Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uOoFH0X3dEk7nZ36WJK2ULlR5Sw.roa
File: uOoFH0X3dEk7nZ36WJK2ULlR5Sw.roa (raw, json)
Hash identifier: NQDMyyIuET0r/dYYGxi4ptIhVBy/TDkbTTseendRRb8=
Subject key identifier: B8:EA:05:1F:45:F7:74:49:3B:9D:9D:FA:58:92:B6:50:B9:51:E5:2C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA1F115529D6846A2ECD892DA9C2F2C8E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uOoFH0X3dEk7nZ36WJK2ULlR5Sw.roa
Signing time: Wed 22 May 2024 20:14:42 +0000
ROA not before: Wed 22 May 2024 20:14:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:f1:15:52:9d:68:46:a2:ec:d8:92:da:9c:2f:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 20:14:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8ea051f45f774493b9d9dfa5892b650b951e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:9c:eb:8b:c9:87:e4:7a:d0:aa:87:11:f9:
4f:d3:fe:d5:2d:41:32:57:ed:14:db:9f:ee:b9:4b:
1f:c6:a7:a4:9f:f0:99:1d:cc:ff:34:3e:98:d5:f2:
a0:b8:52:ab:1a:d5:5d:32:3a:f0:dd:60:57:a9:07:
c9:67:b5:f6:af:99:1d:39:a7:be:d5:e8:83:4c:50:
f5:e4:73:08:f2:1d:4b:a4:af:c6:e7:ea:1d:68:d0:
2f:6d:b8:95:16:84:6f:63:dc:25:1d:ed:97:3a:0f:
a1:3b:c4:90:0a:cb:4d:d0:22:0b:60:34:a0:e2:e8:
8a:36:1c:3f:ac:69:e7:a1:ed:fe:fe:02:c0:52:01:
90:8d:95:9e:85:60:7f:7b:1a:6e:cc:b0:d6:e7:90:
ef:0e:e1:c1:b3:d9:5f:70:6a:8b:33:a9:5e:3e:42:
28:b8:05:38:59:37:26:66:0a:de:3a:59:cb:f7:71:
75:43:11:43:82:dc:87:ff:11:c5:78:99:6f:da:f6:
28:01:25:34:76:60:0c:c4:35:2d:2a:bb:80:c3:09:
63:b4:97:da:69:70:d2:ac:11:69:55:f8:8e:4f:6a:
6c:b1:5a:c5:8a:69:e2:37:7e:0d:f3:6c:e7:a7:e9:
a3:43:20:8d:aa:29:4e:48:d2:4d:9e:83:78:ad:6d:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EA:05:1F:45:F7:74:49:3B:9D:9D:FA:58:92:B6:50:B9:51:E5:2C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/uOoFH0X3dEk7nZ36WJK2ULlR5Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:2d:e9:fc:eb:10:9d:d1:3d:6c:e8:3c:7d:64:70:78:ba:25:
8d:72:1f:44:67:46:02:93:56:58:3c:ba:cb:09:01:0e:ec:7f:
b2:f0:4a:ac:d9:b1:03:27:2b:e1:db:c7:4b:7e:e0:9f:60:ea:
e2:fc:b8:2d:6c:3e:aa:20:5f:65:67:81:b8:b5:e4:48:4d:f5:
47:b3:97:91:9a:f1:38:9e:d8:00:df:47:a2:dc:3f:10:a8:ae:
90:97:20:fa:d7:9f:c5:f9:66:86:2e:33:20:67:a6:ee:a3:6e:
96:bc:dc:0f:90:36:0f:ab:ad:6f:4e:cf:37:a9:39:a8:54:6e:
14:35:69:b7:f9:ed:6a:ff:4b:01:49:40:52:2d:44:a2:37:5a:
c5:2b:06:16:ea:5b:6b:b9:70:ed:7d:68:d1:5f:bb:b0:a8:81:
7d:ef:ed:6d:23:27:12:ff:62:20:19:f6:e4:12:7f:b7:bd:58:
ba:ac:75:9f:be:44:82:ca:72:b9:7d:6b:f0:2e:7a:c9:4f:61:
f7:f9:77:5f:fb:67:77:5a:6c:1f:9a:11:02:74:d0:37:e9:a8:
8c:55:98:c1:11:cc:44:10:01:0c:29:74:53:fb:90:f7:5a:3a:
d5:4e:aa:db:b0:60:69:15:dc:f0:58:89:fd:ca:4c:6a:48:13:
d1:2a:fe:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+h8RVSnWhGouzYktqcLyyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTIyMjAxNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGVhMDUxZjQ1Zjc3NDQ5M2I5ZDlkZmE1ODkyYjY1MGI5NTFlNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzWc64vJh+R60KqHEflP0/7VLUEy
V+0U25/uuUsfxqekn/CZHcz/ND6Y1fKguFKrGtVdMjrw3WBXqQfJZ7X2r5kdOae+
1eiDTFD15HMI8h1LpK/G5+odaNAvbbiVFoRvY9wlHe2XOg+hO8SQCstN0CILYDSg
4uiKNhw/rGnnoe3+/gLAUgGQjZWehWB/expuzLDW55DvDuHBs9lfcGqLM6lePkIo
uAU4WTcmZgreOlnL93F1QxFDgtyH/xHFeJlv2vYoASU0dmAMxDUtKruAwwljtJfa
aXDSrBFpVfiOT2pssVrFimniN34N82znp+mjQyCNqilOSNJNnoN4rW3eOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLjqBR9F93RJO52d+liStlC5UeUsMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvdU9vRkgwWDNkRWs3blozNldKSzJVTGxSNVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJot6fzrEJ3RPWzoPH1k
cHi6JY1yH0RnRgKTVlg8ussJAQ7sf7LwSqzZsQMnK+Hbx0t+4J9g6uL8uC1sPqog
X2Vngbi15EhN9Uezl5Ga8Tie2ADfR6LcPxCorpCXIPrXn8X5ZoYuMyBnpu6jbpa8
3A+QNg+rrW9OzzepOahUbhQ1abf57Wr/SwFJQFItRKI3WsUrBhbqW2u5cO19aNFf
u7CogX3v7W0jJxL/YiAZ9uQSf7e9WLqsdZ++RILKcrl9a/AueslPYff5d1/7Z3da
bB+aEQJ00DfpqIxVmMERzEQQAQwpdFP7kPdaOtVOqtuwYGkV3PBYif3KTGpIE9Eq
/v8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:08 2025 by rpki-client