Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dY1TU9iro0ZtjzJM-IVfvdaONFU.roa
File: dY1TU9iro0ZtjzJM-IVfvdaONFU.roa (raw, json)
Hash identifier: rdUCntp+7So7yx/k1deqbLxXamT/DY2La51m4BBXWK0=
Subject key identifier: 75:8D:53:53:D8:AB:A3:46:6D:8F:32:4C:F8:85:5F:BD:D6:8E:34:55
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F385C2F9BD33391FCB93B9E1FB32C5620
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dY1TU9iro0ZtjzJM-IVfvdaONFU.roa
Signing time: Thu 02 May 2024 08:11:56 +0000
ROA not before: Thu 02 May 2024 08:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:5c:2f:9b:d3:33:91:fc:b9:3b:9e:1f:b3:2c:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 2 08:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=758d5353d8aba3466d8f324cf8855fbdd68e3455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:f3:2e:d9:04:12:e8:be:e2:1b:f0:e0:68:
d4:b0:a0:5d:ff:16:89:7a:04:7e:15:18:70:5f:1c:
9b:0c:89:8e:a0:02:9c:e1:f8:93:39:d5:e8:58:df:
69:38:e5:2a:ac:a0:04:ee:42:93:fc:c3:24:7e:dc:
62:75:4d:5c:aa:f2:24:78:98:31:47:95:66:4b:05:
8a:6e:2e:3b:da:a4:0d:5b:29:25:75:62:d9:77:65:
a5:73:93:96:cf:6c:16:eb:70:ae:a7:b6:21:bf:f5:
30:8f:1f:d6:5d:a0:a6:a6:3e:fd:cb:e2:84:13:6a:
a6:3d:30:fb:2a:2e:22:cd:7a:6b:20:61:93:39:96:
b3:58:4c:7f:24:2e:33:15:91:c7:d8:ab:2c:0a:57:
16:c6:cb:1d:fc:7f:d3:f9:40:dc:d1:ee:1c:ff:5b:
b9:a8:d3:06:60:c9:9d:48:68:07:df:18:28:a1:97:
fc:be:22:99:19:3f:eb:72:59:e2:65:82:ec:af:79:
e1:5d:13:e8:41:51:3c:b2:2c:65:a3:25:27:ee:d0:
e9:1f:00:0d:94:6e:a5:19:c4:55:ae:6c:61:19:2a:
dc:1b:7f:85:cd:ac:b1:3c:b7:d9:f0:aa:df:40:a5:
cb:76:b0:58:78:2e:6d:e4:c0:83:ff:45:a3:4a:b5:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:53:53:D8:AB:A3:46:6D:8F:32:4C:F8:85:5F:BD:D6:8E:34:55
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dY1TU9iro0ZtjzJM-IVfvdaONFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:94:31:6a:7a:1c:d4:6e:71:4d:2f:33:c7:a3:87:99:d9:7d:
ef:21:6b:38:41:c9:97:0b:4d:34:9f:fe:fe:c4:91:83:2a:11:
13:4c:67:eb:9d:08:de:cf:97:7e:3f:79:38:85:b4:c3:cc:c2:
3f:2c:df:9c:95:28:45:aa:3c:54:62:c1:0a:f4:7c:1b:a9:ad:
57:49:71:bf:a5:8c:cc:68:5a:c5:e1:9f:b6:88:be:9e:08:5a:
b9:66:ca:7c:94:3b:6d:92:9d:4d:d3:cd:4a:b9:d0:5b:bc:f7:
4a:55:3f:cd:f1:38:47:28:56:2a:01:56:b2:be:86:54:ec:f9:
71:f8:e6:97:55:a4:dc:4d:03:ed:1c:a8:bb:6a:e9:80:f4:7e:
ea:4b:5b:4e:2b:29:c0:45:19:13:73:1c:b1:52:8e:7e:c6:1d:
7d:02:3d:a1:1e:4b:79:d8:82:b0:61:0e:18:2e:08:73:14:a1:
46:01:e8:b0:6f:06:01:ce:7d:36:df:b4:36:4f:e4:44:13:7a:
da:3d:9e:e4:a7:d9:f6:99:a2:77:50:2c:93:3a:84:99:3a:c8:
76:2c:66:0d:0c:c4:7f:ff:21:a7:79:45:c2:5e:d0:b6:c0:16:
ef:1e:55:be:20:21:69:d3:0d:4a:1c:d0:78:c1:e4:31:0b:9f:
1b:6d:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:33:28 2025 by rpki-client