Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/k56zOCwPGA-erb-734BbIM8mbPs.roa
File: k56zOCwPGA-erb-734BbIM8mbPs.roa (raw, json)
Hash identifier: piVzqIFks8HKGINzNVQzgcJ5aErfqLWeI/m6qV4r/c4=
Subject key identifier: 93:9E:B3:38:2C:0F:18:0F:9E:AD:BF:BB:DF:80:5B:20:CF:26:6C:FB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F697F87DBB4160DBF8701E7AC4D745E68
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/k56zOCwPGA-erb-734BbIM8mbPs.roa
Signing time: Sat 11 May 2024 21:11:56 +0000
ROA not before: Sat 11 May 2024 21:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:7f:87:db:b4:16:0d:bf:87:01:e7:ac:4d:74:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 21:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939eb3382c0f180f9eadbfbbdf805b20cf266cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:d3:ec:f6:9a:45:3f:b2:d4:6d:00:44:3b:
61:b8:57:2b:20:24:b1:87:69:a1:97:d6:d5:f4:6d:
56:bf:ad:39:1b:4b:3f:74:02:5e:d2:14:e5:77:ff:
e9:e9:28:3a:87:3d:22:80:12:2c:c1:7f:49:80:10:
64:b8:95:ed:f6:72:53:e8:57:0d:52:d2:0b:be:8b:
f4:b1:40:69:9e:f7:a1:97:5a:1d:10:b7:b4:7c:ac:
86:b8:c6:ad:98:df:89:d7:ee:58:11:55:24:7e:31:
64:7b:2d:d7:2d:a9:5e:97:6f:11:42:8f:4e:0d:71:
0d:42:d9:66:59:f2:2f:6a:ec:6c:df:93:46:48:a9:
90:89:06:36:eb:48:30:41:61:b1:1e:ac:c0:a7:20:
4b:be:16:1c:34:04:d2:4d:1a:70:0b:7d:69:60:c0:
af:db:f1:df:39:e9:74:dd:01:85:a2:06:d9:8c:c5:
6f:fa:23:b5:81:2c:37:2b:b4:dd:d7:b1:22:5c:ca:
00:a9:cd:5d:28:14:24:dc:56:8b:2c:bc:22:42:74:
7b:e6:9c:65:57:73:1f:a7:a1:6a:bd:c3:10:bf:5a:
a0:54:bf:63:37:2f:ff:5e:33:20:e4:94:99:d5:fe:
66:59:d3:6e:30:5f:4c:2c:86:ff:27:07:c9:de:4d:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:B3:38:2C:0F:18:0F:9E:AD:BF:BB:DF:80:5B:20:CF:26:6C:FB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/k56zOCwPGA-erb-734BbIM8mbPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:26:a7:27:ae:b9:b2:45:f7:df:97:fc:49:7f:3b:59:14:94:
f6:6e:72:18:6c:13:7d:a5:bd:e9:5c:85:15:08:33:0e:b9:98:
4a:a9:c6:c5:dd:71:ab:7c:b5:65:d8:29:37:e4:c4:3a:4c:6f:
27:6a:5b:bd:ef:98:e9:9f:fa:fc:b4:0a:a0:34:62:29:b6:27:
08:40:48:e2:b3:7f:28:0a:c2:59:4f:10:1d:d1:24:de:29:f0:
9f:ed:e1:14:c8:3a:20:3d:9e:5c:26:e2:b4:2d:a1:e5:85:7e:
f3:61:e3:d1:5c:67:67:d5:c4:a6:94:f1:f2:ec:e3:db:d4:88:
ae:3f:80:bf:95:6f:61:16:d7:d6:11:0c:de:4d:6d:6d:78:f6:
df:5c:1b:23:37:96:3e:db:f6:7f:f2:b6:e6:bc:48:01:80:7c:
06:97:99:f4:af:4e:56:b8:c7:55:1b:c8:0d:8c:9e:da:4c:12:
09:71:55:e0:fc:45:86:e4:19:bd:dd:43:41:c6:9e:20:10:81:
a9:50:d5:c3:68:e2:f8:51:a9:cf:01:b2:4b:ad:4b:64:de:61:
65:a0:80:06:4d:f9:a9:66:a5:40:31:b2:4a:cb:f4:d5:42:90:
c4:a1:ff:38:ba:84:e1:b5:81:ee:e5:8a:9c:33:52:2e:09:05:
13:58:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org