Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xM5JTa2iDmU6R20ipzRQgVvPKvg.roa
File: xM5JTa2iDmU6R20ipzRQgVvPKvg.roa (raw, json)
Hash identifier: ELa+cY00GkCakknv4mthMsS0ssBWnEu/KZ1xqhPkp+A=
Subject key identifier: C4:CE:49:4D:AD:A2:0E:65:3A:47:6D:22:A7:34:50:81:5B:CF:2A:F8
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5FD133B14BC082B8A8296D4801BA58F3
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xM5JTa2iDmU6R20ipzRQgVvPKvg.roa
Signing time: Fri 10 May 2024 00:04:56 +0000
ROA not before: Fri 10 May 2024 00:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:5fd0:d418/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:d1:33:b1:4b:c0:82:b8:a8:29:6d:48:01:ba:58:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 00:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ce494dada20e653a476d22a73450815bcf2af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:fe:62:e7:54:f6:a1:88:e1:2e:05:14:61:
f9:25:d9:fa:bf:59:4a:0c:f4:9e:07:94:70:43:0c:
85:e6:5f:30:23:5e:c6:b3:0b:0b:f8:7b:ef:48:bc:
37:e4:27:42:12:c2:3d:3a:4c:e5:a8:6b:43:86:55:
86:be:49:22:e0:e5:2a:82:cf:1a:7a:6e:48:e2:41:
08:7a:e9:95:eb:6a:86:d0:83:2b:c1:57:8d:4f:d1:
9a:54:e2:bb:9d:16:a7:97:fe:d3:5c:4e:1b:5e:0d:
a7:2d:bb:17:98:53:5b:97:57:6c:58:3a:94:3a:8d:
47:87:36:04:7e:48:ed:4a:5e:2d:d3:5f:e1:84:09:
f8:92:74:4b:55:56:70:0c:4a:68:45:6e:d7:d2:38:
80:94:ea:92:f6:40:b5:94:80:7e:ef:81:8f:d5:a8:
c0:d8:ef:bb:f0:85:ed:45:d8:02:bc:bd:72:af:09:
02:9e:10:7c:6b:05:49:44:14:61:df:0f:94:1c:df:
c6:6e:b2:e7:1c:64:c6:e0:f5:c0:09:37:ce:23:bf:
0b:7d:1c:6e:01:95:d5:84:46:b9:29:12:64:e9:20:
3c:6c:67:f7:af:ab:4e:7c:fb:11:20:d4:4b:0b:bb:
e7:31:d3:60:c6:19:49:e0:8b:09:72:e3:7b:44:9d:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:49:4D:AD:A2:0E:65:3A:47:6D:22:A7:34:50:81:5B:CF:2A:F8
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xM5JTa2iDmU6R20ipzRQgVvPKvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:39:20:5e:a2:04:e5:e7:e7:da:10:96:23:b7:8f:bb:1c:37:
b7:d0:97:85:94:88:73:7c:78:82:df:a3:87:80:e0:3b:79:1a:
27:ea:64:c0:43:bf:e8:3e:79:0e:16:a5:99:2f:a3:e8:bc:e5:
f2:dc:e7:3a:86:3c:e3:80:cb:9c:c7:56:83:17:85:d8:fd:7a:
28:10:cf:ce:25:fa:06:b2:39:63:ac:d2:5d:5d:ee:c9:14:18:
d2:ce:77:e1:7b:4e:9a:af:ff:6a:a2:b2:6e:60:e9:fb:ce:cc:
36:10:21:a2:2e:5e:93:4e:34:e8:da:02:cd:ae:ed:d8:66:e2:
ac:5e:2f:8b:2d:db:45:4b:27:3a:e2:8c:ac:a1:26:93:42:47:
ab:d0:05:03:26:b2:97:cf:0c:e8:97:d1:93:01:ab:0b:1e:23:
1b:9c:10:ef:b2:1b:4b:50:80:aa:55:de:74:af:a3:7d:81:8a:
ce:b8:1c:ef:53:1b:e0:87:f4:21:2f:52:df:98:00:0b:e3:1a:
fc:6d:2c:f3:f3:b0:f1:ed:ab:f0:38:4e:85:b8:bb:a2:83:ef:
c8:94:bc:2d:b3:ab:8f:23:f3:3c:76:e9:0d:d6:66:d2:39:86:
59:7b:ad:19:81:c1:fc:98:c6:8a:33:01:78:9d:4f:d3:5e:2d:
83:24:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:22 2025 by rpki-client