Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa
File: 9t0d6CakWnYx8204AbG_4Nd9FIA.roa (raw, json)
Hash identifier: ZOWhMXn3RR/DIWhb2rXOVQ+SsMAP01AM+d+9qb+8PMs=
Subject key identifier: F6:DD:1D:E8:26:A4:5A:76:31:F3:6D:38:01:B1:BF:E0:D7:7D:14:80
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F562FAF311F87FC584AD9F00EB1CD596B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa
Signing time: Wed 08 May 2024 03:11:56 +0000
ROA not before: Wed 08 May 2024 03:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:56:2f:af:31:1f:87:fc:58:4a:d9:f0:0e:b1:cd:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 8 03:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6dd1de826a45a7631f36d3801b1bfe0d77d1480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:dc:1a:b4:1b:d5:93:d8:ed:dd:e1:56:7c:
ef:0e:83:27:a0:02:35:33:48:60:91:bf:1a:ba:98:
af:c6:0a:45:af:b2:82:d6:e4:44:45:49:1b:7d:ac:
9b:b8:03:cf:ac:a1:01:5f:61:18:1f:1b:9a:af:e2:
93:31:4a:ad:67:e8:65:85:10:c3:ba:76:0a:95:ff:
e5:d7:dd:d8:71:a4:ee:25:59:0e:b3:d4:cc:cc:aa:
8d:a6:16:01:07:54:32:20:19:e5:a7:a5:2e:32:61:
15:1c:f0:1c:0d:45:29:df:f8:c9:5d:98:8f:e8:3e:
1e:34:8b:7c:5b:ef:f6:c5:10:aa:8c:10:08:b6:c5:
d7:e0:c8:05:7d:6b:04:e1:8c:f6:f6:c1:51:a5:7e:
eb:c3:e8:31:56:24:38:26:38:a4:7c:e6:ec:11:a6:
89:47:5f:3d:8e:89:5b:79:79:00:af:66:e9:15:f1:
2a:ed:63:34:86:61:cf:26:81:64:d8:5d:08:cc:02:
62:8e:07:e1:d7:b4:3c:d4:39:5d:ee:76:1d:ec:17:
3e:27:ea:dd:34:0c:c6:6e:d6:f3:ec:7b:92:dc:a7:
2e:68:cf:e4:31:89:55:6e:6f:2a:b5:84:af:bf:6b:
a5:fa:01:3e:b4:c8:c5:1f:06:36:7e:1c:2b:b4:46:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:1D:E8:26:A4:5A:76:31:F3:6D:38:01:B1:BF:E0:D7:7D:14:80
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:42:6c:45:07:81:a2:d8:b3:6f:5b:aa:59:54:6e:39:d9:3f:
f6:73:6e:80:37:cf:e0:c3:16:dd:ba:25:2a:a7:3a:86:a5:74:
3e:00:36:fd:e3:a9:dc:4a:05:e3:79:03:ad:e5:14:b0:86:bd:
cd:6b:77:26:47:df:f7:19:2f:dc:5a:16:57:1c:4b:55:d4:0d:
9e:00:06:d4:1a:3d:22:fd:f4:89:7b:64:f4:9d:bb:cc:04:cd:
01:26:be:d9:db:e4:61:41:b6:ef:97:6b:2d:bd:b8:af:d5:43:
8d:ba:40:5b:0a:5b:3b:73:55:64:59:74:dd:99:7f:07:30:a1:
a6:6b:13:88:8a:35:b5:f8:bf:9e:9b:b1:ec:94:03:55:8b:91:
75:dd:05:c3:1b:d9:02:21:72:1e:b3:9f:e9:5e:07:a4:29:79:
bb:dc:72:5f:38:48:40:c1:83:9f:94:f1:31:2e:22:f0:47:02:
13:74:5a:0a:7a:20:38:40:7c:01:f9:51:c4:9a:07:b7:7f:91:
6e:c9:77:5c:9a:d8:b6:2d:3a:f4:4c:81:77:53:a2:3d:f8:6d:
7f:4d:08:08:16:93:bb:32:7b:e1:ba:68:2e:e8:23:d7:93:e1:
7f:09:9e:ef:bf:fb:35:fe:76:e8:e7:44:ee:55:10:77:9c:73:
b0:b3:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:52:43 2025 by rpki-client