Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PujZ7wDQzIoSydsMOgF5iWhGB2Q.roa
File: PujZ7wDQzIoSydsMOgF5iWhGB2Q.roa (raw, json)
Hash identifier: KVfcI842mTmsgN+lr/VtjPfvyXJMcfjnkM02SsZKZUA=
Subject key identifier: 3E:E8:D9:EF:00:D0:CC:8A:12:C9:DB:0C:3A:01:79:89:68:46:07:64
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F35C29B19EAAC48CCEA08789D6787EDBE
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PujZ7wDQzIoSydsMOgF5iWhGB2Q.roa
Signing time: Wed 01 May 2024 20:04:56 +0000
ROA not before: Wed 01 May 2024 20:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:35c1:e8f7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:c2:9b:19:ea:ac:48:cc:ea:08:78:9d:67:87:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 20:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee8d9ef00d0cc8a12c9db0c3a01798968460764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:7e:31:68:1e:9a:e8:ff:29:70:47:fc:12:
6d:76:5d:96:ac:d0:4f:63:d4:7c:8c:15:ba:a2:5c:
e4:b4:65:0a:e9:1d:4f:3a:98:73:e0:a4:73:49:91:
85:4b:a9:13:79:97:c9:2d:30:bc:e7:74:c0:9c:34:
b1:bd:73:13:da:68:4e:29:31:27:d0:b4:c8:27:3d:
88:8a:52:64:33:cd:37:53:44:e1:77:68:1c:8f:f2:
4d:54:5f:c0:3c:6a:4d:06:e3:b2:8d:94:44:50:a5:
dc:6a:98:2f:6a:29:39:38:6a:99:7d:c8:5b:2b:ad:
9b:e4:55:06:f4:eb:0d:21:51:97:78:87:03:0b:3b:
f8:22:be:96:24:b2:ff:c7:fc:1b:65:13:cf:09:59:
08:a2:50:0e:f5:8c:b8:0d:cc:c0:c3:77:29:10:75:
89:f1:c7:c2:e6:8d:23:96:7a:07:03:15:37:c5:ed:
60:20:9d:d8:3e:c7:08:1d:80:46:6e:f3:41:15:5f:
ca:3a:c7:ab:28:07:27:27:f7:4e:86:c6:e8:76:84:
bc:3d:b0:3c:b8:04:39:4e:4c:49:07:7a:68:6c:89:
d9:c2:9d:01:93:77:40:8c:b6:d3:bd:84:4d:75:d5:
a4:a0:8b:6f:49:97:f4:43:f5:78:2f:91:58:94:8b:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:D9:EF:00:D0:CC:8A:12:C9:DB:0C:3A:01:79:89:68:46:07:64
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PujZ7wDQzIoSydsMOgF5iWhGB2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:9b:9c:c5:52:85:ae:30:61:e9:a5:17:9d:6b:94:05:86:98:
d0:13:c7:8f:85:1e:73:d7:d8:39:7c:0d:74:3c:0b:3c:07:23:
43:a3:14:b8:75:cf:06:55:0b:a4:78:e9:ef:17:da:25:df:4e:
3b:75:8a:8d:21:ce:b4:cb:39:bf:c0:1e:2c:9e:4d:86:54:40:
14:f7:be:07:56:ba:95:3c:00:1f:41:29:d9:8f:9e:7f:2c:df:
47:96:42:6d:87:0e:8c:b5:c1:eb:55:17:ec:b0:62:86:59:c2:
eb:14:3a:f4:ff:be:b5:0c:94:13:84:fd:d8:15:44:5f:af:5a:
6b:04:e2:6f:34:b8:8e:49:c3:cb:50:04:34:31:8e:ef:95:4d:
4e:fb:ee:88:aa:d9:0d:77:5b:83:f7:60:05:37:f0:b3:8e:2a:
ea:ab:84:ba:d0:93:9e:d7:06:55:83:67:28:05:8e:c4:f1:d4:
ee:13:0c:d4:7f:16:7b:0a:a9:ff:03:25:be:62:6d:ac:21:1b:
d7:e2:d5:f4:89:30:3d:63:78:52:d2:4c:52:ea:7f:7b:aa:60:
96:01:52:9b:1d:92:e3:a9:81:9f:50:dc:ea:8d:ff:fd:b4:0d:
89:1b:01:0b:94:a8:48:66:49:0d:63:68:bf:95:e7:46:56:eb:
3f:fe:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:19:43 2025 by rpki-client