Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/si5e8cK8B9bAwOyTXoJrMVN7s1A.roa
File: si5e8cK8B9bAwOyTXoJrMVN7s1A.roa (raw, json)
Hash identifier: /TeWwsHDU+ytERrhFa9v/269h6JDd5wR+ZlKdL9Ytwg=
Subject key identifier: B2:2E:5E:F1:C2:BC:07:D6:C0:C0:EC:93:5E:82:6B:31:53:7B:B3:50
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F64FD0D6E2D895710926C193289402378
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/si5e8cK8B9bAwOyTXoJrMVN7s1A.roa
Signing time: Sat 11 May 2024 00:10:56 +0000
ROA not before: Sat 11 May 2024 00:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:64:fd:0d:6e:2d:89:57:10:92:6c:19:32:89:40:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 00:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b22e5ef1c2bc07d6c0c0ec935e826b31537bb350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:b2:bf:37:51:32:c2:2e:cd:4a:2b:1e:26:
52:9b:5b:cb:89:b1:73:42:a2:42:95:30:fe:aa:e1:
99:46:43:19:8a:90:f8:7d:29:ba:27:41:e3:ec:54:
56:83:33:06:d1:8d:69:c0:8c:c5:42:ca:38:6b:80:
74:98:82:42:86:27:16:a1:f3:3f:f7:4b:b8:4a:1c:
f5:2e:2e:f6:70:f7:e2:72:41:44:79:60:86:50:9c:
8f:b0:be:f3:3e:70:3c:9d:e5:7b:77:4f:fc:69:19:
b0:d6:e8:32:ec:ea:af:06:8c:f4:2a:0b:13:3d:1a:
ce:cf:1a:2c:88:31:6f:4e:e7:be:15:bd:dd:f3:71:
09:e9:90:ee:4e:47:19:c9:f2:3a:65:90:e3:10:54:
40:7b:a5:38:78:bb:84:8c:e3:ce:ed:fe:6d:88:a5:
31:5b:e8:a9:cd:6d:72:0b:4e:db:90:1d:28:1b:78:
81:a8:56:6b:10:ff:42:ff:45:36:28:ff:cc:05:c1:
46:7d:9d:f1:be:53:33:25:89:72:f4:16:31:fc:c4:
6a:66:f0:f3:1e:55:0f:97:e5:70:57:35:1d:97:44:
cf:c0:a6:13:f4:0a:7d:af:7f:fd:4b:8c:b0:dc:34:
c2:d4:db:9f:c2:70:83:07:14:95:39:cb:06:12:26:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:5E:F1:C2:BC:07:D6:C0:C0:EC:93:5E:82:6B:31:53:7B:B3:50
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/si5e8cK8B9bAwOyTXoJrMVN7s1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:42:0c:5d:b3:25:71:9c:fd:64:d9:a4:9e:a4:fd:e8:db:cc:
5f:bb:2c:4c:6b:b6:8f:2d:5d:0d:f6:1f:ed:71:76:29:35:53:
10:8e:00:e5:3f:ca:b8:2d:71:5b:32:09:d0:c2:51:a4:cb:84:
c2:eb:5c:1a:ea:0a:0d:52:38:01:94:68:47:42:0d:ad:90:cc:
9f:f4:94:b3:39:62:a8:93:e4:f7:c8:3e:0d:36:f4:e8:01:dc:
be:a8:b5:14:3f:aa:9b:f9:3a:63:03:bd:28:e7:c3:58:05:72:
e1:7c:a0:22:e3:3e:88:d3:c6:c6:da:e7:b2:15:30:14:06:ef:
4f:27:ea:6e:72:a8:a3:cd:1b:82:87:cb:17:06:cc:dc:94:a4:
2d:e8:61:54:b0:bf:a7:00:04:95:fa:52:18:4e:34:ca:b9:74:
33:52:ed:d8:9b:83:79:01:50:aa:f7:57:bc:1b:46:f6:7d:89:
7f:cb:6d:dc:b7:b1:34:be:32:4a:2b:10:e8:e7:dc:19:2e:9e:
f7:f6:42:4a:75:f5:c2:69:31:55:ec:27:58:1d:61:56:08:24:
82:6c:be:23:cc:02:f7:6b:dc:c5:7b:d7:4b:e9:e5:8f:2e:d7:
01:d2:0b:50:c9:51:c8:3e:d9:6a:92:69:51:0b:3a:28:e9:13:
7b:d6:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:49:04 2025 by rpki-client