Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9jhlL6y9hgwSRJ8QxDCt_dJTpYw.roa
File: 9jhlL6y9hgwSRJ8QxDCt_dJTpYw.roa (raw, json)
Hash identifier: zDo+YBI0C8klWCy+ollaAl//1P0Pgskb8hktfF1e8XQ=
Subject key identifier: F6:38:65:2F:AC:BD:86:0C:12:44:9F:10:C4:30:AD:FD:D2:53:A5:8C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA6D75CEAD2835DD819D1832EC32BDEFC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9jhlL6y9hgwSRJ8QxDCt_dJTpYw.roa
Signing time: Thu 23 May 2024 19:04:42 +0000
ROA not before: Thu 23 May 2024 19:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:a6d6:f734/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:d7:5c:ea:d2:83:5d:d8:19:d1:83:2e:c3:2b:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 19:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f638652facbd860c12449f10c430adfdd253a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:22:4f:8e:9f:eb:e3:5a:d3:fb:ea:ee:fd:
3d:9b:8e:64:3d:3d:71:a7:91:f5:55:bb:41:e9:15:
67:40:03:f1:80:72:17:1a:7b:19:2d:dd:c0:e2:39:
88:ed:a9:d0:69:a0:1d:6f:3d:1d:ac:4f:62:56:be:
4a:a2:09:0a:da:dc:02:6b:60:39:08:4f:d7:c2:68:
fb:07:1e:f1:17:e1:80:e7:2f:b3:2a:d6:eb:05:b0:
46:c7:ba:74:ec:8b:29:a1:3b:81:53:f1:0a:2d:e0:
e7:a1:25:d8:e5:1e:58:4a:02:08:58:8d:a6:68:7f:
ec:c6:6b:aa:39:fa:2c:c9:5c:b2:d2:60:c1:85:f3:
d8:05:66:61:74:74:bf:85:13:e4:e8:0e:69:92:db:
70:71:90:bb:6f:87:ed:8e:c8:ed:2a:c4:9b:b8:ac:
b9:4e:e2:e9:a5:0b:9b:19:15:b5:b2:b1:11:af:90:
32:20:9e:ab:60:84:bc:4a:27:69:02:89:62:c6:ec:
9b:f5:26:b2:73:dd:62:50:48:f3:3c:d0:74:19:f3:
c7:13:72:5e:fc:8b:c4:f3:78:ec:35:ee:81:e3:f6:
b4:7e:a7:5c:4d:c8:a3:d0:94:24:39:a8:a6:97:d4:
1d:79:59:14:f1:46:77:03:67:c1:47:45:58:0e:f9:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:65:2F:AC:BD:86:0C:12:44:9F:10:C4:30:AD:FD:D2:53:A5:8C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9jhlL6y9hgwSRJ8QxDCt_dJTpYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a4:0d:bd:ff:f3:b3:a3:62:33:9e:3e:92:9b:ee:d9:e7:30:
0f:6c:64:44:69:0a:89:40:15:36:74:6a:d3:d0:3a:a0:a3:36:
bb:a6:a2:f3:46:a3:8d:7e:7b:79:24:5e:fa:46:6b:a3:8c:d0:
dc:ac:be:54:6b:57:31:d1:b4:75:7b:02:04:13:97:76:08:38:
40:26:35:97:9d:22:c0:a4:7e:d2:c2:4e:5f:ec:59:76:fd:db:
f5:5b:85:1c:48:8e:24:5c:2a:a6:79:20:e7:cc:ef:ac:b7:63:
88:78:9c:cd:13:66:0a:98:71:51:c8:39:77:a1:65:9c:86:e4:
ee:f1:e2:a4:17:34:9d:38:60:13:1d:2b:c2:79:15:9b:ba:ae:
80:79:f2:2e:16:89:85:fb:5b:17:72:cf:72:a2:20:72:69:b2:
31:56:b0:c0:ab:0a:b1:f9:5e:e2:e9:9d:42:8d:66:8e:5e:61:
c5:37:f8:c6:a7:ae:4d:3e:ae:12:ae:0c:1f:0b:af:64:cb:d9:
81:1a:f4:1b:6c:c6:5b:eb:23:5e:e4:22:90:29:a2:50:52:8c:
c6:dc:6a:79:8d:f2:e6:f0:63:35:48:4a:9f:a5:e9:bb:7c:e2:
60:f8:25:56:02:6e:3b:c1:a5:95:cc:b5:1d:bd:02:e8:f0:f0:
41:69:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:34 2025 by rpki-client