Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uF01W3PoCe3hbOoW-iCKm2wfn7U.roa
File: uF01W3PoCe3hbOoW-iCKm2wfn7U.roa (raw, json)
Hash identifier: BlFJeZsbDWuyOOIo0DeNdhbF0hYCksdc5UdBjIIen94=
Subject key identifier: B8:5D:35:5B:73:E8:09:ED:E1:6C:EA:16:FA:20:8A:9B:6C:1F:9F:B5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F95B1BD2E52F9CEB100DA03434284E616
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uF01W3PoCe3hbOoW-iCKm2wfn7U.roa
Signing time: Mon 20 May 2024 11:10:04 +0000
ROA not before: Mon 20 May 2024 11:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:b1:bd:2e:52:f9:ce:b1:00:da:03:43:42:84:e6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 11:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b85d355b73e809ede16cea16fa208a9b6c1f9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:99:28:7c:67:f2:02:4e:e9:32:0b:21:83:
9f:2e:f8:51:cf:98:52:e5:61:70:02:e1:7d:ac:58:
bc:a1:06:87:db:c9:a2:77:84:5e:0c:3d:2f:57:1c:
e4:8b:1a:92:b0:12:ee:03:8b:28:ab:01:fb:a4:a1:
fb:4b:3a:07:35:8e:ab:73:2a:11:4d:de:2a:9a:03:
c4:2f:63:8e:2f:4b:58:05:60:02:dd:74:c2:8e:7b:
df:d9:7e:eb:6c:9d:10:99:f2:d9:07:dc:e6:c0:a7:
d8:09:da:4c:fe:d8:8b:d7:67:a6:f9:22:b6:da:dd:
26:71:4a:7b:40:9b:3a:25:ce:4e:e5:0d:73:27:98:
ac:b9:a3:6f:3f:46:ee:d7:1b:05:8f:01:eb:fa:de:
4f:3d:0d:05:3c:fd:72:f7:bd:e0:7c:39:65:91:b9:
ef:52:c4:d1:6d:73:6e:a4:d4:5a:be:b0:ed:02:ea:
90:29:49:b2:87:b4:41:c8:1c:51:4c:12:5e:77:91:
a9:97:49:bf:1a:7b:61:a4:fb:01:8b:bb:ae:df:2d:
a3:ec:ea:df:59:b3:6b:92:0b:89:a4:aa:fc:e1:11:
f7:c7:d4:ae:4d:a7:03:3a:02:fa:56:5d:93:a7:0f:
cb:70:30:0a:cb:68:97:ca:6e:a4:b9:b8:22:e7:01:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:35:5B:73:E8:09:ED:E1:6C:EA:16:FA:20:8A:9B:6C:1F:9F:B5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uF01W3PoCe3hbOoW-iCKm2wfn7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:46:a2:7c:d6:03:19:cb:56:ef:e4:61:a2:1a:70:dd:d8:3d:
78:cf:6f:46:36:97:40:00:5e:a3:a6:aa:56:7c:80:9d:39:5d:
cc:83:40:9d:91:70:ef:cd:3d:00:5f:5c:b1:40:b0:c4:09:f4:
50:d9:2e:54:de:7e:3e:4e:8e:56:78:1b:88:db:cd:4f:36:88:
9e:da:49:95:d5:a3:3e:f0:4a:7d:e2:db:21:d8:73:4b:85:f7:
3c:99:08:7e:d9:91:2e:74:a2:29:19:51:0a:75:01:a4:33:f3:
29:48:77:b4:64:9f:d5:93:2f:38:23:7c:de:a1:7a:42:2c:ed:
11:cc:a2:53:c8:32:53:e0:4a:63:40:7d:1a:a3:4a:88:64:2e:
24:09:9e:92:78:35:9e:43:a8:4a:5a:a6:85:09:4d:af:7a:43:
3b:7b:56:bc:48:30:a0:71:28:93:7f:49:ea:89:da:0a:54:fa:
dd:1e:b0:5f:eb:a2:c2:cf:f7:4e:9d:13:e9:ad:36:f6:05:c8:
aa:d7:c5:1a:21:93:d8:ad:f6:c2:f0:a7:e7:9f:72:2f:9a:26:
1b:57:45:0f:e5:d7:0a:8f:71:f2:d9:5b:da:09:ce:19:b3:c6:
e5:e4:4a:60:7b:47:d2:65:56:43:4e:14:b1:41:3a:d6:47:08:
ce:87:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:54 2025 by rpki-client