Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa
File: K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa (raw, json)
Hash identifier: jAYl8QrT2Omt3uw3NZ32xdrDm0/3yADmZF9jFbBLI8k=
Subject key identifier: 2B:62:57:AE:9D:89:E5:ED:BE:57:B5:FF:32:C3:A7:B3:19:9B:C3:51
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F80376924D5E49D9E5C53775A1C0AB172
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa
Signing time: Thu 16 May 2024 07:04:25 +0000
ROA not before: Thu 16 May 2024 07:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:8037:3e38/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:37:69:24:d5:e4:9d:9e:5c:53:77:5a:1c:0a:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 16 07:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6257ae9d89e5edbe57b5ff32c3a7b3199bc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:5d:3f:ed:5b:8b:e6:80:f4:96:56:89:05:
0f:56:36:11:4d:cc:dc:fc:9c:a8:8c:f2:25:a5:27:
2a:5f:51:5d:93:59:04:65:fc:89:83:6d:5c:64:8a:
85:3a:2e:61:4e:5e:28:d0:14:1c:a7:b4:b5:ac:b6:
81:0b:e6:d7:a4:c4:a0:06:c5:b3:57:9d:e5:10:3d:
94:3b:be:37:e6:79:42:e5:7b:ca:28:0d:94:84:9e:
ee:1f:68:a5:43:7c:43:a7:91:aa:bf:29:bd:9b:12:
c1:fd:c9:98:7f:6d:59:b2:c4:c8:50:62:dd:9f:86:
dc:42:2e:fb:6f:db:15:2e:ee:1c:ba:d1:27:1c:22:
f8:f0:26:08:ea:fd:be:aa:f4:e6:81:df:79:af:ba:
0e:10:6a:1a:a8:59:26:21:31:85:52:96:42:a8:84:
2f:c7:72:18:54:8a:02:dd:09:fa:3a:0c:6a:df:3e:
55:f7:31:b0:4f:28:07:be:8b:2e:f5:86:63:77:18:
0a:c8:d5:e1:71:62:b4:43:1a:14:86:98:2a:c0:eb:
5d:7a:08:3a:ca:9f:99:a1:22:ef:c3:01:af:59:8b:
cf:b8:43:58:44:0b:fc:8a:77:a9:a3:01:08:8a:f3:
be:e5:4e:7c:8e:92:11:fc:a6:01:bc:b3:b7:83:c7:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:57:AE:9D:89:E5:ED:BE:57:B5:FF:32:C3:A7:B3:19:9B:C3:51
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:05:49:b5:eb:3d:d7:28:d8:bd:79:2d:6b:b8:bd:2a:dc:60:
f4:82:ab:ee:06:cb:4e:62:25:60:2c:36:0e:3c:15:7f:e3:56:
20:80:87:b6:2c:4b:31:e6:14:0e:1d:0e:47:ee:32:de:07:b3:
cb:33:aa:bf:29:d0:3a:7d:07:17:d0:0d:0d:7c:c1:fc:8e:be:
3d:c5:a0:bb:c7:25:c2:7d:2e:6a:f6:e6:1e:bf:db:96:a1:6f:
4f:18:cf:70:0b:b8:91:a3:1e:39:d2:a4:22:01:fe:42:76:69:
f3:9a:65:a4:67:d5:6f:33:ab:4a:63:2a:a6:b2:64:61:c4:a5:
0b:76:35:a0:eb:5d:75:6a:e8:5d:20:5d:56:c1:f8:00:f0:1d:
bc:20:6b:d7:83:0d:ab:af:d8:8b:83:20:bb:c8:d3:a7:e2:04:
bc:a2:f5:5c:12:18:08:b9:19:17:bd:74:6a:1a:02:c1:13:ee:
fb:a5:41:68:ed:e1:9c:32:30:35:66:5a:35:59:1a:1a:02:45:
f2:ac:4d:90:fb:6a:dd:9f:fb:1e:89:fb:60:e1:e6:7e:76:5e:
a3:bb:fc:f6:a6:34:d9:bd:fb:aa:d8:bf:b5:3b:2f:7f:81:ef:
3c:6f:34:77:a6:68:cb:42:e7:d6:44:2f:8f:52:ed:ff:98:59:
10:48:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:30:28 2025 by rpki-client