Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9dxil5LUGrfnh9ZhOPMBe2pgkIU.roa
File: 9dxil5LUGrfnh9ZhOPMBe2pgkIU.roa (raw, json)
Hash identifier: lpxBLl6qrgwXB0NAeyYPGO3LMKxkvaNsf3yUk31rxY4=
Subject key identifier: F5:DC:62:97:92:D4:1A:B7:E7:87:D6:61:38:F3:01:7B:6A:60:90:85
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F1ED1F30FCDAFB36E24361BCC371AFD14
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9dxil5LUGrfnh9ZhOPMBe2pgkIU.roa
Signing time: Sat 27 Apr 2024 09:10:26 +0000
ROA not before: Sat 27 Apr 2024 09:10:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:d1:f3:0f:cd:af:b3:6e:24:36:1b:cc:37:1a:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 27 09:10:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5dc629792d41ab7e787d66138f3017b6a609085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:34:db:a4:72:76:23:b6:01:b2:72:9f:24:
7e:44:41:76:6f:b8:0f:dd:0c:ed:7d:a9:08:2a:14:
a3:6d:62:55:e7:c7:74:d8:1e:e6:9e:69:5d:eb:15:
df:f2:5c:94:47:5a:97:2b:aa:d9:99:1b:9c:d2:c8:
e5:dd:29:84:7c:f3:b6:5f:08:db:06:14:46:43:54:
69:fc:5d:fe:30:66:45:81:c3:9a:60:24:51:a0:4b:
49:e7:19:fa:68:9f:57:09:86:5a:ef:ea:8f:9c:38:
e7:16:79:bf:81:f6:51:07:46:e0:00:ee:6d:c3:6a:
03:28:aa:05:d6:1c:4e:43:c6:da:39:5f:1e:85:f7:
93:48:f9:c1:79:c7:b1:87:12:36:63:88:2d:a4:1a:
8d:62:37:e7:18:24:b2:94:5d:9a:65:b1:1e:9f:11:
2b:e1:75:9f:bd:66:c0:0f:49:6c:70:6e:fe:df:f5:
76:e6:5f:ec:ce:3c:9f:b5:5f:7b:ae:73:7d:0a:30:
b0:65:ef:f5:03:b6:97:37:69:b0:ad:1e:0a:18:86:
ef:be:24:2f:86:fa:1b:48:38:8a:5f:74:1c:ac:9d:
71:74:73:92:69:8b:82:19:7b:13:4a:bb:27:5c:28:
25:c4:25:c0:6c:5c:98:7f:29:72:ff:3d:b0:61:df:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:62:97:92:D4:1A:B7:E7:87:D6:61:38:F3:01:7B:6A:60:90:85
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9dxil5LUGrfnh9ZhOPMBe2pgkIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
1c:8b:d7:9f:a0:2c:8b:92:b1:ae:c8:4b:a6:98:79:1a:f5:fa:
55:43:9c:eb:37:a7:32:ab:c0:5c:15:90:ab:37:96:56:81:ed:
4c:a0:f6:c0:5e:52:ea:e5:b2:5a:b4:b4:f4:d1:ff:ad:d6:74:
4a:85:82:5f:ba:00:c3:49:df:56:50:dc:8a:92:49:ae:01:91:
f6:6d:63:60:7e:02:e3:d1:4b:ca:b0:9e:77:7a:57:8c:ba:a6:
eb:09:61:b1:79:8e:c3:4d:dd:7f:7e:20:b7:cd:8b:56:1f:86:
ec:6e:f2:c8:ba:66:2e:0e:89:bf:66:e5:b6:33:12:12:4a:97:
b2:f0:9e:24:a9:b4:a2:b8:ab:a9:d8:10:d0:1a:0e:8e:ee:56:
bd:f9:7f:9e:0d:4c:ee:6f:b1:a4:83:e4:2c:6c:29:a2:fe:e6:
b9:05:14:93:17:73:ea:76:f3:48:d8:76:27:60:52:70:99:3a:
0b:b5:7f:07:76:27:b5:42:c4:be:fd:3e:2a:72:b5:ca:c3:76:
33:f1:76:ab:dd:ac:7a:27:0e:9b:19:90:c1:7e:3d:fa:80:2a:
37:be:93:ae:6e:15:f7:01:e3:c4:b4:3f:a9:2d:4a:9b:d8:eb:
de:61:12:64:ab:19:32:60:8e:58:29:11:de:f1:09:35:64:60:
75:71:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:05:52 2025 by rpki-client