Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/umZPeYohL0A8IC3GMMOvwIRxMSU.roa
File: umZPeYohL0A8IC3GMMOvwIRxMSU.roa (raw, json)
Hash identifier: OCk+giAOhvGTzOHLezl/3QRhF90TAmxzLUQM6aZ6bFE=
Subject key identifier: BA:66:4F:79:8A:21:2F:40:3C:20:2D:C6:30:C3:AF:C0:84:71:31:25
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F98AE34DAB522CA89BD25F4D332C0E9AD
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/umZPeYohL0A8IC3GMMOvwIRxMSU.roa
Signing time: Tue 21 May 2024 01:05:04 +0000
ROA not before: Tue 21 May 2024 01:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:98ae:e27/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:ae:34:da:b5:22:ca:89:bd:25:f4:d3:32:c0:e9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 21 01:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba664f798a212f403c202dc630c3afc084713125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:cb:70:40:62:0a:ba:6a:cd:53:54:b4:a0:
58:d0:82:73:85:e9:d4:1e:12:07:e0:3c:62:cc:59:
ec:b4:0c:94:ce:5c:a2:a2:d3:a6:89:e5:15:43:71:
d1:75:89:98:66:bc:92:29:46:4e:df:bd:04:84:49:
26:ea:09:74:ee:21:48:e4:77:fc:f8:d2:e7:22:64:
80:77:9b:0f:e3:4b:e6:1c:04:16:58:9e:77:d0:f7:
88:e4:4c:55:4c:1f:7b:fb:7e:35:62:89:2d:7c:15:
0d:57:e1:53:44:c7:46:a8:b8:e7:49:30:af:f4:60:
2b:67:d1:fc:5f:b3:81:95:d2:59:d7:f8:0b:38:41:
78:e1:6e:56:3b:33:21:f0:b4:b7:6e:6c:90:a5:eb:
0b:7c:d9:83:b1:09:41:ba:0e:69:4e:6a:20:e3:e4:
e7:27:86:96:e4:a8:52:f6:ca:f8:7f:bc:19:d8:2f:
5d:f6:43:c5:a5:f5:ae:5c:f4:d8:74:1a:03:ca:1b:
54:01:d7:1d:bd:70:6e:e4:3d:e2:56:c2:de:b5:e8:
a5:f1:b1:69:98:33:d7:71:91:04:75:bd:c2:71:47:
57:7f:fe:86:2b:d0:ec:aa:6a:31:f7:49:ee:90:42:
1f:27:c5:34:6e:fa:a6:22:8d:54:98:27:db:16:d3:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:4F:79:8A:21:2F:40:3C:20:2D:C6:30:C3:AF:C0:84:71:31:25
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/umZPeYohL0A8IC3GMMOvwIRxMSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a2:aa:76:7f:ca:16:5e:56:0a:ac:7e:95:ac:75:90:75:b2:
c7:c2:88:a4:f6:c8:28:a0:14:dc:e5:48:a6:1c:b9:5a:de:0b:
5b:95:b0:78:8b:52:00:66:39:ec:1f:0d:d0:04:dd:de:a4:5d:
f2:4a:4c:29:97:3b:6d:62:ca:b8:73:29:99:0d:0c:b8:d6:f7:
3f:33:06:00:51:2c:c8:ad:f3:ea:50:80:a6:0c:d9:c3:c3:ea:
4c:22:ef:f6:34:4c:97:af:a1:00:ea:6e:a1:8d:2e:53:84:56:
18:00:3f:04:cc:cf:e8:8d:4f:e7:cc:62:3a:54:aa:8c:0a:d2:
70:9c:35:55:67:a9:d0:b5:d0:1f:b1:a8:f2:67:bd:aa:5d:d9:
c6:29:9a:2a:10:e0:77:85:83:f4:59:32:7c:2d:22:09:e7:42:
e0:70:43:a1:6b:ed:73:19:8e:b2:76:92:9f:a3:77:44:de:e6:
94:55:17:d8:bd:03:82:5f:13:75:6f:7c:5a:bb:f5:84:8e:b4:
20:60:b1:23:48:ed:ad:17:ca:0b:9e:2d:8a:c0:3e:40:5c:89:
24:63:8b:fc:c3:8a:08:88:a2:3d:b2:89:07:1f:ec:e5:e0:9f:
cb:b2:6d:38:89:38:0d:46:26:3d:68:da:51:68:94:eb:73:f9:
c6:10:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:06:03 2025 by rpki-client