Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa
File: 7JypcQzKvXSoWeE63YynrkV7nHY.roa (raw, json)
Hash identifier: w1/q1+yZKKyHfHOmoe3IsWP22TlvceYdy0pe71owF98=
Subject key identifier: EC:9C:A9:71:0C:CA:BD:74:A8:59:E1:3A:DD:8C:A7:AE:45:7B:9C:76
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7CD0BCF3B244DD81CA915C438AB8BB87
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa
Signing time: Wed 15 May 2024 15:13:25 +0000
ROA not before: Wed 15 May 2024 15:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:d0:bc:f3:b2:44:dd:81:ca:91:5c:43:8a:b8:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 15 15:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec9ca9710ccabd74a859e13add8ca7ae457b9c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:3c:f6:b1:ae:29:04:bf:33:5e:44:8e:9c:
8f:b5:0e:fd:81:c1:13:7d:bd:83:19:f6:93:36:b1:
81:b1:6d:f0:18:1b:75:70:38:7e:f0:fa:36:d4:9a:
67:27:ca:71:cf:48:b5:05:e9:9b:9c:50:12:83:54:
af:9b:0f:32:96:9e:a4:b5:39:f7:b3:16:13:5c:0d:
a2:ee:c6:95:df:fc:48:18:24:ed:32:53:4e:19:65:
bb:db:af:14:15:fc:97:84:22:cf:f4:41:54:fd:b5:
18:0c:ab:53:db:c1:88:06:ca:b5:46:58:9a:d2:09:
5e:6b:a3:e2:60:7b:b9:48:21:5b:a8:63:dc:57:ad:
9f:c1:d7:cb:fb:1b:ce:98:5c:dd:40:a3:1e:f7:84:
4d:ba:6d:0e:1d:53:c2:e0:eb:04:8f:24:43:e6:db:
39:42:80:6d:8f:99:79:cf:73:ea:ca:46:00:c4:06:
1d:e6:61:85:c9:cd:1f:3c:59:14:b9:77:24:93:48:
eb:5c:b0:df:cf:09:39:4f:28:bf:cf:db:da:8a:5b:
ab:ec:82:ba:d8:5d:5e:84:8a:9a:94:b5:2a:d2:ae:
85:bc:dd:86:3d:ba:fb:1f:b3:19:cb:1c:e7:e4:d4:
1c:ea:d4:4a:cc:aa:ac:cf:0c:32:93:30:25:dd:f4:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:A9:71:0C:CA:BD:74:A8:59:E1:3A:DD:8C:A7:AE:45:7B:9C:76
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:7e:dc:71:97:f1:bb:3e:20:f9:3b:c2:c3:5c:74:74:fc:ba:
11:b1:ea:46:7b:77:a2:7b:87:de:ba:0b:b5:fc:52:01:c1:de:
71:09:df:78:43:5c:2b:cc:d6:2e:17:5b:90:e4:8d:1c:51:bf:
e8:17:09:58:52:e4:24:a1:21:f1:48:4f:f8:83:7b:c9:a7:83:
a7:42:d6:74:0b:51:f9:69:8c:e3:35:ec:e2:c7:5e:f2:02:54:
5c:6a:25:3d:33:62:8e:cf:b4:df:85:e5:32:dc:59:25:3b:67:
a0:7d:a3:da:21:a5:a3:15:c2:15:40:76:ed:3c:2f:f4:6e:ec:
5f:2f:e6:ae:c7:17:dd:59:42:08:65:54:e1:18:5c:e1:dc:16:
d6:08:8d:fc:e9:95:66:24:d8:db:47:b1:c6:f5:0f:03:6f:9a:
fc:80:df:64:04:27:a9:10:dd:4a:a6:9a:cc:db:75:81:e9:f2:
55:e0:53:ec:b3:19:78:65:46:d8:78:a7:b4:85:04:47:27:56:
1b:09:86:35:f3:ab:60:05:12:4b:9b:2c:71:67:41:35:5a:94:
7a:1b:65:dc:15:09:d5:95:52:ff:b2:03:48:ab:72:1a:57:94:
d7:27:a2:6f:10:0b:d0:14:d2:46:88:0d:eb:3d:8a:51:a1:2e:
88:b3:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:32:05 2025 by rpki-client