Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa
File: lG07G8mPeizTQSFmrIiKTXV19R0.roa (raw, json)
Hash identifier: tzdozytcP6S2aIJnv980tg/BDMkNFM5crabGHy/B8EU=
Subject key identifier: 94:6D:3B:1B:C9:8F:7A:2C:D3:41:21:66:AC:88:8A:4D:75:75:F5:1D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F36A3D1B4C4BD338EC3D5985EA5E8BA5A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa
Signing time: Thu 02 May 2024 00:10:56 +0000
ROA not before: Thu 02 May 2024 00:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:a3:d1:b4:c4:bd:33:8e:c3:d5:98:5e:a5:e8:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 2 00:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946d3b1bc98f7a2cd3412166ac888a4d7575f51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:87:13:34:d4:52:42:69:46:16:ee:c8:00:
29:c0:9b:e6:a3:bf:fa:e8:4e:9d:a3:55:39:b6:84:
ca:97:3e:e0:32:8c:5b:bd:65:0b:ea:6e:c3:3c:a7:
09:85:62:08:c9:3f:71:95:3e:fc:77:b6:b2:36:17:
a7:3d:bb:ef:df:b8:8f:46:97:f8:2e:28:4e:95:bd:
b0:43:7a:54:0b:a5:5e:e0:c2:2e:3c:9e:a0:3d:fc:
f2:90:99:37:1d:fa:20:39:cd:f6:d0:bd:72:2d:34:
b5:c2:6f:cd:75:65:99:57:96:68:a3:5a:1d:80:4b:
2f:67:e4:a5:03:ca:6a:6a:29:67:ea:02:c6:a8:67:
ba:2d:bd:e2:e8:fa:42:6c:e8:21:9e:6f:c7:18:f2:
ed:63:2f:60:3c:ce:ec:26:20:5e:cb:ac:1d:87:e5:
1b:13:80:fb:4d:d8:56:82:9c:db:35:dc:a1:45:d6:
58:5b:af:be:57:74:b7:03:4e:ec:dd:de:f1:da:90:
3e:e7:e4:a0:4d:6a:42:8d:f5:55:76:38:c9:de:1e:
b9:a1:5b:f1:d6:80:b5:a8:a3:af:b5:5b:80:b1:8d:
b2:0a:ba:08:9c:4a:3f:0d:53:94:2d:18:29:49:4b:
83:37:09:fd:16:18:2f:99:1d:a3:fb:c0:75:08:77:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:3B:1B:C9:8F:7A:2C:D3:41:21:66:AC:88:8A:4D:75:75:F5:1D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:a3:0a:41:ca:02:2d:11:03:d4:4c:9b:4b:6d:38:99:30:0a:
d6:01:f7:22:8a:12:d5:ee:34:63:b2:61:ac:cf:b2:89:da:4b:
87:ba:09:a8:5b:2a:ce:fb:23:50:c4:a9:47:b3:3d:ca:f0:8a:
50:aa:b4:8c:d4:97:cb:e3:dd:b2:99:49:74:77:01:ea:11:82:
f7:b9:89:54:d4:34:1d:b9:5b:3a:0e:93:66:5d:81:c9:d7:1f:
b3:42:80:d4:5f:89:25:58:94:69:b8:0a:a8:02:ae:91:5d:1f:
49:f7:55:4a:cd:13:46:f3:de:0c:e0:b4:0a:8b:17:4e:8a:4c:
d1:e9:7b:85:72:09:1a:f6:c3:0e:ff:0a:61:6f:1a:04:dd:f8:
33:d6:8b:86:f9:39:ae:64:d5:86:3f:4a:5f:e8:19:4e:23:69:
09:f3:9e:9f:6b:4b:ac:6a:76:45:a3:53:5a:21:f8:d8:71:31:
4b:b6:15:a4:e9:52:81:8f:0e:e1:ed:ea:1a:18:f2:ec:35:9b:
10:59:c8:f8:f5:f7:9a:cd:1a:ab:4d:fe:6e:73:62:df:ea:d6:
4e:2c:a3:f8:2b:e7:f6:57:0c:50:b2:0d:2a:b1:1a:c5:83:5e:
22:f1:ca:81:87:d4:9f:15:98:d1:2b:3e:22:82:e6:d2:84:f4:
8c:cb:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:36 2025 by rpki-client