Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xPAEhvMafIWxtZztQDPr6Zcf0LY.roa
File: xPAEhvMafIWxtZztQDPr6Zcf0LY.roa (raw, json)
Hash identifier: Z4L2bmEm5jaoWv38QDOcSF+ea6bKyX8XYurjzPVxHy4=
Subject key identifier: C4:F0:04:86:F3:1A:7C:85:B1:B5:9C:ED:40:33:EB:E9:97:1F:D0:B6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8C7A6D1DC4254DD440E380C7649C140A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xPAEhvMafIWxtZztQDPr6Zcf0LY.roa
Signing time: Sat 18 May 2024 16:13:04 +0000
ROA not before: Sat 18 May 2024 16:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:7a:6d:1d:c4:25:4d:d4:40:e3:80:c7:64:9c:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 18 16:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f00486f31a7c85b1b59ced4033ebe9971fd0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:c4:7b:54:ae:a2:ba:7e:93:e9:d3:df:ac:
58:6b:a4:c8:a6:2d:01:54:83:f2:32:db:4b:bf:5d:
d9:1c:62:08:6b:40:4e:49:d0:e5:95:2d:d6:2b:98:
5a:52:1d:53:d6:df:ee:d7:fb:7b:44:0d:4a:88:4b:
d0:10:4e:1a:b8:14:09:bd:31:42:fe:59:24:ac:f9:
91:6f:d9:0d:ab:58:45:99:7d:67:41:2d:df:c9:52:
fc:b3:da:81:b3:74:81:7f:4c:26:66:5a:32:00:5d:
65:ab:13:78:2b:81:ca:28:a0:ad:af:4b:c7:f1:84:
4d:34:b5:dd:1c:e3:8a:11:cb:91:22:85:38:0f:18:
d2:7e:c7:19:47:d7:2c:b5:76:5b:86:3f:42:92:d6:
b1:dd:b3:8c:22:2e:82:b3:21:df:f9:98:3f:a8:d9:
76:d3:a2:a3:22:30:16:89:26:13:87:c7:93:e3:93:
01:36:13:56:ec:13:a1:f5:7f:97:4b:c1:4a:12:9d:
b0:2c:8a:50:7e:15:44:57:79:98:84:5a:38:bc:c1:
83:bc:32:a8:f7:f4:d8:af:6f:c6:61:89:7d:ca:61:
c1:2e:bb:bb:56:58:04:c5:70:bb:5f:1d:3e:15:e4:
25:d5:10:78:03:03:06:e8:18:f4:be:68:10:cc:02:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:04:86:F3:1A:7C:85:B1:B5:9C:ED:40:33:EB:E9:97:1F:D0:B6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xPAEhvMafIWxtZztQDPr6Zcf0LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:9e:af:63:1f:0b:4f:4e:fe:66:0c:d6:f1:ba:6b:d1:15:4c:
d9:2d:14:49:1f:ca:26:27:67:34:17:ab:ac:fa:eb:dc:7d:b0:
44:fe:64:0e:80:65:c7:5f:b5:63:d4:0d:a9:c2:6f:ed:24:2b:
65:c1:b3:88:dd:71:c6:77:41:dd:03:ae:5e:e7:7b:3c:07:29:
a7:31:f4:7d:cf:0a:72:ad:0f:20:b0:a2:dd:b2:3b:83:22:22:
88:a9:0b:dc:73:7e:2b:52:dd:b7:44:5b:e3:e5:8c:54:78:26:
05:3e:5d:1d:8d:12:42:55:13:18:cf:cf:48:b4:a3:9e:82:29:
16:1b:1b:6d:da:2b:4c:98:c7:ba:9a:a6:17:ed:2a:f6:8b:d4:
fe:e5:3b:a0:33:fb:d8:1d:4b:e5:4d:eb:df:b9:8c:8c:66:fa:
12:9d:08:b5:1a:d9:a1:31:ce:b4:cb:de:a4:d2:2a:29:37:39:
48:4d:86:5b:99:20:f6:89:c4:1f:42:80:e8:aa:72:4a:46:50:
77:39:40:cf:f1:39:f1:63:a3:89:a9:df:b7:05:20:56:72:7d:
0a:7d:ff:2f:cf:e4:0b:03:6c:d6:c8:b4:28:0f:21:11:69:d9:
bf:44:95:fa:62:c1:ee:75:10:1d:10:c0:8b:69:f0:87:99:21:
06:2d:da:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+Mem0dxCVN1EDjgMdknBQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE4MTYxMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGYwMDQ4NmYzMWE3Yzg1YjFiNTljZWQ0MDMzZWJlOTk3MWZkMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AvEe1Suorp+k+nT36xYa6TIpi0B
VIPyMttLv13ZHGIIa0BOSdDllS3WK5haUh1T1t/u1/t7RA1KiEvQEE4auBQJvTFC
/lkkrPmRb9kNq1hFmX1nQS3fyVL8s9qBs3SBf0wmZloyAF1lqxN4K4HKKKCtr0vH
8YRNNLXdHOOKEcuRIoU4DxjSfscZR9cstXZbhj9Cktax3bOMIi6CsyHf+Zg/qNl2
06KjIjAWiSYTh8eT45MBNhNW7BOh9X+XS8FKEp2wLIpQfhVEV3mYhFo4vMGDvDKo
9/TYr2/GYYl9ymHBLru7VlgExXC7Xx0+FeQl1RB4AwMG6Bj0vmgQzAKy0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMTwBIbzGnyFsbWc7UAz6+mXH9C2MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEveFBBRWh2TWFmSVd4dFp6dFFEUHI2WmNmMExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFOer2MfC09O/mYM1vG6
a9EVTNktFEkfyiYnZzQXq6z669x9sET+ZA6AZcdftWPUDanCb+0kK2XBs4jdccZ3
Qd0Drl7nezwHKacx9H3PCnKtDyCwot2yO4MiIoipC9xzfitS3bdEW+PljFR4JgU+
XR2NEkJVExjPz0i0o56CKRYbG23aK0yYx7qaphftKvaL1P7lO6Az+9gdS+VN69+5
jIxm+hKdCLUa2aExzrTL3qTSKik3OUhNhluZIPaJxB9CgOiqckpGUHc5QM/xOfFj
o4mp37cFIFZyfQp9/y/P5AsDbNbItCgPIRFp2b9Elfpiwe51EB0QwItp8IeZIQYt
2qU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:25 2025 by rpki-client