Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tSiZ-S6_N5jAQDjjDfz5TzfLfOo.roa
File: tSiZ-S6_N5jAQDjjDfz5TzfLfOo.roa (raw, json)
Hash identifier: ZxdoidX0uHCYAX8/2WPlEYMC686dECEdEjc77tVC9Cs=
Subject key identifier: B5:28:99:F9:2E:BF:37:98:C0:40:38:E3:0D:FC:F9:4F:37:CB:7C:EA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F54AE3F7C3ACE35332D42C21BC747C7F3
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tSiZ-S6_N5jAQDjjDfz5TzfLfOo.roa
Signing time: Tue 07 May 2024 20:10:56 +0000
ROA not before: Tue 07 May 2024 20:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:ae:3f:7c:3a:ce:35:33:2d:42:c2:1b:c7:47:c7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 20:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b52899f92ebf3798c04038e30dfcf94f37cb7cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:d3:ae:9b:fd:6c:ac:2c:52:e1:75:44:8d:
01:c0:31:5b:ac:2d:58:a8:82:44:4e:05:04:d5:ea:
48:ed:70:8e:a3:a4:60:29:a3:96:5f:4c:7b:4c:2b:
83:c0:fd:4e:25:58:c4:f8:f3:7d:57:58:52:96:02:
83:70:8a:32:5e:a9:5f:13:a7:17:fc:09:c9:ed:1d:
7a:4c:aa:25:83:59:d4:30:6f:06:62:d8:af:c8:8e:
b5:ac:7d:67:2f:bc:07:36:62:9b:e3:14:ac:13:0b:
23:6b:ac:a0:57:b0:a4:24:5a:06:67:a9:84:1d:3a:
cc:04:e3:ef:95:23:9d:76:71:d4:45:84:c6:87:69:
a6:d9:52:a1:08:f5:44:f6:0d:28:93:dd:3c:84:98:
f3:08:69:c0:e7:4d:04:c2:56:d8:65:af:fa:3b:1c:
9a:d1:44:7b:e4:b0:25:09:92:b7:98:7b:df:6f:7e:
8b:e7:8e:b1:f4:af:f9:c7:33:7e:38:8d:b9:72:e0:
9c:02:79:02:a0:3a:c1:9e:d0:b5:78:9a:42:cd:5f:
07:69:27:e7:5a:2a:92:3c:83:b6:8a:d7:68:1e:58:
a2:a8:6e:3e:05:6a:c8:43:39:0e:2d:d5:b9:88:88:
59:39:80:dc:b6:03:5c:a5:0f:1d:e1:9a:28:ff:18:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:28:99:F9:2E:BF:37:98:C0:40:38:E3:0D:FC:F9:4F:37:CB:7C:EA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tSiZ-S6_N5jAQDjjDfz5TzfLfOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:e2:54:46:c4:ad:18:75:52:38:6b:56:e3:24:b9:3e:1b:b7:
2a:65:40:f4:e0:47:d0:53:d3:e1:7e:47:1f:72:9c:a3:a6:64:
99:44:04:f4:0c:1e:8e:93:e3:a9:a2:06:f5:2a:74:f8:e9:6a:
f2:f7:6c:f9:60:d0:df:30:be:f8:02:94:46:18:b1:53:44:e0:
3c:26:c6:40:20:3a:56:c4:88:a3:00:d8:e4:db:99:c0:c6:5e:
c2:13:15:92:ef:0d:be:8b:a5:8f:fd:23:85:16:3d:14:b5:a4:
44:0e:97:2d:8a:60:87:7f:9b:15:f7:3a:8e:80:d1:42:af:91:
81:9f:85:f9:a2:e8:a2:d9:f7:fb:ae:d2:c6:92:2f:23:a7:3f:
2b:77:01:cc:b9:cd:67:de:87:2b:7e:a8:ef:9c:01:27:cb:e1:
e5:1f:16:51:ca:01:ae:b6:04:d0:49:18:9a:cc:b2:df:28:a0:
eb:0f:a9:fe:f4:81:d3:d5:d0:5f:79:8b:42:da:0c:52:c1:d8:
ee:7a:c2:3b:c9:35:ed:97:35:a6:7c:9e:b0:9b:8c:3c:ff:41:
a1:4f:37:d6:55:9c:c1:0e:fd:ab:cb:3e:21:18:a4:b1:87:cf:
d6:95:a5:7d:8f:4f:15:76:a7:f7:6a:08:11:50:4a:a2:fd:10:
0c:50:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:05:40 2025 by rpki-client