Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jGsvU7SmRBgFqzxYEAXgF9Bx4M4.roa
File: jGsvU7SmRBgFqzxYEAXgF9Bx4M4.roa (raw, json)
Hash identifier: iQqnoRbR1T7WuEw+23n2P4IKQ7pWkAxXIbSQ3K5zU24=
Subject key identifier: 8C:6B:2F:53:B4:A6:44:18:05:AB:3C:58:10:05:E0:17:D0:71:E0:CE
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6B30959095ED36E4C2D2C65A5E43B336
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jGsvU7SmRBgFqzxYEAXgF9Bx4M4.roa
Signing time: Sun 12 May 2024 05:04:57 +0000
ROA not before: Sun 12 May 2024 05:04:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:6b30:153a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:30:95:90:95:ed:36:e4:c2:d2:c6:5a:5e:43:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 05:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6b2f53b4a6441805ab3c581005e017d071e0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:cc:27:50:84:f2:2d:07:cd:54:28:7a:e4:
0f:61:6f:79:2f:3e:ac:8e:02:6a:b0:1e:87:ea:74:
55:22:e8:0b:f2:49:06:4b:12:ad:2d:10:45:a0:02:
af:56:4b:19:de:67:5d:d1:a9:b7:29:f2:af:5f:8e:
a6:e4:99:78:8f:18:7a:23:49:89:fd:f7:7c:3d:66:
dc:54:46:15:e2:77:69:45:22:db:1f:c8:42:b8:5b:
67:27:c7:63:82:a7:e6:26:9d:e2:0b:30:45:7b:1b:
e3:30:1a:bc:16:b6:b9:3a:d7:86:6e:d6:0a:a2:b6:
c7:c3:3c:f3:72:8f:0a:bc:b9:ff:2b:b1:81:d4:a9:
7a:6f:a7:59:36:d0:53:1c:e6:ac:0a:85:d2:d2:72:
94:bd:cd:a6:2e:c6:3a:b2:87:77:78:23:dd:b1:6b:
74:5d:96:ae:6d:3c:7b:b3:6b:e7:bf:5f:40:0e:a2:
93:10:f5:7f:25:d9:db:25:80:65:73:f0:f9:e5:ca:
c6:71:ad:91:06:d7:ea:11:4c:1f:df:77:06:9d:fe:
4a:35:b9:ae:b7:94:c2:57:c0:08:8d:9a:5f:30:5d:
87:78:d2:b3:71:9d:23:d3:a5:e0:67:14:9a:16:73:
97:78:c6:28:d0:6b:8b:40:36:4b:64:ad:de:72:74:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:2F:53:B4:A6:44:18:05:AB:3C:58:10:05:E0:17:D0:71:E0:CE
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jGsvU7SmRBgFqzxYEAXgF9Bx4M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:91:76:2d:55:26:ab:58:25:dc:48:aa:e7:85:2a:25:12:db:
04:f3:a7:52:30:9e:6d:a8:1e:13:49:40:8e:71:d2:43:9f:8f:
bb:de:de:56:3a:98:60:2c:04:19:c5:70:93:2e:56:c0:33:7d:
72:b4:a2:14:c5:f0:91:06:5c:1a:f3:49:29:4d:a3:b7:75:6c:
cd:7c:de:23:65:26:83:09:17:e2:a2:16:d4:59:8b:af:21:ae:
91:ed:b4:41:55:e5:e3:65:83:7b:f9:12:28:23:2b:7a:ac:48:
22:1d:f0:25:2c:ba:a3:18:e8:42:62:dc:27:76:8b:eb:7a:cc:
dd:bc:55:1a:9f:fa:67:bc:e2:c5:d9:54:2a:9c:f6:60:3b:d2:
de:a7:d5:7f:d1:86:2b:78:39:4c:43:88:2c:6e:bc:b9:e0:e2:
3b:64:70:b2:5f:31:89:3f:b7:dc:be:ca:16:86:f1:cd:4e:5e:
77:af:ac:24:77:0c:37:09:9c:e7:c9:40:ff:e0:5a:1f:b4:97:
06:12:9e:fb:b3:64:18:5c:44:c0:52:2b:d0:dd:32:df:76:23:
1d:03:57:cc:81:73:d7:53:66:e0:0c:7c:be:87:ab:20:36:6d:
ec:86:60:d1:2e:51:5b:e3:75:37:60:e2:f7:98:0a:b5:a9:04:
4d:13:ca:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9rMJWQle025MLSxlpeQ7M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTEyMDUwNDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZiMmY1M2I0YTY0NDE4MDVhYjNjNTgxMDA1ZTAxN2QwNzFlMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxHMJ1CE8i0HzVQoeuQPYW95Lz6s
jgJqsB6H6nRVIugL8kkGSxKtLRBFoAKvVksZ3mdd0am3KfKvX46m5Jl4jxh6I0mJ
/fd8PWbcVEYV4ndpRSLbH8hCuFtnJ8djgqfmJp3iCzBFexvjMBq8Fra5OteGbtYK
orbHwzzzco8KvLn/K7GB1Kl6b6dZNtBTHOasCoXS0nKUvc2mLsY6sod3eCPdsWt0
XZaubTx7s2vnv19ADqKTEPV/JdnbJYBlc/D55crGca2RBtfqEUwf33cGnf5KNbmu
t5TCV8AIjZpfMF2HeNKzcZ0j06XgZxSaFnOXeMYo0GuLQDZLZK3ecnSbSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIxrL1O0pkQYBas8WBAF4BfQceDOMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvakdzdlU3U21SQmdGcXp4WUVBWGdGOUJ4NE00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICRdi1VJqtYJdxIqueF
KiUS2wTzp1Iwnm2oHhNJQI5x0kOfj7ve3lY6mGAsBBnFcJMuVsAzfXK0ohTF8JEG
XBrzSSlNo7d1bM183iNlJoMJF+KiFtRZi68hrpHttEFV5eNlg3v5EigjK3qsSCId
8CUsuqMY6EJi3Cd2i+t6zN28VRqf+me84sXZVCqc9mA70t6n1X/Rhit4OUxDiCxu
vLng4jtkcLJfMYk/t9y+yhaG8c1OXnevrCR3DDcJnOfJQP/gWh+0lwYSnvuzZBhc
RMBSK9DdMt92Ix0DV8yBc9dTZuAMfL6HqyA2beyGYNEuUVvjdTdg4veYCrWpBE0T
ynI=
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:28 2025 by rpki-client