Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa
File: gycV-mvdX22XZzCksMvRaP9BX8g.roa (raw, json)
Hash identifier: jjlPvMXreARFTZMoBqFr3SFvfxRLFy1fpj4aqoWcIOU=
Subject key identifier: 83:27:15:FA:6B:DD:5F:6D:97:67:30:A4:B0:CB:D1:68:FF:41:5F:C8
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F803CE731BB5E66C3BB52C675A0847AE8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa
Signing time: Thu 16 May 2024 07:10:25 +0000
ROA not before: Thu 16 May 2024 07:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:3c:e7:31:bb:5e:66:c3:bb:52:c6:75:a0:84:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 16 07:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832715fa6bdd5f6d976730a4b0cbd168ff415fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:fd:34:9c:01:5b:a5:c1:29:03:68:cd:0e:
49:fe:eb:a5:d0:e1:21:a4:fa:cf:6d:fb:ef:45:18:
75:4e:b0:ff:a7:1c:ff:b4:46:8c:bb:3d:d0:6f:30:
cb:7c:38:28:5b:2f:4f:ab:43:72:91:c6:54:e9:93:
cf:a6:18:5e:a8:78:55:97:bd:97:0c:12:8b:b4:c2:
ce:73:c7:3d:fe:91:1e:23:7e:25:4a:ba:6f:b5:58:
fb:e3:fa:80:c5:57:3c:0e:36:c0:86:db:89:11:50:
04:d6:7d:b9:c7:5e:5a:19:0f:e1:67:66:cf:ef:af:
b5:6b:27:06:3f:7f:ac:0b:82:fd:a7:dc:78:e9:a9:
6f:80:5a:1d:89:cc:ad:c9:76:25:62:a8:f0:aa:51:
cd:f9:b3:c7:31:24:81:b3:62:7d:4a:eb:dc:d5:14:
e7:5c:c0:16:38:e2:60:29:d8:27:47:f4:00:c6:7d:
8a:4a:54:21:97:17:98:37:e8:31:d0:14:e0:eb:b2:
02:5f:45:17:c0:19:5c:de:b3:67:5f:5c:83:7b:24:
80:34:97:4d:b0:58:2a:16:18:e2:e5:c0:50:69:a1:
97:fa:aa:eb:60:13:5b:43:fd:65:45:d7:99:1c:40:
16:3b:8c:8a:d2:19:44:ca:b0:dc:2d:80:5b:29:fb:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:27:15:FA:6B:DD:5F:6D:97:67:30:A4:B0:CB:D1:68:FF:41:5F:C8
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c8:0f:4e:52:96:0c:a1:8f:ca:bd:e6:83:41:44:a8:4a:e0:
ce:c7:16:d7:df:e6:09:c1:9b:61:ad:6e:97:90:13:1f:96:98:
ca:ec:8b:ed:bd:e4:e0:96:37:fa:0b:4a:53:b4:0c:7f:77:08:
2b:e6:5f:9c:7c:d9:2b:88:08:23:27:f5:c5:af:75:9e:4e:ca:
a9:0e:d7:b5:86:7a:1a:0c:0a:86:17:84:07:bc:2b:de:5a:05:
85:45:44:0e:e1:95:88:81:c1:d3:ec:c8:67:2e:7a:5e:25:98:
a9:de:ed:c5:65:ce:c9:dd:0d:35:70:c6:18:fc:38:14:05:d0:
a9:05:54:05:d9:21:7f:df:53:1c:c4:6c:37:38:9b:c8:f4:79:
ce:34:d0:20:73:eb:a0:57:45:2c:03:fb:b6:74:f4:59:ad:04:
b4:14:83:f5:8d:39:56:a5:51:f6:48:63:ed:0d:cf:72:42:f9:
71:57:8f:ca:59:78:d7:ce:7d:12:c1:2c:27:43:df:fa:50:29:
13:00:ea:5a:8c:13:42:b0:22:14:10:09:11:ad:95:47:b2:e6:
3d:2d:58:09:ab:bd:fd:93:6d:4a:79:bf:a9:c4:28:df:7c:bf:
3d:f0:c8:be:59:73:02:b5:56:28:63:00:e6:df:4d:c8:1b:80:
1a:f7:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:50 2025 by rpki-client