Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fwOgQVoEijk-qtIX-jCA2IyQIHE.roa
File: fwOgQVoEijk-qtIX-jCA2IyQIHE.roa (raw, json)
Hash identifier: WOeqG1ckE7Kqc7YcV6JrG8qo3VxTVYs3zKzPRCiAlBI=
Subject key identifier: 7F:03:A0:41:5A:04:8A:39:3E:AA:D2:17:FA:30:80:D8:8C:90:20:71
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F94330C5CCEF26E325173929E280E4F6C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fwOgQVoEijk-qtIX-jCA2IyQIHE.roa
Signing time: Mon 20 May 2024 04:12:04 +0000
ROA not before: Mon 20 May 2024 04:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:33:0c:5c:ce:f2:6e:32:51:73:92:9e:28:0e:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 04:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f03a0415a048a393eaad217fa3080d88c902071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:51:0c:fe:23:48:fc:10:88:e1:18:ec:c8:
fa:5e:42:bb:40:9c:0c:41:f2:1f:ab:06:73:89:72:
89:85:fa:61:61:e9:39:c0:da:99:e2:02:4e:83:bd:
f4:1e:9e:00:b5:b8:b7:85:5d:cb:86:fa:f6:ed:ee:
d3:9f:17:4c:04:0a:a3:8c:25:36:c9:9c:e2:65:55:
dd:ad:b2:80:b0:4f:c2:16:16:b8:13:ce:7b:0a:2b:
c8:a5:8d:b8:a0:fe:e6:3e:f7:6e:fd:6d:27:94:f0:
d1:3c:08:4c:d0:1b:4a:5f:3b:d4:16:69:c4:12:b9:
7c:62:f5:5c:e3:69:ab:a8:7f:4d:4e:fa:23:4c:ff:
e8:34:cc:4d:7e:33:bf:b3:20:9a:e1:5d:bc:89:fc:
42:4a:90:4a:8c:5a:08:ba:ae:f8:7d:ec:b0:b5:8e:
10:39:17:00:a9:f2:a7:d6:3f:07:a3:07:3d:28:92:
4c:d3:b5:c1:15:c6:84:2c:f0:39:e9:92:35:7f:da:
45:aa:a0:84:57:67:81:fa:40:df:88:ca:12:11:c0:
87:27:b2:30:59:d2:43:a6:fd:c3:ff:9e:2a:bf:aa:
ac:4a:e6:c9:29:82:4a:97:fd:c0:3b:25:f1:75:a5:
36:93:a8:76:71:fe:9c:4b:b2:45:df:09:99:f8:b2:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:A0:41:5A:04:8A:39:3E:AA:D2:17:FA:30:80:D8:8C:90:20:71
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/fwOgQVoEijk-qtIX-jCA2IyQIHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d5:de:6e:e6:1d:ca:e8:75:48:6d:ec:de:55:ce:56:0d:dd:ff:
2b:13:a9:5e:f5:59:08:dc:fa:be:63:33:3d:d1:7d:57:90:20:
42:62:e9:5a:d3:6f:65:39:c9:e8:cc:c6:4b:f2:88:87:6a:8d:
d6:ac:df:6f:00:01:6b:0e:e4:bd:64:08:c6:be:83:75:4d:89:
14:45:02:92:98:b5:41:14:9b:e2:59:74:a8:53:c8:9e:bd:17:
3d:bc:72:d9:d4:97:d7:72:08:0f:b3:b8:72:ee:c3:c6:a3:62:
00:e7:52:43:4f:28:72:34:4e:21:60:0a:7f:d7:24:95:ce:07:
91:ec:63:c3:e5:96:42:83:05:de:e0:af:07:23:49:e5:72:09:
58:dc:d4:6d:ac:9f:32:76:21:a6:5e:19:e9:78:9f:1c:b5:8e:
66:c1:ee:47:6e:5a:3f:48:d5:50:ce:c4:af:89:2e:21:f9:a7:
06:70:48:c8:97:c4:34:74:f1:f8:eb:40:ce:59:d1:26:37:4e:
c4:9a:98:8c:da:29:b4:3c:d0:91:18:88:a9:72:d3:67:ee:5f:
59:d8:bf:e5:18:5d:26:fb:f3:9d:f2:6f:10:04:71:3e:1b:7c:
3a:76:22:73:d9:98:cc:d3:e3:56:ae:b8:0c:d8:21:77:31:e2:
4c:c9:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:34:47 2025 by rpki-client