Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fbCEnhYKTcRtL_aJkNEe3JDry-U.roa
File: fbCEnhYKTcRtL_aJkNEe3JDry-U.roa (raw, json)
Hash identifier: VRa2gEQt/axifNY4qA+RR61HN1q4jYvRTJCgSBfgTSc=
Subject key identifier: 7D:B0:84:9E:16:0A:4D:C4:6D:2F:F6:89:90:D1:1E:DC:90:EB:CB:E5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6F0E4350D642ED24A521F3880FA1B1F9
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fbCEnhYKTcRtL_aJkNEe3JDry-U.roa
Signing time: Sun 12 May 2024 23:05:56 +0000
ROA not before: Sun 12 May 2024 23:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:6f0d:7911/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6f:0e:43:50:d6:42:ed:24:a5:21:f3:88:0f:a1:b1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 23:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7db0849e160a4dc46d2ff68990d11edc90ebcbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:c0:26:1f:4d:c7:8a:25:ff:88:fa:79:2c:
54:c7:91:83:24:af:09:29:78:52:be:12:ed:fe:63:
53:59:7e:d8:f8:16:93:ec:56:44:fd:8c:e0:ba:d2:
0f:a2:ba:a2:8e:3c:f0:be:6a:a9:40:38:e0:2e:11:
3c:78:28:24:95:85:37:12:9d:b4:f6:a2:98:59:3e:
3d:8a:df:02:2c:c0:ef:e8:54:93:ee:7a:b1:0f:7e:
ce:6f:05:f8:4c:95:9d:dc:35:f4:96:29:76:97:89:
63:9e:eb:bb:e9:5d:9a:06:af:20:26:a7:27:85:e7:
52:4b:5e:d7:16:32:46:1f:e8:e7:24:3e:82:8d:50:
57:5b:6f:33:18:22:cf:16:48:0b:c1:45:d0:51:cf:
1e:fd:d4:02:50:80:4c:41:53:b0:0f:96:cb:4f:dc:
9f:c5:d0:d8:06:81:f8:2b:7b:9c:ad:9d:f4:66:78:
94:40:8b:b0:5a:0f:18:d6:8b:88:86:7e:bb:4b:d4:
72:ec:86:84:07:a9:e2:15:da:b0:27:ce:ee:da:78:
15:d2:ca:da:bb:b7:d3:b0:2a:b5:09:1e:60:d2:50:
eb:0e:bd:ad:b5:85:b2:6a:f4:86:0f:ee:d8:b2:b4:
0d:7d:a1:e5:b8:70:9e:ad:7b:9d:05:72:11:37:dd:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:84:9E:16:0A:4D:C4:6D:2F:F6:89:90:D1:1E:DC:90:EB:CB:E5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fbCEnhYKTcRtL_aJkNEe3JDry-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:4c:66:b1:60:ae:ba:c8:2f:4a:77:a5:07:19:36:6e:ca:b6:
2d:4a:49:3f:fa:59:6a:40:5e:c2:da:72:67:70:40:3a:ff:0b:
bb:73:1a:14:a1:ba:68:41:6a:cb:f2:e8:67:fd:61:72:c6:33:
65:dd:89:35:18:0f:77:b1:a8:ca:88:44:e8:56:0c:6f:27:b8:
1a:cd:57:62:f3:0c:fb:78:c4:75:bc:3b:35:42:a5:8d:d3:28:
eb:f0:f9:22:2c:2a:2a:f5:bf:06:9f:26:23:08:e8:9f:ef:ea:
10:51:aa:35:11:42:5a:59:42:ce:2f:ac:ee:5a:91:ae:35:b9:
4a:12:06:b9:8f:6b:c5:d4:e7:d0:c2:b6:1a:d3:3e:a6:db:2c:
e9:b4:b5:a0:dc:bd:fc:fe:ed:31:57:1c:f7:c4:ec:f8:c9:b0:
79:c1:c6:de:2f:c9:98:47:8f:05:38:fa:e2:48:b5:51:e3:ab:
ad:ba:94:66:e8:bb:c0:70:6a:2c:17:d5:72:17:1d:d0:5e:c3:
d8:6e:ec:8e:14:7a:70:d7:35:26:6d:5c:02:56:e6:02:71:34:
88:e7:17:72:dc:9a:26:2a:f9:09:79:42:04:f3:51:ac:2e:72:
6b:0c:11:14:0a:c1:16:6c:c6:68:9a:d3:cd:a3:d5:25:31:9b:
70:86:87:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9vDkNQ1kLtJKUh84gPobH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTEyMjMwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGIwODQ5ZTE2MGE0ZGM0NmQyZmY2ODk5MGQxMWVkYzkwZWJjYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/AJh9Nx4ol/4j6eSxUx5GDJK8J
KXhSvhLt/mNTWX7Y+BaT7FZE/YzgutIPorqijjzwvmqpQDjgLhE8eCgklYU3Ep20
9qKYWT49it8CLMDv6FST7nqxD37ObwX4TJWd3DX0lil2l4ljnuu76V2aBq8gJqcn
hedSS17XFjJGH+jnJD6CjVBXW28zGCLPFkgLwUXQUc8e/dQCUIBMQVOwD5bLT9yf
xdDYBoH4K3ucrZ30ZniUQIuwWg8Y1ouIhn67S9Ry7IaEB6niFdqwJ87u2ngV0sra
u7fTsCq1CR5g0lDrDr2ttYWyavSGD+7YsrQNfaHluHCerXudBXIRN93hqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH2whJ4WCk3EbS/2iZDRHtyQ68vlMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvZmJDRW5oWUtUY1J0TF9hSmtORWUzSkRyeS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEtMZrFgrrrIL0p3pQcZ
Nm7Kti1KST/6WWpAXsLacmdwQDr/C7tzGhShumhBasvy6Gf9YXLGM2XdiTUYD3ex
qMqIROhWDG8nuBrNV2LzDPt4xHW8OzVCpY3TKOvw+SIsKir1vwafJiMI6J/v6hBR
qjURQlpZQs4vrO5aka41uUoSBrmPa8XU59DCthrTPqbbLOm0taDcvfz+7TFXHPfE
7PjJsHnBxt4vyZhHjwU4+uJItVHjq626lGbou8BwaiwX1XIXHdBew9hu7I4UenDX
NSZtXAJW5gJxNIjnF3LcmiYq+Ql5QgTzUawucmsMERQKwRZsxmia082j1SUxm3CG
hxA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:20 2025 by rpki-client