Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JPVlGXZgQ758ijncJ8SZsHxeqoo.roa
File: JPVlGXZgQ758ijncJ8SZsHxeqoo.roa (raw, json)
Hash identifier: ZkO4zruWfq/lfD9KN8jNW+/79EIqgCNHawY+Vxsn/s8=
Subject key identifier: 24:F5:65:19:76:60:43:BE:7C:8A:39:DC:27:C4:99:B0:7C:5E:AA:8A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F220BC2009513814F71F5556BDED72F0A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JPVlGXZgQ758ijncJ8SZsHxeqoo.roa
Signing time: Sun 28 Apr 2024 00:12:26 +0000
ROA not before: Sun 28 Apr 2024 00:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:0b:c2:00:95:13:81:4f:71:f5:55:6b:de:d7:2f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 28 00:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24f56519766043be7c8a39dc27c499b07c5eaa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:ce:31:8e:40:7a:4f:c0:92:f8:b2:58:e7:
a2:df:08:e9:0f:42:0b:5c:49:91:ad:d0:12:fb:f3:
82:4a:1b:0a:36:35:73:1c:fe:ba:1f:51:11:b2:c1:
15:ef:91:01:f7:2f:de:ec:7e:e6:f3:2c:91:3a:a7:
30:c9:0f:45:b6:14:bc:c9:2c:2b:94:5e:7f:36:e8:
d3:f8:ce:ab:e3:50:f0:ef:8d:9e:5f:e8:27:90:4a:
8b:dc:6f:1b:56:e9:9f:92:a1:da:25:47:56:44:86:
5a:cb:6b:c0:2b:31:66:a0:3e:c5:a0:f5:fb:54:5e:
f5:8a:40:d3:e7:38:97:dc:f6:a1:18:af:a4:81:65:
62:81:51:c5:b5:a1:92:54:eb:ae:36:1b:a1:42:8a:
12:42:0f:5d:45:22:d6:a0:61:d1:5f:91:cb:0f:54:
79:ed:1a:f3:55:3b:72:18:c4:ca:26:39:ec:4e:8a:
88:6d:74:6d:63:ff:fa:49:23:e2:1c:f1:b8:94:c2:
d2:7c:da:51:6e:b1:08:b0:63:52:4d:55:94:70:69:
d6:00:d9:08:2a:bb:97:ab:7c:08:0f:f6:73:c0:5f:
26:72:d3:73:9e:b6:ad:6f:0a:7c:22:9b:8d:a5:ff:
02:81:74:33:3e:df:2c:65:ca:58:af:05:76:33:89:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:65:19:76:60:43:BE:7C:8A:39:DC:27:C4:99:B0:7C:5E:AA:8A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JPVlGXZgQ758ijncJ8SZsHxeqoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
ad:5e:e0:70:3f:9d:4d:53:2a:4a:14:41:aa:c3:20:82:07:70:
6a:d3:7c:91:b7:a2:b8:19:e7:d6:0e:0f:c4:ce:93:d0:ac:07:
3d:25:33:71:54:ce:b4:09:af:b1:3d:3a:3f:ee:d6:9c:74:23:
07:13:6d:90:10:34:a3:85:95:79:e2:08:7d:71:cf:cf:c8:83:
1d:fc:c7:de:3a:cf:e9:2c:d9:dd:61:5f:86:75:4d:cf:28:8e:
23:65:71:38:a8:c8:3b:7d:96:be:9f:d6:ef:bd:1b:3c:5d:5c:
f1:97:e0:40:9e:cd:b1:5d:9f:df:4a:39:fe:51:6d:3d:ba:cf:
1b:9d:73:a2:a2:12:a2:96:2e:c0:02:d0:60:db:da:7f:bc:93:
3e:1d:ff:7a:5f:b6:38:e6:52:f9:46:1f:31:ac:7c:e1:46:92:
c9:67:83:be:0e:a5:75:31:81:0e:fa:1d:f5:48:33:9d:cb:70:
2e:6e:88:22:e3:00:39:88:e6:36:b4:00:e2:c5:ec:dc:4f:1c:
47:55:7d:e7:2c:c7:4b:09:73:cd:c5:8a:11:4c:99:dc:c4:a3:
e8:4f:88:fb:b3:cc:dc:c7:dd:82:4b:bd:66:e7:a7:75:15:b1:
63:71:76:95:15:5f:65:22:1a:b7:ed:24:d0:66:61:32:1e:db:
28:5a:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:52:28 2025 by rpki-client