Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FWiJ8AcFqZ_aRIY1aEtyrjc2zEA.roa
File: FWiJ8AcFqZ_aRIY1aEtyrjc2zEA.roa (raw, json)
Hash identifier: ccUEznQNBny+VTlY2wLCPJdzjOzStWtXhbnUDlNkfx0=
Subject key identifier: 15:68:89:F0:07:05:A9:9F:DA:44:86:35:68:4B:72:AE:37:36:CC:40
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4D2D786FDB0E3768FE4409AE3A666A74
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FWiJ8AcFqZ_aRIY1aEtyrjc2zEA.roa
Signing time: Mon 06 May 2024 09:12:56 +0000
ROA not before: Mon 06 May 2024 09:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:2d:78:6f:db:0e:37:68:fe:44:09:ae:3a:66:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 6 09:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=156889f00705a99fda448635684b72ae3736cc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:e2:e6:62:ee:65:f9:e6:2a:a5:60:98:87:
2e:3c:3d:b2:09:37:58:6f:ee:ab:bb:9f:c8:e1:4e:
42:aa:3b:93:c0:6d:16:68:b0:11:c6:71:92:f4:cb:
d1:8f:af:4b:cb:0d:b7:84:ee:2b:70:e3:68:ff:aa:
80:4c:c6:8e:c9:41:f1:3d:71:d1:57:1b:80:55:c3:
00:32:cf:41:26:3f:1e:91:e4:89:e2:70:3f:85:a8:
5e:7c:6a:af:f6:52:53:14:0f:ca:12:3e:70:41:d4:
4d:ee:3d:6a:f9:fa:de:9b:d0:98:83:f8:00:c0:39:
9f:a4:fb:16:05:ee:ae:3f:8b:44:09:7f:0d:56:90:
99:a2:aa:f5:21:0c:24:06:85:d3:9e:05:5c:e5:39:
dd:0d:11:24:5d:65:d0:81:b3:12:2e:ba:fd:b0:77:
36:4c:1b:13:3d:7c:24:27:46:8b:18:78:61:d7:3f:
ae:4e:8d:a7:11:af:de:54:b2:d5:43:87:56:ed:45:
64:65:2f:a5:29:5b:d4:32:9a:22:c4:a2:3b:6d:af:
8b:c7:1f:3b:b9:1b:78:83:4c:0d:f4:72:f4:37:d3:
ba:92:51:72:88:51:e6:49:53:c9:2e:b2:f5:e5:83:
1e:2e:84:7d:0f:f5:d7:b3:0d:3b:04:fb:85:cd:15:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:89:F0:07:05:A9:9F:DA:44:86:35:68:4B:72:AE:37:36:CC:40
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FWiJ8AcFqZ_aRIY1aEtyrjc2zEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:e7:ef:5c:9d:2f:2f:e0:ea:9e:cf:3e:ad:77:ac:fa:53:c9:
8a:9b:91:91:ea:50:f8:30:25:14:f4:98:7b:97:cd:73:a7:48:
a9:52:ec:77:ec:07:aa:35:fa:d8:27:3b:3c:2e:f1:32:a5:2a:
9f:9f:04:18:d4:e9:3e:b2:39:02:e1:d5:1a:34:c4:39:7b:30:
4e:4a:4c:38:bd:c9:cf:8f:be:22:70:90:5f:13:19:7f:d4:e4:
bb:17:5a:21:22:25:73:a4:06:d9:ff:44:c3:54:4f:f5:49:ce:
43:af:0e:5d:54:b1:40:2a:58:77:68:97:0c:eb:ee:fb:33:d2:
ee:c5:55:2a:14:79:b7:b2:ab:e1:9e:c0:d5:97:b3:85:13:5f:
6e:6a:ca:69:97:36:07:cd:80:67:ba:ac:73:6a:1a:40:9a:10:
a4:ec:78:68:cf:5c:a7:31:d2:71:f3:34:1a:a8:a9:31:db:fc:
9a:a5:b4:45:f1:cd:a7:a1:82:6f:fb:62:3d:5e:31:e1:7b:cc:
2a:c6:37:78:15:bb:b7:53:a0:86:db:34:a1:94:fb:77:1f:4c:
88:8c:33:4e:d3:80:85:98:ce:5e:4e:b2:aa:ec:16:7d:6d:c7:
d8:d0:ab:d5:61:90:44:04:3c:3f:4c:f1:57:cf:0e:96:98:bf:
b8:70:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:10:20 2025 by rpki-client