Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oucnlSgxqPp92ySk5B5ePVjjFBw.roa
File: oucnlSgxqPp92ySk5B5ePVjjFBw.roa (raw, json)
Hash identifier: YwJSyuvSrF1vCiy/5lDRt47iGD7mmjlVKsCF1Rf6QV0=
Subject key identifier: A2:E7:27:95:28:31:A8:FA:7D:DB:24:A4:E4:1E:5E:3D:58:E3:14:1C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5BFBC14314A0343BB9CF55FA16655DA7
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oucnlSgxqPp92ySk5B5ePVjjFBw.roa
Signing time: Thu 09 May 2024 06:12:56 +0000
ROA not before: Thu 09 May 2024 06:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:fb:c1:43:14:a0:34:3b:b9:cf:55:fa:16:65:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 06:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e727952831a8fa7ddb24a4e41e5e3d58e3141c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:ac:a7:b3:87:d9:8a:83:cc:4c:52:37:c0:
9a:d5:ae:67:3c:c5:72:f4:b3:84:aa:59:e0:0b:5b:
b0:ca:33:aa:cb:cd:ad:f3:86:e4:e9:5a:a6:ab:24:
39:64:fe:c6:d2:1d:2c:3f:1b:e7:2d:bc:68:a9:35:
e6:4b:35:ee:1a:0a:a4:ca:26:0e:7e:37:40:69:e1:
8f:dc:28:1e:fe:2f:4e:09:a7:7a:17:af:f9:f6:de:
81:94:b5:c9:73:7c:ed:fc:1e:59:d2:8d:a0:13:5a:
47:bb:30:88:4e:64:19:54:d7:f3:1a:c6:07:1c:d8:
2b:20:51:a0:b7:2c:f0:aa:10:d4:c1:8d:a1:55:d6:
e3:9e:b6:64:1b:71:db:49:59:15:be:e7:7e:5a:a3:
62:db:4d:71:45:b2:1f:e2:1c:86:c6:27:2b:97:ba:
16:3f:7f:31:0e:75:3b:d3:0b:06:c1:b4:de:d0:27:
c3:02:3d:12:83:e4:35:70:2a:fa:47:78:74:e1:3f:
86:b4:02:4a:d0:54:bc:8f:69:87:86:dd:e9:7a:e9:
4a:b8:ba:9d:7a:8f:83:2d:f4:30:c4:d5:9d:b7:df:
0b:58:b9:7d:2d:89:be:6a:72:18:cf:92:0d:fb:c6:
6a:92:c8:b4:7e:db:7f:8e:1e:c6:cd:91:1d:4c:d7:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:27:95:28:31:A8:FA:7D:DB:24:A4:E4:1E:5E:3D:58:E3:14:1C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oucnlSgxqPp92ySk5B5ePVjjFBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:0b:9f:0f:28:ac:71:c8:4b:61:00:69:91:74:f8:e8:ac:dc:
f2:8d:d0:4e:0a:d1:96:73:d1:29:a3:64:70:f5:0f:b0:6f:7b:
50:df:6d:40:bb:dd:77:7d:b6:08:14:49:c4:28:1e:20:85:39:
33:75:f1:9b:01:ee:b9:28:3f:24:dc:21:c9:5d:8e:a6:33:22:
c1:02:2b:08:d9:49:58:01:33:d3:65:50:57:08:b8:d3:dc:ff:
19:eb:36:11:7f:bf:b4:ac:de:35:93:a8:58:b9:64:eb:72:0a:
d1:19:19:57:75:33:72:58:3d:1d:85:a5:fa:09:30:7f:23:f2:
24:4c:d7:bc:bb:70:a7:e3:4f:15:0a:81:c0:70:74:38:8e:4b:
eb:d4:e9:d5:d1:62:38:8f:cd:ca:aa:34:02:cd:12:85:47:2d:
06:94:2d:3b:cf:fc:e5:4c:99:2b:f2:6d:3e:09:41:cf:8e:25:
83:0c:55:bd:51:31:0e:c3:1f:16:f7:a9:00:e5:c6:ea:55:c9:
77:03:da:5a:21:5d:a9:51:17:7f:39:67:99:c5:62:24:6b:93:
a9:9d:cf:48:51:18:eb:9d:e4:3a:e1:32:be:6a:4f:53:64:21:
23:c1:65:3c:90:b6:45:e7:94:f0:ff:9d:40:da:01:e5:a6:e3:
47:1c:a0:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9b+8FDFKA0O7nPVfoWZV2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA5MDYxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmU3Mjc5NTI4MzFhOGZhN2RkYjI0YTRlNDFlNWUzZDU4ZTMxNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8+sp7OH2YqDzExSN8Ca1a5nPMVy
9LOEqlngC1uwyjOqy82t84bk6VqmqyQ5ZP7G0h0sPxvnLbxoqTXmSzXuGgqkyiYO
fjdAaeGP3Cge/i9OCad6F6/59t6BlLXJc3zt/B5Z0o2gE1pHuzCITmQZVNfzGsYH
HNgrIFGgtyzwqhDUwY2hVdbjnrZkG3HbSVkVvud+WqNi201xRbIf4hyGxicrl7oW
P38xDnU70wsGwbTe0CfDAj0Sg+Q1cCr6R3h04T+GtAJK0FS8j2mHht3peulKuLqd
eo+DLfQwxNWdt98LWLl9LYm+anIYz5IN+8Zqksi0ftt/jh7GzZEdTNcfvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKLnJ5UoMaj6fdskpOQeXj1Y4xQcMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvb3VjbmxTZ3hxUHA5MnlTazVCNWVQVmpqRkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGULnw8orHHIS2EAaZF0
+Ois3PKN0E4K0ZZz0SmjZHD1D7Bve1DfbUC73Xd9tggUScQoHiCFOTN18ZsB7rko
PyTcIcldjqYzIsECKwjZSVgBM9NlUFcIuNPc/xnrNhF/v7Ss3jWTqFi5ZOtyCtEZ
GVd1M3JYPR2FpfoJMH8j8iRM17y7cKfjTxUKgcBwdDiOS+vU6dXRYjiPzcqqNALN
EoVHLQaULTvP/OVMmSvybT4JQc+OJYMMVb1RMQ7DHxb3qQDlxupVyXcD2lohXalR
F385Z5nFYiRrk6mdz0hRGOud5DrhMr5qT1NkISPBZTyQtkXnlPD/nUDaAeWm40cc
oHM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:15 2025 by rpki-client