Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/u0EDzPO6p1OUA1W_XYShoSZJEV0.roa
File: u0EDzPO6p1OUA1W_XYShoSZJEV0.roa (raw, json)
Hash identifier: rhznz0WmQxcz96wZgRt/EGW890g/4b+tqkg0HTQXY6o=
Subject key identifier: BB:41:03:CC:F3:BA:A7:53:94:03:55:BF:5D:84:A1:A1:26:49:11:5D
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F486DA698C126F884A47A1AE571E2AAC1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/u0EDzPO6p1OUA1W_XYShoSZJEV0.roa
Signing time: Sun 05 May 2024 11:04:56 +0000
ROA not before: Sun 05 May 2024 11:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:486d:563/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:6d:a6:98:c1:26:f8:84:a4:7a:1a:e5:71:e2:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 11:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4103ccf3baa753940355bf5d84a1a12649115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:3a:73:7b:c9:76:8f:16:93:9d:62:0e:ef:
45:0a:d7:98:4a:04:2e:d4:ff:30:ee:1d:eb:c5:92:
2a:20:2f:51:aa:86:b6:a6:b5:73:bf:af:dc:5f:23:
88:eb:dc:14:9e:b3:53:69:d7:15:52:4c:6a:9a:e3:
12:0c:ca:3f:fc:0d:63:5b:65:f2:cd:5a:f1:1d:a1:
ae:33:ed:34:16:c0:93:7f:f9:bd:05:83:9e:94:6c:
a4:c9:6d:93:d3:11:73:fb:b5:89:73:d8:ba:e7:b8:
3c:e9:9e:76:56:42:e7:93:84:17:3f:fe:e1:e7:54:
33:78:8b:84:3d:38:88:b3:8e:e8:4b:cc:12:37:31:
8b:38:d5:1e:5a:32:57:87:a0:92:f9:f8:49:a4:23:
9e:d0:c8:d2:34:5b:55:b6:83:ba:f5:76:56:38:f9:
4c:e5:45:41:ba:03:9f:0f:67:89:34:78:2a:3b:ae:
80:9a:96:ce:ad:08:03:f1:c6:df:4f:f1:75:1d:d0:
cb:d4:a6:1a:70:da:65:8c:85:18:c3:fa:67:48:32:
24:42:00:6f:2a:c6:f3:3f:29:f8:7b:dc:71:09:6a:
e1:ea:32:8b:3b:ec:07:ed:be:d5:58:b1:13:51:e3:
0c:57:49:af:fd:0a:30:4e:d1:2c:22:c5:ae:42:4c:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:03:CC:F3:BA:A7:53:94:03:55:BF:5D:84:A1:A1:26:49:11:5D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/u0EDzPO6p1OUA1W_XYShoSZJEV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:72:e2:d6:c8:1a:e3:6f:f1:ec:13:f3:af:8a:17:98:37:e6:
00:ba:11:1c:16:7c:2f:7a:b2:de:e2:a7:37:22:8e:e6:e3:70:
c4:33:86:69:f7:e5:fb:12:38:32:98:e6:1a:b0:fe:6e:dc:62:
e8:8c:d5:00:4a:02:22:35:0e:45:af:4d:24:2f:9b:72:d2:01:
6a:c2:19:87:bf:e0:5b:4e:99:8c:4e:0e:0f:f8:54:26:26:78:
8b:32:43:f0:02:06:70:1e:fa:e6:92:6c:a6:a9:b0:3a:87:ab:
82:77:42:f8:31:a9:3e:bf:f6:02:75:11:cb:f1:a8:80:eb:b3:
d2:2e:95:21:83:28:00:db:34:b5:29:64:e5:91:1b:ef:53:d2:
a0:24:7c:a6:c0:76:28:52:ed:53:11:42:04:04:28:24:a0:42:
25:fd:9d:6b:f6:2f:3d:59:9e:6d:2b:c2:c8:27:86:6d:9a:d1:
73:b4:6e:cf:46:44:6e:09:2f:09:09:07:40:b3:04:50:da:90:
cc:32:d5:4c:bd:7a:ae:de:38:6b:65:b2:2c:0d:c2:e9:f0:a8:
88:76:db:70:59:33:d1:c1:7d:a5:5d:09:f9:d1:ef:fd:10:02:
af:dc:0c:be:78:52:fc:84:52:ba:d4:ff:e3:95:d0:66:6f:18:
41:de:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:16 2025 by rpki-client