Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wxnEmEWlzN85pFSt44IboPvEvjY.roa
File: wxnEmEWlzN85pFSt44IboPvEvjY.roa (raw, json)
Hash identifier: roY+4758gQUNHP24pjsz4mcUx80O+0nQ8fAb7NFQaFM=
Subject key identifier: C3:19:C4:98:45:A5:CC:DF:39:A4:54:AD:E3:82:1B:A0:FB:C4:BE:36
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA28CB93E8460CC1F75A8EA0E0AFC6876
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wxnEmEWlzN85pFSt44IboPvEvjY.roa
Signing time: Wed 22 May 2024 23:04:42 +0000
ROA not before: Wed 22 May 2024 23:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:a28c:98d2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a2:8c:b9:3e:84:60:cc:1f:75:a8:ea:0e:0a:fc:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 23:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c319c49845a5ccdf39a454ade3821ba0fbc4be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:af:13:c0:cf:48:8e:22:89:47:4c:52:d6:
3d:5c:6e:cd:e6:43:11:4f:0b:b5:71:70:c8:1f:66:
f6:d9:fb:18:92:72:4b:8f:de:ac:54:f4:d6:9e:63:
6a:a7:95:7b:43:6e:29:bc:16:78:3f:f8:d7:12:db:
bc:13:2f:02:71:2f:24:29:5a:21:9d:10:a7:99:03:
b8:1a:94:43:ce:bf:09:91:8a:db:50:a2:07:db:5a:
d3:c3:7e:7b:33:c6:74:fe:3b:fc:bf:7d:95:b2:54:
a8:98:5a:99:1f:a9:48:ad:3d:26:39:bb:55:09:76:
c9:db:c1:b6:59:ef:dd:8a:1a:d0:b3:39:e1:2d:7c:
12:3c:32:35:d1:5b:53:89:68:16:81:e7:1c:21:8a:
8e:1b:41:2e:ee:36:dc:e1:a3:b0:99:94:95:27:0d:
e5:24:c5:b3:dd:ed:e5:e5:fb:f4:fe:89:fe:47:f5:
e7:02:0e:3e:d1:a0:f6:e0:ae:4d:a2:e3:2e:ac:45:
36:9b:ff:18:c4:80:cc:6c:f6:58:79:0b:ea:2e:32:
71:16:a6:e6:73:c3:c3:d2:19:d3:4b:7f:4e:5d:11:
c0:d8:dd:08:56:75:b6:dc:70:67:77:07:17:b7:e7:
25:05:b3:ce:2a:03:27:43:5c:48:19:91:18:12:87:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:C4:98:45:A5:CC:DF:39:A4:54:AD:E3:82:1B:A0:FB:C4:BE:36
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wxnEmEWlzN85pFSt44IboPvEvjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:89:f9:21:c3:9c:ed:7c:49:83:a8:fb:d2:73:95:35:5f:b8:
f4:02:e6:49:3c:94:e1:29:1d:2e:c1:17:2b:c2:3f:fe:fa:19:
5c:cc:78:53:41:9c:6c:38:df:61:37:9b:2a:11:22:44:6b:dd:
88:a3:87:4b:e9:f4:90:d0:7f:b4:28:22:f7:6e:6e:8f:02:4b:
fb:ad:3b:33:64:37:7a:77:96:21:39:e3:d8:99:2a:69:8a:c3:
f1:e3:84:df:2b:93:92:23:fd:df:73:27:da:e0:b0:35:b8:16:
d6:b0:27:b4:b0:fc:78:7a:ca:83:0d:09:f0:29:6a:71:6c:11:
a5:df:b6:34:c1:57:46:a1:00:61:90:35:aa:e6:aa:34:fd:91:
b0:d6:26:e7:49:d8:0c:d6:5c:ca:c3:72:d7:be:81:94:91:03:
68:c1:f9:34:54:dc:73:4b:80:74:d9:1b:8d:23:65:3e:98:e6:
cc:f3:c2:fa:0f:88:76:a3:8e:5f:35:c8:34:f4:61:1a:b5:6d:
ad:c5:44:c2:5d:2b:e4:24:20:49:11:55:0c:55:86:ed:78:df:
b1:74:40:e3:e2:0f:8b:21:ed:09:f6:96:05:50:c4:b9:03:3d:
51:cd:be:9c:42:67:10:e2:03:7b:e0:d9:c5:63:fe:d4:6b:29:
ed:9d:f2:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+ijLk+hGDMH3Wo6g4K/Gh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTIyMjMwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzE5YzQ5ODQ1YTVjY2RmMzlhNDU0YWRlMzgyMWJhMGZiYzRiZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihevE8DPSI4iiUdMUtY9XG7N5kMR
Twu1cXDIH2b22fsYknJLj96sVPTWnmNqp5V7Q24pvBZ4P/jXEtu8Ey8CcS8kKVoh
nRCnmQO4GpRDzr8JkYrbUKIH21rTw357M8Z0/jv8v32VslSomFqZH6lIrT0mObtV
CXbJ28G2We/dihrQsznhLXwSPDI10VtTiWgWgeccIYqOG0Eu7jbc4aOwmZSVJw3l
JMWz3e3l5fv0/on+R/XnAg4+0aD24K5NouMurEU2m/8YxIDMbPZYeQvqLjJxFqbm
c8PD0hnTS39OXRHA2N0IVnW23HBndwcXt+clBbPOKgMnQ1xIGZEYEodZEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMMZxJhFpczfOaRUreOCG6D7xL42MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvd3huRW1FV2x6Tjg1cEZTdDQ0SWJvUHZFdmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABGJ+SHDnO18SYOo+9Jz
lTVfuPQC5kk8lOEpHS7BFyvCP/76GVzMeFNBnGw432E3myoRIkRr3Yijh0vp9JDQ
f7QoIvdubo8CS/utOzNkN3p3liE549iZKmmKw/HjhN8rk5Ij/d9zJ9rgsDW4Ftaw
J7Sw/Hh6yoMNCfApanFsEaXftjTBV0ahAGGQNarmqjT9kbDWJudJ2AzWXMrDcte+
gZSRA2jB+TRU3HNLgHTZG40jZT6Y5szzwvoPiHajjl81yDT0YRq1ba3FRMJdK+Qk
IEkRVQxVhu1437F0QOPiD4sh7Qn2lgVQxLkDPVHNvpxCZxDiA3vg2cVj/tRrKe2d
8ig=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:44 2025 by rpki-client