Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oe6BQMwTiQgtYeCJodfElrrIBcU.roa
File: oe6BQMwTiQgtYeCJodfElrrIBcU.roa (raw, json)
Hash identifier: FW7AKujzL4A6gJA+BA3ToW8DA5cYPvoe6SxN12hwLmY=
Subject key identifier: A1:EE:81:40:CC:13:89:08:2D:61:E0:89:A1:D7:C4:96:BA:C8:05:C5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F61FC02D1AE32D95BE010B59E5C733E18
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oe6BQMwTiQgtYeCJodfElrrIBcU.roa
Signing time: Fri 10 May 2024 10:10:56 +0000
ROA not before: Fri 10 May 2024 10:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:fc:02:d1:ae:32:d9:5b:e0:10:b5:9e:5c:73:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 10:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1ee8140cc1389082d61e089a1d7c496bac805c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:43:35:ef:8d:99:86:79:13:c2:1b:2e:3c:
3f:ba:f1:fb:88:c2:7a:84:fd:c0:c0:41:40:c4:30:
32:f8:a8:5f:be:31:bb:f0:a9:08:43:7e:c7:03:a8:
6d:b4:54:32:b8:d9:63:69:91:25:2f:b2:d2:cc:85:
83:67:e1:97:21:77:85:0d:ee:21:54:56:e3:fd:3e:
0a:5f:3e:0c:1c:e4:01:3c:5f:6d:99:c1:6f:fe:d6:
34:7d:7f:8b:e5:31:69:73:df:1f:fe:73:b3:5a:ac:
15:ed:41:b0:35:b1:48:5b:fc:ed:f8:0a:aa:80:0b:
52:a8:27:5e:69:e7:b2:a0:47:29:a1:53:c7:90:72:
55:01:d2:46:6f:e8:21:3f:d2:b3:1f:12:4d:98:e5:
c1:c7:8b:f1:0b:4c:b7:1a:51:f0:57:ee:d4:34:57:
07:64:8b:2f:b5:98:d1:8b:53:4d:02:58:4f:2f:76:
1c:52:ca:fb:5c:77:dd:4c:37:19:54:ff:ba:56:ba:
84:b9:99:a3:33:b8:43:d1:cd:ff:d0:36:b6:d6:9f:
eb:93:0e:69:d6:a0:12:e6:94:ca:5c:c9:bd:5c:44:
ef:c3:e4:ec:ea:ee:62:e1:60:c6:3d:cd:4e:0e:6d:
f0:d8:26:dc:ef:eb:e8:d8:5a:c7:f8:28:96:66:0d:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:81:40:CC:13:89:08:2D:61:E0:89:A1:D7:C4:96:BA:C8:05:C5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oe6BQMwTiQgtYeCJodfElrrIBcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:4a:3a:9d:09:77:79:8a:36:f2:98:99:e2:ea:e8:0c:d5:3f:
d5:80:1f:56:1f:96:35:d8:f9:01:d5:3c:c9:43:4a:8a:f4:bd:
70:fc:4c:33:96:0a:d7:a1:7b:9f:d1:bb:1b:34:0a:14:dc:ef:
98:57:89:00:3b:bc:b5:8a:39:80:f6:4c:6b:fc:c9:ef:21:ea:
0a:22:68:ee:28:15:4f:0a:89:81:e4:3c:38:1d:fa:9c:5f:16:
27:20:b2:21:16:b6:d9:3a:73:14:0e:11:14:20:b6:f7:58:2c:
31:f1:ec:f3:99:d3:15:de:95:5c:bb:fd:8b:69:1d:ec:59:d9:
f4:3d:ac:f1:de:e7:a7:59:2b:22:c6:65:54:bb:2b:31:b4:81:
e2:c9:f8:02:07:c9:c8:44:21:4c:7a:b6:b7:f9:44:0e:fa:50:
c3:bd:70:cd:ec:77:c9:d7:d6:44:8b:a8:d2:f5:ce:ce:3a:b7:
dc:31:51:72:93:2a:66:28:21:f4:8e:40:df:81:f9:b9:ce:8a:
ef:6a:b9:90:71:f2:32:8a:ee:2c:23:2a:a8:09:e8:7b:6c:94:
ae:a5:13:a9:69:04:f3:99:3e:b6:a3:31:99:e0:32:bb:a4:db:
2f:c6:bc:9f:0c:09:0c:33:20:cf:8c:71:fa:a8:1e:6a:de:1b:
d6:45:84:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9h/ALRrjLZW+AQtZ5ccz4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTEwMTAxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWVlODE0MGNjMTM4OTA4MmQ2MWUwODlhMWQ3YzQ5NmJhYzgwNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzRDNe+NmYZ5E8IbLjw/uvH7iMJ6
hP3AwEFAxDAy+KhfvjG78KkIQ37HA6httFQyuNljaZElL7LSzIWDZ+GXIXeFDe4h
VFbj/T4KXz4MHOQBPF9tmcFv/tY0fX+L5TFpc98f/nOzWqwV7UGwNbFIW/zt+Aqq
gAtSqCdeaeeyoEcpoVPHkHJVAdJGb+ghP9KzHxJNmOXBx4vxC0y3GlHwV+7UNFcH
ZIsvtZjRi1NNAlhPL3YcUsr7XHfdTDcZVP+6VrqEuZmjM7hD0c3/0Da21p/rkw5p
1qAS5pTKXMm9XETvw+Ts6u5i4WDGPc1ODm3w2Cbc7+vo2FrH+CiWZg2WQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKHugUDME4kILWHgiaHXxJa6yAXFMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvb2U2QlFNd1RpUWd0WWVDSm9kZkVscnJJQmNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFxKOp0Jd3mKNvKYmeLq
6AzVP9WAH1YfljXY+QHVPMlDSor0vXD8TDOWCtehe5/Ruxs0ChTc75hXiQA7vLWK
OYD2TGv8ye8h6goiaO4oFU8KiYHkPDgd+pxfFicgsiEWttk6cxQOERQgtvdYLDHx
7POZ0xXelVy7/YtpHexZ2fQ9rPHe56dZKyLGZVS7KzG0geLJ+AIHychEIUx6trf5
RA76UMO9cM3sd8nX1kSLqNL1zs46t9wxUXKTKmYoIfSOQN+B+bnOiu9quZBx8jKK
7iwjKqgJ6HtslK6lE6lpBPOZPrajMZngMruk2y/GvJ8MCQwzIM+McfqoHmreG9ZF
hNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org