Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZxQ40FNMdLYVqbNdNTQBMcz1Ns.roa
File: wZxQ40FNMdLYVqbNdNTQBMcz1Ns.roa (raw, json)
Hash identifier: a74j7DX9vMaK+smoPQL4mPNjbaXgEQ4yXUrGNNn9+oc=
Subject key identifier: C1:9C:50:E3:41:4D:31:D2:D8:56:A6:CD:74:D4:D0:04:C7:33:D4:DB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F14180172CDFB96A2119C99214F77907E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZxQ40FNMdLYVqbNdNTQBMcz1Ns.roa
Signing time: Thu 25 Apr 2024 07:11:08 +0000
ROA not before: Thu 25 Apr 2024 07:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:18:01:72:cd:fb:96:a2:11:9c:99:21:4f:77:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 07:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19c50e3414d31d2d856a6cd74d4d004c733d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:b9:97:de:6e:09:73:6f:47:57:30:4e:58:
1b:53:92:ee:5b:73:59:a5:d3:f5:15:19:e1:c8:a0:
23:05:a5:57:3b:bf:69:82:44:75:bb:bc:6e:c7:da:
64:6e:13:88:87:77:c0:80:ca:4f:ff:69:a9:96:64:
5e:a4:e9:4b:7b:58:2c:26:af:f3:84:e7:18:06:52:
ee:1e:2f:69:dc:81:17:96:3f:ef:1b:55:a3:78:a6:
1f:80:d8:0c:8a:44:51:91:08:89:be:37:74:78:51:
c2:0c:f8:29:f8:c6:38:ea:26:65:9b:6a:ef:c2:96:
a0:45:48:40:cd:14:11:17:dd:42:a6:00:55:22:5a:
23:6e:1a:f1:a6:b7:a0:5c:1f:60:df:be:52:32:77:
10:de:87:a6:24:4c:5c:73:46:9a:90:0e:fd:96:34:
65:ac:9d:88:b0:b5:98:07:0f:a0:2b:ce:b0:11:56:
e0:ef:8d:cf:d0:3d:2d:6c:6b:d9:e2:54:e4:65:f3:
1c:44:37:59:98:da:b2:eb:5a:7e:46:e2:11:8e:e8:
04:49:fe:e5:ae:05:c7:97:98:a2:ef:5d:db:0d:44:
7d:4d:79:93:3f:f2:02:0b:39:e1:ff:d0:e9:4e:f9:
3f:df:12:75:20:e4:f0:b0:b9:f8:5b:5b:5d:19:a4:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:50:E3:41:4D:31:D2:D8:56:A6:CD:74:D4:D0:04:C7:33:D4:DB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZxQ40FNMdLYVqbNdNTQBMcz1Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
33:c7:1c:9f:dd:31:62:16:16:64:95:03:14:fd:3f:98:f7:33:
cf:98:5c:f3:13:d2:bd:0e:60:33:99:d2:c1:ce:0c:08:36:30:
7e:f9:a0:b2:9b:96:d7:fd:03:cf:eb:cb:ee:28:57:a4:af:42:
96:3d:92:08:82:3f:0a:59:04:a1:9a:34:1a:8e:e1:d1:bd:81:
36:bf:22:90:f8:bb:b7:c2:40:80:5a:b7:09:64:7d:f8:f6:41:
ef:2c:47:2f:b9:bf:3a:fc:d6:29:ef:72:44:28:14:d4:b8:ba:
ca:95:dc:5c:9f:db:ca:db:41:58:73:4c:b7:4f:3c:3f:c0:fe:
f5:e8:59:61:79:f0:01:e6:20:4e:3d:77:99:2b:0b:de:12:6c:
00:da:e0:c5:b9:a7:39:09:ce:a3:8e:20:4f:ea:ae:c9:1e:d2:
6d:18:cf:8a:ff:16:07:23:d1:b6:ac:cd:4f:ee:6d:88:2f:7b:
2c:7b:77:d3:68:27:2f:9f:2c:ac:a1:92:c2:f1:42:92:40:87:
e8:2c:9f:76:ff:c5:98:b8:a2:c8:bf:00:e4:fd:6a:1c:9d:77:
19:53:dc:fa:bd:9f:9e:f2:00:ab:fa:5f:a9:16:ba:3b:9f:4e:
c3:dc:bd:75:ea:03:5b:a0:3a:63:0d:1d:5e:cf:32:62:2f:16:
4a:b3:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:04 2025 by rpki-client