Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/url_ZIlINAc995HrGpQ3qS7F0Jw.roa
File: url_ZIlINAc995HrGpQ3qS7F0Jw.roa (raw, json)
Hash identifier: HyxTC97T1h2c87//3/6whwfMKkSlvqv6CIO7q9LVBgs=
Subject key identifier: BA:B9:7F:64:89:48:34:07:3D:F7:91:EB:1A:94:37:A9:2E:C5:D0:9C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F599DAC81179BAA22024589997F07C45C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/url_ZIlINAc995HrGpQ3qS7F0Jw.roa
Signing time: Wed 08 May 2024 19:10:56 +0000
ROA not before: Wed 08 May 2024 19:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:9d:ac:81:17:9b:aa:22:02:45:89:99:7f:07:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 8 19:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bab97f64894834073df791eb1a9437a92ec5d09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:ae:af:a2:b1:21:9c:3d:a1:1f:41:f6:cd:
8f:b4:e6:e8:c5:e3:1d:20:4d:ca:0e:ac:59:4c:31:
8c:53:d1:18:e7:56:d9:e1:b4:70:b6:02:ad:a4:30:
12:78:05:6b:88:ef:ae:c4:87:9d:95:62:d6:2f:46:
e0:f4:7d:f7:20:1b:2d:a5:40:58:b2:77:66:e1:e6:
23:5d:1e:9d:3b:e8:da:03:af:e2:d3:5f:c7:fe:3e:
62:d7:30:e6:08:ff:13:a3:f3:43:eb:5e:48:39:8d:
9c:c8:f5:d8:9a:c1:59:36:09:a5:7c:89:94:fe:cf:
eb:52:b9:13:25:f0:60:b6:75:8b:f0:15:67:2a:8c:
21:08:ed:8b:a1:c6:68:d4:e4:4d:92:c2:6b:fd:71:
08:9c:bd:99:95:ea:6f:ec:c5:29:20:8b:6e:9b:f6:
ed:11:6b:9d:62:99:96:17:5c:c9:09:1f:40:4c:b6:
9b:4e:b4:71:6f:59:3d:3f:b8:a7:f2:43:2c:2d:ca:
ac:a6:3f:01:3f:a1:46:66:31:e3:df:41:0f:56:1f:
e8:d1:db:2e:e1:84:01:8f:b0:9d:22:de:8e:c2:3a:
8e:8a:d6:30:2b:3b:76:6d:43:1c:a9:0f:a5:50:eb:
66:47:e7:0c:c6:5f:24:5e:25:81:91:9a:d1:d6:9f:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:7F:64:89:48:34:07:3D:F7:91:EB:1A:94:37:A9:2E:C5:D0:9C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/url_ZIlINAc995HrGpQ3qS7F0Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:ec:ef:2f:3f:48:d7:92:06:b3:68:56:1c:58:46:36:50:a7:
b6:28:c1:a4:07:c7:30:1e:2b:f9:a0:91:f7:0b:95:ee:20:ca:
48:b4:c4:ac:f7:2d:9e:61:4a:83:ac:5c:d4:4a:c1:44:00:c8:
21:d2:c7:f3:f5:38:37:35:03:7e:61:4f:19:57:f0:69:0d:4e:
19:79:5a:07:48:3f:3a:02:1b:83:2a:d8:3d:2e:bd:1a:f7:ab:
aa:1c:97:c6:83:7d:fc:6a:dd:3a:f2:c1:76:7f:6d:39:72:b9:
2c:5a:8d:12:1f:9b:21:6c:19:e3:4d:37:34:b9:d3:95:20:ee:
1e:4c:fa:b2:21:10:5f:6d:8c:17:69:b1:ae:03:9d:c6:66:5d:
7c:99:cf:c1:f7:6f:01:ec:2c:c4:80:c6:6b:d0:c7:7d:da:c2:
33:cb:c0:5a:fa:72:bf:28:8f:55:25:3f:7a:57:32:d4:1d:91:
1f:71:e0:58:ca:8c:c5:32:e2:ce:13:d4:76:96:77:d1:41:51:
da:31:6e:07:48:22:49:52:88:a6:0c:47:e9:b8:9f:10:84:05:
60:69:d8:54:fb:13:84:6d:67:a9:30:b6:54:40:71:42:60:5f:
24:80:04:fe:7b:2e:05:62:d3:e5:33:63:20:88:89:c4:47:3a:
59:6d:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:02:17 2025 by rpki-client