Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/DnAKUwMIHy99vFeBmQwxhtW-xOM.roa
File: DnAKUwMIHy99vFeBmQwxhtW-xOM.roa (raw, json)
Hash identifier: oi1I/1cP8DZtPu7zSeqSRa1yGClbXgx3Fjpdmt1+50Y=
Subject key identifier: 0E:70:0A:53:03:08:1F:2F:7D:BC:57:81:99:0C:31:86:D5:BE:C4:E3
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5F9A45AA06B85997C096EC08377295A6
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/DnAKUwMIHy99vFeBmQwxhtW-xOM.roa
Signing time: Thu 09 May 2024 23:04:56 +0000
ROA not before: Thu 09 May 2024 23:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:5f99:9f1d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:9a:45:aa:06:b8:59:97:c0:96:ec:08:37:72:95:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 23:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e700a5303081f2f7dbc5781990c3186d5bec4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:12:39:ff:86:fb:fc:1f:7f:85:88:90:03:
56:51:94:0e:0d:c7:3c:5e:ce:83:a0:07:e6:97:e4:
41:2f:4c:73:ee:ad:43:72:85:02:c3:e1:37:23:8a:
55:a1:4e:f6:b9:81:3e:c0:d4:75:bc:c5:31:94:08:
0a:b9:3b:96:1f:e5:e1:5e:a1:56:bb:56:ec:de:35:
33:d5:6c:1e:02:4b:7f:47:51:e2:48:2d:3f:f0:c0:
e2:61:1e:80:dd:1f:94:0b:7d:e6:2c:4f:bb:b4:86:
b4:21:e9:d1:c2:2e:38:72:fc:06:4c:dd:cc:44:17:
d0:dc:08:7b:be:c4:cd:5a:dd:42:cd:db:d4:4b:59:
66:02:2a:20:9d:ff:21:4b:ba:13:94:e7:c8:f5:a9:
23:02:fc:9c:60:60:a8:56:b5:b5:5d:33:de:f0:8b:
44:11:a0:55:7c:13:d4:96:27:80:3b:dc:0f:59:5f:
f1:63:9b:8a:01:a1:3d:62:76:c3:d6:5d:a8:5c:4d:
f2:68:70:f5:58:ce:bf:b1:68:a0:f4:9c:22:a5:a9:
cc:60:1e:c7:4e:f1:27:e8:06:e8:30:dc:34:ff:58:
d6:16:a8:8c:9c:74:9b:bf:42:d4:0d:30:12:e4:49:
4e:12:c2:d4:aa:33:50:ad:ad:66:68:03:37:e6:01:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:0A:53:03:08:1F:2F:7D:BC:57:81:99:0C:31:86:D5:BE:C4:E3
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/DnAKUwMIHy99vFeBmQwxhtW-xOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:bf:a4:09:0a:b3:c4:85:27:ec:26:04:a9:40:7b:42:52:fc:
0a:aa:3a:04:e3:32:85:94:a4:0f:dc:0d:50:87:ee:18:d2:7d:
08:e0:31:2e:ec:10:2f:53:01:ad:fa:ac:78:28:f7:cd:99:9a:
1d:95:73:0c:ac:1d:8f:ed:4b:96:68:5f:95:0b:f6:ee:d9:4a:
9e:38:08:5b:57:44:df:28:e7:6b:9d:8f:13:a8:90:0f:b2:7a:
e3:ce:cb:56:b8:cb:63:8a:a4:02:ae:0a:0b:5a:a9:4b:ca:da:
f6:7e:54:9f:d9:2d:2b:0f:39:5c:d6:59:5b:38:93:2c:b7:6b:
e0:22:0f:79:90:1b:1b:8e:89:a1:44:e4:f3:21:b3:5a:70:50:
0f:d1:94:1b:cc:37:80:ec:ed:97:42:83:55:30:14:da:4b:58:
1d:64:a4:8e:3c:96:26:b1:a3:55:91:e5:ec:03:25:c9:e5:6a:
07:12:09:1b:91:4b:27:ba:41:a6:14:f0:cb:b4:98:07:1c:24:
7f:ee:fc:15:52:ee:13:6a:13:a3:57:72:ec:85:41:22:71:c3:
f7:3b:23:ba:4c:e3:3a:e6:d1:a8:b6:81:2f:53:ce:e7:9c:0e:
fd:21:c0:e1:40:fb:11:0f:02:88:68:1c:98:e8:48:53:8d:8e:
cd:fd:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:56:48 2025 by rpki-client