5b:03:86:e1:
f2:af:0f:d7:57:df:b9:57:5c:32:d2:07:35:20:d5:
51:74:c2:b7:5f:65:22:ca:50:f9:82:46:c5:1e:4d:
07:2d:d8:16:e6:55:db:cc:7e:23:de:bb:c2:1f:ec:
66:55:4f:b1:fa:0e:1d:76:f1:37:1c:52:c8:c8:11:
ec:8e:9d:0c:2e:6b:65:1a:0c:9b:6c:76:23:d5:45:
8e:70:f9:f8:f7:ea:cf:ac:94:c7:1c:c0:dc:0d:5e:
3e:84:f4:9c:74:27:03:e7:a0:c8:79:5f:a1:2f:0c:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:9B:21:9B:7C:0D:09:63:0C:46:26:1B:D8:59:1B:3A:AA:22:36
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aB-bIZt8DQljDEYmG9hZGzqqIjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:ba:56:f4:4e:0d:d6:eb:4c:4b:ac:77:2f:4d:10:fe:8b:b6:
a8:cc:36:94:3a:8d:56:35:dc:f6:be:a8:7d:f4:49:b6:e0:e2:
e4:08:9a:5b:71:df:37:4f:4f:95:50:1d:03:ad:d4:c4:36:bc:
f9:29:ae:e8:c2:2d:54:2e:79:fd:69:ab:f1:74:4d:9b:80:d8:
ce:98:d0:43:10:ae:b7:d6:5b:56:c7:3a:8e:b5:58:6f:d3:87:
8b:e9:ad:4c:3c:79:2d:65:40:9e:f9:ee:fb:2f:cf:72:8f:1a:
b5:06:fa:12:8a:2e:50:e5:25:6a:6e:39:e5:3a:ee:37:b1:73:
85:7d:dc:73:38:ef:26:5a:a9:4e:51:56:df:29:fd:af:b2:dd:
47:33:0d:0a:a6:d1:7e:e2:b4:b8:cf:a2:5a:f0:02:ff:82:f4:
09:75:54:e4:d7:82:89:67:0b:29:b8:71:ac:e7:62:09:d6:c5:
a2:cb:ab:16:b2:08:82:1a:49:3b:a7:1a:78:2d:42:8b:21:a8:
59:91:30:76:80:2c:d0:36:42:f7:fe:80:f4:fb:9e:08:80:40:
f3:48:e2:1d:ee:2e:60:f7:7b:8b:1e:eb:5c:b5:85:de:3e:23:
f1:5c:82:bc:11:4b:3c:a8:00:51:a1:9a:c6:2b:f5:aa:23:dd:
9a:ec:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:05 2025 by rpki-client