Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dNpILBpuAtXfGkcfNdlMmg1B_O4.roa
File: dNpILBpuAtXfGkcfNdlMmg1B_O4.roa (raw, json)
Hash identifier: Kb5qvn9BFVX83TtLFGIfyEEs6+JfKCEnlvfExBWmxwI=
Subject key identifier: 74:DA:48:2C:1A:6E:02:D5:DF:1A:47:1F:35:D9:4C:9A:0D:41:FC:EE
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9BB3D3FAEDDD9CD1B25200A26760230C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dNpILBpuAtXfGkcfNdlMmg1B_O4.roa
Signing time: Tue 21 May 2024 15:10:04 +0000
ROA not before: Tue 21 May 2024 15:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:b3:d3:fa:ed:dd:9c:d1:b2:52:00:a2:67:60:23:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 21 15:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74da482c1a6e02d5df1a471f35d94c9a0d41fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:a1:3b:c3:89:8b:f3:a4:39:a9:b3:7a:f0:
e1:f6:29:77:e3:fa:4a:7f:f9:a8:b3:fb:2d:93:f5:
91:7d:e1:c8:47:30:b6:ce:5f:26:17:b7:e0:6e:bc:
0e:73:ae:63:84:f3:d4:0d:78:81:57:29:f1:1c:7a:
fe:2f:ab:c5:97:0e:30:ab:a2:0a:6f:39:ed:7f:d0:
49:19:42:b5:d2:1d:ea:4a:de:c7:fd:3c:3e:4b:63:
20:37:5a:30:9b:3e:a3:33:88:57:d6:27:d4:52:25:
79:4b:d2:82:e7:e8:62:49:7e:e1:81:67:84:20:25:
d5:b1:3a:c2:2d:b8:d5:8c:69:80:e2:15:c4:f0:33:
2c:1c:a7:92:cc:38:03:ce:e1:5c:97:df:a6:e7:e8:
bf:3b:15:b4:68:08:4e:f3:6b:b9:2a:fd:56:b7:d1:
a2:5c:6e:99:5f:43:5a:59:56:5a:12:b5:4d:94:94:
8d:9f:c4:fb:3d:64:e1:08:d8:86:ac:86:88:03:93:
40:8e:c3:63:99:dd:d6:f3:e0:90:a6:e8:49:dd:5b:
23:33:90:37:dd:28:b7:63:65:ea:72:1e:03:65:15:
6d:e7:e0:59:72:52:83:3e:05:75:c0:28:45:4f:c3:
c4:ae:c0:9d:fe:c6:1e:a0:39:eb:be:d7:4c:e1:1c:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:48:2C:1A:6E:02:D5:DF:1A:47:1F:35:D9:4C:9A:0D:41:FC:EE
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/dNpILBpuAtXfGkcfNdlMmg1B_O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:a3:e0:50:a4:e7:20:eb:a7:89:c3:6e:af:c2:90:19:1f:7f:
ae:4e:fb:3a:56:80:aa:99:73:1c:f1:5f:88:07:71:52:90:ae:
78:cb:4e:4f:fc:3f:d9:87:0b:35:81:01:26:8f:49:a8:47:da:
86:07:ed:81:83:56:d2:39:51:ee:ac:06:7e:ad:97:a9:05:9f:
5e:6c:38:a9:22:69:ca:bf:ee:02:c2:c0:91:cf:69:6a:02:e4:
0f:b2:34:a2:51:6a:2d:2f:c5:e4:6c:2a:b9:93:43:c1:29:80:
cf:6b:c5:71:39:aa:83:c7:87:1e:d1:e1:09:3f:9f:46:23:24:
f5:80:48:c9:a1:f1:c6:97:90:d1:19:da:7e:fe:fb:6c:27:61:
45:ea:27:b3:48:32:94:78:1d:38:92:29:62:52:df:f0:b7:ec:
fe:be:8f:74:a5:d8:13:3a:77:61:5c:43:72:a0:96:a1:88:9f:
69:78:2f:65:14:89:09:f1:4b:d2:8f:02:70:fa:b3:a3:85:70:
f2:0e:1a:ff:7c:84:c0:7d:99:3a:ab:27:22:be:8f:6e:20:91:
dc:fb:3f:4d:97:29:b6:81:28:34:47:53:4e:19:b0:8b:fd:82:
8b:e3:56:b2:a6:d1:c4:34:45:47:c6:32:4b:eb:a9:86:d4:dd:
9b:35:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:38 2025 by rpki-client