Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/j043qd7lKP_yUo5zguZmsmoiQRI.roa
File: j043qd7lKP_yUo5zguZmsmoiQRI.roa (raw, json)
Hash identifier: NKOv2+cOX2Nadvq/9iQNCLLFZ+7QcNvfyogtQZ6oUBs=
Subject key identifier: 8F:4E:37:A9:DE:E5:28:FF:F2:52:8E:73:82:E6:66:B2:6A:22:41:12
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8608A62EAC32331B180C738847EA91FE
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/j043qd7lKP_yUo5zguZmsmoiQRI.roa
Signing time: Fri 17 May 2024 10:11:04 +0000
ROA not before: Fri 17 May 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:08:a6:2e:ac:32:33:1b:18:0c:73:88:47:ea:91:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 17 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4e37a9dee528fff2528e7382e666b26a224112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:c6:5a:8d:00:59:33:1b:59:76:0b:2d:da:
0b:fa:ba:d8:80:98:06:8b:fc:e0:26:9b:56:a2:a6:
d7:bc:99:86:d3:94:9b:99:e8:cd:00:6d:4a:96:31:
6f:c4:bd:69:dc:29:8e:37:7c:16:1e:8f:63:8a:e4:
90:11:7d:40:46:02:d7:96:e7:36:9c:77:88:ed:d1:
c0:4a:da:c1:89:e5:a6:b0:36:7c:b7:f4:3e:c2:42:
66:82:95:f9:f1:e1:be:87:dd:0c:17:b6:ed:95:dc:
c2:7f:76:73:1f:5c:bb:11:63:1f:f0:05:6f:1d:db:
e1:f3:f6:11:9d:ae:d2:13:21:32:26:d9:20:23:2e:
72:5d:cd:87:a1:23:74:9b:fa:6d:dc:12:66:18:92:
d6:e9:e9:7d:43:7e:47:e1:ae:3e:ff:73:a8:ce:e7:
66:94:f1:7d:df:ed:20:a0:74:ec:d9:81:da:97:01:
1d:e0:02:a1:6e:e3:e6:c6:3c:09:a0:80:c2:58:02:
10:ed:95:c3:fe:f3:3f:6f:98:52:89:3e:5e:93:4c:
9a:77:5f:0f:f3:52:56:e9:2b:63:62:e3:41:79:6e:
5c:a5:fb:1b:fb:86:44:da:18:db:bc:d8:e1:bd:72:
7e:dc:cd:80:81:d6:bc:3a:04:76:18:14:2c:35:ab:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:37:A9:DE:E5:28:FF:F2:52:8E:73:82:E6:66:B2:6A:22:41:12
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/j043qd7lKP_yUo5zguZmsmoiQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:3d:f6:60:4b:c7:ae:16:90:f8:f4:1b:4b:da:d6:8a:2a:8f:
b1:a8:0f:70:7d:a8:d8:2a:6d:91:d1:50:31:ff:27:66:94:18:
1a:43:55:07:ce:e2:8a:50:29:1d:51:e0:c4:e2:e5:bf:64:cc:
27:6d:d6:3c:db:45:6b:f5:69:e2:fc:8d:3a:f6:bb:cf:01:9f:
84:85:2f:93:96:2f:06:9f:7e:c6:5d:e0:40:7b:15:72:f6:d2:
b5:27:26:22:b5:06:34:57:1e:25:01:18:cc:c7:a1:4b:f1:4f:
c3:67:63:fe:49:61:a0:29:61:26:7b:f1:ba:15:05:29:e7:3f:
10:2b:b8:21:bf:85:a9:35:8c:c5:f9:ab:bb:0c:8a:c2:42:ab:
d7:19:bd:e2:3f:51:71:fd:7e:05:03:19:6e:62:e1:5e:b7:f4:
56:db:d0:a2:f4:8d:99:af:63:ac:e2:93:16:bb:8d:f1:88:71:
ea:55:21:2a:df:b5:66:88:2e:05:65:eb:13:68:d0:ff:10:ff:
89:a1:26:f0:72:91:8b:fb:72:19:44:a2:bd:09:b6:fe:d8:15:
55:a5:20:d2:ef:a1:88:c5:bf:90:13:f2:43:d6:cf:34:65:a0:
ac:e7:c9:e3:3c:be:c7:17:76:4a:f2:ff:42:4b:bc:4d:8f:14:
c0:99:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:05:59 2025 by rpki-client