Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bkR7iI55czCUdL8En7iH6ZY8dM0.roa
File: bkR7iI55czCUdL8En7iH6ZY8dM0.roa (raw, json)
Hash identifier: sW9hGOlFUiO4Q7ngxa4BvZBSF6oe7g/6+NaEtKvS+kw=
Subject key identifier: 6E:44:7B:88:8E:79:73:30:94:74:BF:04:9F:B8:87:E9:96:3C:74:CD
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8A84B89970550D1CF00D21E58BBA6D85
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bkR7iI55czCUdL8En7iH6ZY8dM0.roa
Signing time: Sat 18 May 2024 07:05:04 +0000
ROA not before: Sat 18 May 2024 07:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:8a83:f47f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:84:b8:99:70:55:0d:1c:f0:0d:21:e5:8b:ba:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 18 07:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e447b888e7973309474bf049fb887e9963c74cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:41:58:9a:f1:98:82:01:94:bf:f6:c6:9e:
3d:5c:e6:7a:c0:10:57:16:75:5b:73:a1:15:83:fb:
94:f4:9e:4c:6a:f3:3c:33:85:7d:03:02:b2:d4:40:
d1:dd:6f:49:68:6a:d9:5d:45:6f:a5:57:c2:11:26:
52:21:80:1b:fe:ec:c6:d4:28:74:60:0f:f6:22:96:
c8:81:69:e7:24:ea:09:ba:08:3d:da:c3:22:cd:2a:
ea:8a:9e:f0:33:53:7b:55:42:23:c7:b6:29:25:58:
a8:fe:35:10:1f:fd:68:54:f6:7a:88:3f:4e:2e:04:
af:c6:44:f3:1f:e0:c5:58:3e:53:08:32:c1:31:00:
ca:09:28:34:c2:1f:28:b7:d1:0e:c3:ef:76:c5:60:
1f:24:bc:f2:e2:ca:64:6b:c7:3c:bb:2e:85:1d:d8:
0b:48:b5:e8:4f:7b:d3:ac:16:68:03:6c:0a:b9:3f:
3e:d3:0c:86:ba:d5:a2:20:7b:0f:ab:3f:f7:e3:af:
92:62:88:47:51:58:95:de:24:17:7f:57:9c:50:1a:
69:9d:f6:df:7a:b9:29:ff:21:51:6d:ec:94:17:97:
77:67:e0:5d:87:28:ca:fc:d3:97:38:ba:ae:e4:d3:
ee:49:58:90:5a:4e:64:85:eb:c9:88:78:12:9a:d3:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:44:7B:88:8E:79:73:30:94:74:BF:04:9F:B8:87:E9:96:3C:74:CD
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bkR7iI55czCUdL8En7iH6ZY8dM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:cb:fc:e4:a6:f6:fb:fd:3f:30:1a:c2:16:a8:a4:04:1c:6b:
11:63:63:62:9b:31:c0:9c:1e:a4:61:7f:ef:cb:55:77:04:36:
86:41:41:bb:be:b2:de:f5:57:28:9b:ce:33:03:00:92:07:6d:
a5:c3:85:7d:ec:b2:da:d2:3c:43:65:ad:af:3a:87:f4:cb:10:
77:d9:60:ed:9c:8c:37:55:54:4e:13:96:9c:6e:cc:27:dc:4d:
df:0f:b1:87:71:d8:e9:3d:73:6d:2d:5d:f2:ea:a9:2c:e4:92:
56:18:7a:03:ee:66:3d:59:dc:9a:07:89:76:bf:b6:ac:5a:25:
ab:15:0a:68:98:52:0e:ca:50:e0:87:11:c2:95:1a:2b:a9:32:
92:89:94:1a:e9:23:ba:2c:79:a0:f1:ba:1d:54:10:c9:19:3d:
16:2f:e3:f3:48:4e:5d:49:a5:54:60:a6:45:b0:5f:0b:b9:12:
c1:dc:02:d9:45:af:27:71:5b:3e:c0:31:c6:e0:69:f1:46:38:
b8:9b:ba:8b:40:d6:d0:cd:34:2c:54:18:19:b3:1e:d9:4e:fa:
40:21:8d:91:e3:51:8c:7c:f3:02:97:8d:31:7d:29:21:57:c4:
42:1d:a1:eb:a0:35:1f:61:33:0e:cb:cc:7f:97:05:cb:f1:bd:
cd:8b:3e:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+KhLiZcFUNHPANIeWLum2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE4MDcwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQ0N2I4ODhlNzk3MzMwOTQ3NGJmMDQ5ZmI4ODdlOTk2M2M3NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlENBWJrxmIIBlL/2xp49XOZ6wBBX
FnVbc6EVg/uU9J5MavM8M4V9AwKy1EDR3W9JaGrZXUVvpVfCESZSIYAb/uzG1Ch0
YA/2IpbIgWnnJOoJugg92sMizSrqip7wM1N7VUIjx7YpJVio/jUQH/1oVPZ6iD9O
LgSvxkTzH+DFWD5TCDLBMQDKCSg0wh8ot9EOw+92xWAfJLzy4spka8c8uy6FHdgL
SLXoT3vTrBZoA2wKuT8+0wyGutWiIHsPqz/346+SYohHUViV3iQXf1ecUBppnfbf
erkp/yFRbeyUF5d3Z+BdhyjK/NOXOLqu5NPuSViQWk5khevJiHgSmtP9swIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG5Ee4iOeXMwlHS/BJ+4h+mWPHTNMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvYmtSN2lJNTVjekNVZEw4RW43aUg2Wlk4ZE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK/L/OSm9vv9PzAawhao
pAQcaxFjY2KbMcCcHqRhf+/LVXcENoZBQbu+st71VyibzjMDAJIHbaXDhX3sstrS
PENlra86h/TLEHfZYO2cjDdVVE4TlpxuzCfcTd8PsYdx2Ok9c20tXfLqqSzkklYY
egPuZj1Z3JoHiXa/tqxaJasVCmiYUg7KUOCHEcKVGiupMpKJlBrpI7oseaDxuh1U
EMkZPRYv4/NITl1JpVRgpkWwXwu5EsHcAtlFrydxWz7AMcbgafFGOLibuotA1tDN
NCxUGBmzHtlO+kAhjZHjUYx88wKXjTF9KSFXxEIdoeugNR9hMw7LzH+XBcvxvc2L
PgI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:13 2025 by rpki-client