Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/r0SxeeSlP_fZxWbCHN9vKnQU8UU.roa
File: r0SxeeSlP_fZxWbCHN9vKnQU8UU.roa (raw, json)
Hash identifier: iCXPlKxoiDijdxN82a/RIn+3uvbeWbTFUySwwjEN2Rg=
Subject key identifier: AF:44:B1:79:E4:A5:3F:F7:D9:C5:66:C2:1C:DF:6F:2A:74:14:F1:45
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6C10E270EA828361A439E3962A85A46C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/r0SxeeSlP_fZxWbCHN9vKnQU8UU.roa
Signing time: Sun 12 May 2024 09:09:56 +0000
ROA not before: Sun 12 May 2024 09:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6c:10:e2:70:ea:82:83:61:a4:39:e3:96:2a:85:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 12 09:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af44b179e4a53ff7d9c566c21cdf6f2a7414f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:82:64:c2:57:03:80:98:b7:8f:5a:fc:2f:
8a:69:ea:43:eb:8f:b4:00:85:cc:9c:ab:9f:01:af:
16:f1:99:16:bb:ff:64:1b:9c:04:6d:7a:af:2e:a0:
86:5d:82:d3:eb:06:b1:dc:b9:37:75:48:02:64:ab:
e1:21:0f:c4:00:00:6f:8b:4b:72:b3:8f:9f:54:33:
4a:04:a8:41:11:56:c8:b8:5e:c5:ae:c9:71:9f:bb:
7e:64:08:5a:b6:9a:ca:f6:db:e5:62:70:e1:e1:9a:
df:03:b7:cf:8f:e8:a9:90:60:e4:26:85:45:e4:06:
ea:ef:f3:9f:ef:6a:e3:83:7e:d8:3d:15:94:35:62:
60:cf:f3:9a:23:90:f2:ca:83:1b:7f:e3:62:23:f0:
9a:74:4f:84:8c:c5:98:6f:c0:6d:58:46:8c:4f:42:
cc:a9:e7:2f:d0:6f:a8:7a:ba:54:b1:24:33:74:c8:
bd:a9:ab:1e:61:3e:e3:e9:64:53:5c:b9:61:9a:d2:
b2:3e:8a:57:66:e8:e5:a9:e7:2a:e7:89:06:84:cc:
f7:3f:b4:01:b9:49:cd:89:61:5b:fd:23:fd:f6:c9:
11:72:ff:b6:1b:11:7e:17:d2:8c:46:00:21:f5:e1:
d5:ab:db:28:3f:7a:a9:5c:de:e3:07:f5:1c:0f:ce:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:B1:79:E4:A5:3F:F7:D9:C5:66:C2:1C:DF:6F:2A:74:14:F1:45
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/r0SxeeSlP_fZxWbCHN9vKnQU8UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:2a:78:56:5d:2b:91:e7:7f:c7:aa:97:6c:73:5d:66:71:64:
f6:9d:bc:61:63:a7:15:91:e7:57:f0:5e:53:78:69:7f:ed:42:
09:3c:58:0f:5f:12:bf:5a:27:d6:34:45:c2:da:36:3b:c0:2d:
e2:ed:ba:a8:c5:95:8c:94:cb:61:7e:e9:a3:7b:c0:50:33:3a:
23:46:92:02:01:9e:00:c9:f2:92:77:15:74:f3:55:b4:1a:56:
8f:79:6d:42:68:93:2d:02:b0:63:cd:a4:d8:97:53:9e:d1:19:
96:aa:eb:44:10:6f:b8:d0:a0:b3:2a:cd:8b:cd:6e:c3:90:47:
84:61:d8:26:9a:87:ef:32:2a:dd:ea:59:07:d5:40:64:61:42:
c2:12:bb:d7:df:43:11:66:7c:7d:d6:9f:dd:21:85:53:49:16:
e5:26:e3:4f:c8:03:21:8c:d8:f7:04:a7:e9:20:b3:aa:7e:31:
f1:ca:f4:6f:66:9e:c4:79:47:6d:26:6c:25:48:e6:d0:2e:87:
77:9b:68:dd:19:07:97:57:a0:03:59:b3:b4:c5:54:ff:e7:50:
02:93:79:72:ce:22:5d:98:0f:ae:c6:7c:b6:ce:da:53:5f:9c:
f7:36:bf:86:e1:e6:34:d6:f1:6b:38:b7:d7:b8:23:ec:19:9f:
fc:52:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:19 2025 by rpki-client