Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aTCg2M4KWfVAPtHRHKhWE7JFo4Y.roa
File: aTCg2M4KWfVAPtHRHKhWE7JFo4Y.roa (raw, json)
Hash identifier: DkhIsihMwUmxx6DlxDZpKaFVb0jGmarmtFb7/cFWNUU=
Subject key identifier: 69:30:A0:D8:CE:0A:59:F5:40:3E:D1:D1:1C:A8:56:13:B2:45:A3:86
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4535ADF7145B9BC682F33475FF2B1E61
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aTCg2M4KWfVAPtHRHKhWE7JFo4Y.roa
Signing time: Sat 04 May 2024 20:04:56 +0000
ROA not before: Sat 04 May 2024 20:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:4534:fbaa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:35:ad:f7:14:5b:9b:c6:82:f3:34:75:ff:2b:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 4 20:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6930a0d8ce0a59f5403ed1d11ca85613b245a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:3c:c6:f5:88:92:07:5e:35:8c:7b:c1:10:
6f:f7:05:02:13:36:68:80:4d:c6:34:01:a4:fc:0c:
c7:e1:51:65:c5:0e:d2:bf:e4:be:91:f8:6e:0c:b4:
78:6d:f6:94:f1:ee:84:b2:11:bf:45:41:b2:84:c9:
32:14:50:5f:4d:3a:d2:cd:13:d4:07:d2:2d:9e:85:
e2:95:42:3b:36:b0:93:b2:cf:41:ee:f1:75:ae:6e:
36:bb:f8:9e:6e:dc:c3:78:ed:52:d1:e7:94:d3:33:
52:d6:c9:87:0d:3a:8a:ff:7a:42:8d:52:fd:6e:d9:
01:2d:c5:d7:21:c5:ea:24:22:08:96:16:e1:7a:4c:
bc:8e:85:1c:e7:8f:7c:90:f1:d4:10:67:30:48:ce:
9f:8d:b8:2d:87:f2:bd:d8:03:64:15:e2:72:9f:50:
71:2c:f3:86:80:e1:a2:ce:59:1a:16:85:ac:57:69:
c2:b2:aa:e1:91:e0:9d:9b:e0:a4:27:a4:62:52:0f:
fc:a2:7f:24:b9:e6:34:40:e4:11:8e:53:ef:45:53:
3b:fb:cd:1e:9c:24:11:d6:91:1b:f5:92:a3:b5:25:
85:9b:99:b3:30:31:e0:49:d3:58:56:d1:1d:95:fb:
de:68:e2:f4:87:c1:13:5b:b6:44:32:94:99:7c:85:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:A0:D8:CE:0A:59:F5:40:3E:D1:D1:1C:A8:56:13:B2:45:A3:86
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/aTCg2M4KWfVAPtHRHKhWE7JFo4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:1e:19:fd:08:ff:02:50:8d:29:88:9d:ce:4c:23:a2:9b:81:
f8:cb:df:73:1d:f5:c4:aa:e4:95:52:40:c0:9f:f4:c0:98:b1:
92:2b:7e:2b:5e:8f:b7:93:c6:4f:1c:30:1a:09:97:95:9d:9c:
39:03:e1:0f:62:d1:b9:dd:a1:6c:14:c2:7b:d5:8b:b5:8d:01:
cd:89:04:78:84:0f:e7:33:53:50:ac:aa:43:bc:af:30:71:68:
77:c6:ac:67:7d:c4:63:4b:06:82:66:58:0d:4d:96:41:bb:5f:
23:7f:04:4f:92:d1:87:e2:7d:bd:0f:49:a4:5e:a9:fa:d1:a3:
f5:56:c5:60:6a:fa:41:05:8b:21:0e:37:90:49:ee:63:a4:48:
e9:d3:a0:fa:17:2a:d9:9e:cb:9a:20:dd:fd:24:27:31:1c:14:
96:86:67:37:ff:f4:3a:ff:65:3a:e1:11:03:a8:e2:e1:2a:7e:
ff:4c:52:38:c2:20:e9:c4:ca:be:0c:62:b1:cb:02:78:37:73:
3c:63:a6:03:d4:7c:d0:d5:7d:e0:46:4f:9c:b6:a2:7a:ed:94:
d0:56:31:21:50:dd:e2:f5:94:02:f3:ba:8a:98:3e:b3:b7:1f:
5d:2f:d8:16:75:65:9f:5f:da:57:9c:a5:55:bd:f8:cd:f7:c5:
e5:8c:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org