Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vMNkfOR3N_6v5ulW9G6p9EMBoRc.roa
File: vMNkfOR3N_6v5ulW9G6p9EMBoRc.roa (raw, json)
Hash identifier: WViXZLsfipyZt5tauoG3I4A2HWoa/8io8igc12e53SI=
Subject key identifier: BC:C3:64:7C:E4:77:37:FE:AF:E6:E9:56:F4:6E:A9:F4:43:01:A1:17
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4B00D560D1E2419FF01131A32F80188D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vMNkfOR3N_6v5ulW9G6p9EMBoRc.roa
Signing time: Sun 05 May 2024 23:04:56 +0000
ROA not before: Sun 05 May 2024 23:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:4b00:5c09/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:00:d5:60:d1:e2:41:9f:f0:11:31:a3:2f:80:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 23:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc3647ce47737feafe6e956f46ea9f44301a117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:e8:12:15:1f:03:93:39:5f:7d:20:1f:78:
02:e9:97:93:79:9e:bf:1c:50:a5:fc:e6:97:1b:c7:
3d:f0:0a:a2:2b:3c:49:c7:71:67:af:5e:4b:8c:7b:
d4:6c:3e:22:32:77:2c:8a:29:c4:b3:d7:1d:00:52:
ec:e8:f9:5b:0a:c8:e4:bf:72:5e:3e:6d:6f:73:25:
bd:17:57:8f:50:02:de:00:fd:48:bf:d7:5c:8b:a8:
5b:86:9d:54:6e:99:ca:c3:ba:fc:90:3e:33:5e:c5:
8d:57:8c:a9:2d:07:78:17:58:42:e1:ce:af:8c:19:
47:93:ce:40:89:83:9d:dd:62:35:0f:36:e4:42:20:
6b:37:f2:d9:20:86:21:55:53:ec:ee:1e:42:1f:05:
ae:f9:5a:78:d3:27:72:f3:e2:8a:f5:4a:30:ae:b8:
90:67:8d:3f:d5:bf:7c:a3:ad:cd:61:66:55:b7:75:
53:b0:fe:87:3a:c8:1a:f7:1d:b3:de:0d:a1:d7:0c:
e3:10:6a:1e:ca:39:4d:79:73:8e:e2:74:ca:f5:2f:
47:de:82:2f:f0:9e:cb:1e:00:69:1d:d9:83:53:b9:
6d:81:1b:38:ff:08:de:62:fb:0a:d0:b1:5b:ed:10:
bf:bc:33:a3:1f:64:d5:1b:7e:4e:92:54:ec:c4:8a:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:64:7C:E4:77:37:FE:AF:E6:E9:56:F4:6E:A9:F4:43:01:A1:17
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vMNkfOR3N_6v5ulW9G6p9EMBoRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:40:c1:14:43:78:16:db:90:f0:6d:b4:95:13:f6:fb:b6:13:
7e:43:3a:a3:1b:2e:89:35:00:23:56:28:ed:d6:aa:4f:cd:88:
09:f9:c6:07:11:71:09:32:67:be:04:37:09:12:05:be:12:02:
b3:b7:e4:a8:4e:c5:86:8b:e2:a2:31:e1:6f:30:5b:df:b2:55:
6b:a6:78:95:b5:49:5b:1a:86:ec:29:6c:41:96:1b:f6:87:6e:
94:a6:ed:5a:29:e0:0b:2d:23:2b:45:45:ac:6b:44:1a:8c:19:
7a:f9:78:19:ad:bd:b5:d0:c1:c9:5f:6a:97:81:82:1d:d8:af:
46:6e:09:10:68:0d:81:17:8e:80:71:03:51:7a:ad:a1:95:38:
1a:7a:ee:98:8e:92:f1:5d:13:8b:81:19:a3:35:1e:53:c3:91:
04:00:3f:88:cd:62:1f:b5:d3:2e:66:04:58:2b:85:ad:82:d2:
c2:78:9d:09:0b:98:de:e4:5b:9e:6b:d6:00:a8:91:13:58:33:
7c:e0:23:53:55:bc:e0:ff:f5:8f:03:95:49:3f:58:13:7c:a8:
90:ff:c4:87:f9:54:df:3d:23:3e:e0:f2:bf:b7:67:b5:c2:16:
32:11:2c:b0:c4:1a:fb:80:0b:f9:67:79:7e:f3:2d:85:44:e5:
41:3b:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:15 2025 by rpki-client