Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa
File: gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa (raw, json)
Hash identifier: G74Eql8V4qnCIp9IzvythiuyCWj4cKbQobX9wOPDXGU=
Subject key identifier: 81:EC:78:75:54:DD:F6:21:8C:9F:B9:D2:7B:E6:56:09:B6:5E:51:55
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F31AE76E28A23B5460A578ABBF208D82E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa
Signing time: Wed 01 May 2024 01:04:28 +0000
ROA not before: Wed 01 May 2024 01:04:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:31ae:59ab/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:ae:76:e2:8a:23:b5:46:0a:57:8a:bb:f2:08:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 01:04:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ec787554ddf6218c9fb9d27be65609b65e5155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:9e:09:3e:40:67:77:d9:f0:fb:29:7e:19:
1c:7a:ef:57:da:7f:47:85:f8:49:24:1d:52:c4:bd:
cf:94:10:fb:f1:3c:fd:d6:8a:e6:04:34:d8:00:fe:
e7:97:dc:70:74:da:3a:e7:f2:39:96:fc:6c:d3:aa:
56:d5:92:84:d7:dc:98:4a:8e:18:b5:27:06:b7:f2:
4a:61:6f:e1:94:4c:73:dd:ed:d4:75:22:58:e4:42:
3d:80:74:51:0d:c1:d7:1b:3e:4a:d6:1f:56:0a:ec:
f9:9f:17:69:69:38:5d:01:ca:fb:0d:9e:32:6e:9f:
fc:bd:7e:c5:c5:2b:11:9b:c1:6d:45:30:27:22:e3:
21:ac:08:a6:e9:6b:50:d1:49:d1:8e:a3:42:bd:d8:
d6:20:56:22:88:db:25:ad:31:08:94:7c:5e:23:e7:
a0:a5:a2:14:36:cd:f1:2c:bb:ac:bf:bf:7e:44:51:
5d:9b:fa:73:97:e8:2b:46:f8:5c:16:fa:c3:f1:40:
3f:7c:02:e6:27:96:04:03:3d:55:ba:de:6f:1b:9f:
96:de:b6:ec:44:15:34:9f:95:9d:19:04:7d:24:1f:
9e:53:8f:11:4a:5e:12:3d:4c:31:d8:09:57:24:b3:
f5:fb:23:be:89:7d:7e:36:ef:36:80:00:47:5a:0d:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EC:78:75:54:DD:F6:21:8C:9F:B9:D2:7B:E6:56:09:B6:5E:51:55
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:48:fc:32:8b:9a:14:22:ca:88:30:2d:cf:47:5b:16:26:b4:
dc:e5:9b:1a:60:bd:e8:93:7c:30:43:a0:96:40:f8:d3:4c:d9:
60:a2:9d:a6:2f:2e:9c:3b:2e:b6:f4:42:1d:a8:6d:ed:56:2c:
46:b2:ff:4e:b2:90:56:46:62:07:5d:2c:78:49:9a:65:c9:3a:
4a:be:74:90:30:4e:65:60:fc:27:6d:90:e7:ac:50:c5:01:7d:
a3:19:ae:2a:74:27:ef:10:15:71:47:7a:54:e3:02:c7:b8:fb:
7f:2c:35:a2:5b:3b:ce:07:c9:04:c5:ac:da:37:39:88:53:79:
72:cb:7f:2a:e5:06:d2:b5:ba:a8:3a:82:b0:fb:20:07:81:11:
c7:82:bf:db:c7:27:2e:2b:c9:56:78:d6:51:91:a9:ee:91:bd:
37:8c:d5:7e:42:f0:43:20:0c:0b:29:cd:fb:e7:0f:c2:42:bc:
03:ee:b9:74:34:eb:0a:83:8b:02:62:ef:1a:0e:34:67:c6:10:
92:08:03:62:55:92:05:9a:8b:46:54:04:f0:ee:e3:ee:01:8e:
da:22:f8:f6:b9:3c:fe:4e:db:c4:71:7c:91:74:82:0a:c5:3c:
72:c9:79:69:d5:74:77:bf:f7:f9:b4:57:66:0d:14:6b:ed:e5:
91:6d:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:46:02 2025 by rpki-client