Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dZhUrXlYJNn3iIDzNdB_PISCdcM.roa
File: dZhUrXlYJNn3iIDzNdB_PISCdcM.roa (raw, json)
Hash identifier: 6TUz8cqww4Xlbwg+Il4SowxzXOl6GAZhY8k8poW9YCs=
Subject key identifier: 75:98:54:AD:79:58:24:D9:F7:88:80:F3:35:D0:7F:3C:84:82:75:C3
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFBA2B7DDFFB698E27E0BF1661701EA54
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dZhUrXlYJNn3iIDzNdB_PISCdcM.roa
Signing time: Sat 20 Apr 2024 13:12:08 +0000
ROA not before: Sat 20 Apr 2024 13:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:a2:b7:dd:ff:b6:98:e2:7e:0b:f1:66:17:01:ea:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 13:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759854ad795824d9f78880f335d07f3c848275c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:3c:a8:0f:14:35:b7:6e:ee:c6:53:31:55:
aa:7a:4b:a7:81:ee:b9:bb:f3:75:74:d8:10:01:ce:
57:3f:5a:ea:07:21:83:a1:95:57:9a:e3:b7:9e:ff:
73:83:f3:4e:8a:00:eb:17:50:da:21:02:5d:ba:fd:
ce:ba:0b:1c:22:b1:88:ed:b6:90:44:76:25:6f:b4:
72:5e:46:96:3d:c7:8b:45:9c:b2:77:da:12:d9:07:
e9:b1:15:c3:73:8d:81:12:e3:41:23:6c:ae:e3:a8:
6e:ea:b5:52:d1:ea:45:20:d3:d0:f1:a0:02:59:cd:
8c:22:ba:e1:3a:cb:96:de:7b:59:22:e1:9a:ac:8f:
59:a4:3e:4f:a7:43:36:0a:e8:32:6d:2c:99:85:32:
7c:3f:2a:e8:ae:03:14:f2:92:e8:08:d1:cc:b5:c9:
52:b8:fd:82:be:83:80:b4:1f:aa:f7:7d:bc:86:63:
f2:48:da:90:0f:58:94:b5:88:e7:e1:a7:e4:68:5f:
93:c0:d0:9b:4f:c3:5b:49:5f:55:0f:ba:8c:9f:ab:
4a:4a:5d:5b:6b:0d:63:72:dc:f7:a0:dd:96:09:a2:
e6:a6:a8:9e:c6:08:a8:a9:a7:65:7d:81:26:f0:3e:
27:30:5b:32:b2:fa:bc:73:d5:c5:c8:5d:d5:05:2d:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:54:AD:79:58:24:D9:F7:88:80:F3:35:D0:7F:3C:84:82:75:C3
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dZhUrXlYJNn3iIDzNdB_PISCdcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
16:bd:21:23:40:e3:e2:e7:a6:31:76:30:1f:37:ef:be:87:c8:
f0:8d:2e:8c:3a:3e:0f:3e:bd:a7:f0:67:3a:12:da:38:b7:2e:
9d:35:cf:21:a5:24:ab:96:6c:0e:2e:75:f0:e4:37:16:5d:be:
33:58:d9:fd:19:ce:2c:fe:4d:90:17:13:ba:a6:fd:33:7d:8d:
ed:b4:d9:07:dd:74:2c:7c:cf:67:73:48:5d:7b:e8:95:e7:67:
fc:fd:a7:d9:32:07:23:a2:ef:d9:67:e8:7b:fc:73:36:1f:9e:
0a:2c:a2:e7:ef:c0:32:98:b7:a1:17:28:0b:07:29:39:8c:fa:
97:8e:62:e8:9c:bf:ab:47:35:64:0c:e0:5d:37:c8:90:d6:f8:
a9:f2:4d:1b:65:dc:21:b1:c0:90:02:22:b4:eb:d7:9f:b6:55:
bd:e0:f5:97:8d:1f:d9:60:8e:11:fd:5e:e8:d7:77:f2:c4:92:
ef:f2:9f:2d:23:90:bd:aa:42:f5:84:ab:ed:d7:9f:f3:55:18:
17:0c:1f:29:e8:a5:9d:36:89:68:05:10:95:95:45:bd:8f:f4:
d6:aa:dc:20:0f:65:cc:fc:4d:54:63:3a:b4:53:b8:a5:18:96:
cc:aa:f4:f6:94:48:f6:07:80:18:21:54:29:b1:4a:78:2c:17:
f7:60:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:55 2025 by rpki-client