Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vav7YjzuWNIke_AMoPeclFJRenQ.roa
File: vav7YjzuWNIke_AMoPeclFJRenQ.roa (raw, json)
Hash identifier: V2JIkKqOz1SEKhQeUKQg1WPiBcLGxhH8gtW9navTqzI=
Subject key identifier: BD:AB:FB:62:3C:EE:58:D2:24:7B:F0:0C:A0:F7:9C:94:52:51:7A:74
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3526F55C9AA5E0F55F0C96BA98A1DF90
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vav7YjzuWNIke_AMoPeclFJRenQ.roa
Signing time: Wed 01 May 2024 17:14:56 +0000
ROA not before: Wed 01 May 2024 17:14:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:26:f5:5c:9a:a5:e0:f5:5f:0c:96:ba:98:a1:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 17:14:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdabfb623cee58d2247bf00ca0f79c9452517a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:e4:a0:ea:ad:37:c0:ff:15:de:22:38:60:
b8:5a:fe:4e:b6:f9:6a:ed:97:e6:04:72:1c:f9:6a:
5d:c4:a0:74:e9:27:97:44:5e:2b:dd:fd:4c:f7:e3:
1f:3b:7e:4b:55:5c:13:98:e6:7d:f1:54:6b:9a:66:
98:ba:93:1b:ef:ac:34:24:16:c9:b9:f7:a4:d2:61:
18:69:06:e0:cf:c5:4e:74:1d:ae:e2:b2:5f:b0:85:
70:ce:7c:30:a3:cc:ad:e2:84:5d:2a:08:07:0f:ee:
cb:1b:e4:ba:0c:b3:72:d0:ad:22:15:34:22:ce:eb:
21:f6:d1:f0:38:73:a0:6d:af:fa:62:9a:ee:92:6d:
a3:4b:eb:a9:67:88:61:4b:b3:8e:14:26:fb:c7:22:
2b:22:1d:a7:f9:5f:b8:02:32:8b:e8:c9:c5:b5:83:
9c:e0:ea:a8:1d:b9:83:87:7b:6e:59:ca:bc:d5:23:
26:c4:bf:bb:50:1a:38:d8:6b:43:3e:f3:d9:07:a4:
f2:22:2b:19:ac:bb:5e:8a:bf:4b:32:46:e8:bd:23:
72:61:b5:19:22:fa:00:79:f8:84:a7:f6:fa:72:4c:
ba:0f:5d:bf:3d:b5:45:09:1a:87:af:5b:89:8e:65:
97:27:ad:0e:ba:0d:c2:1a:6a:db:cb:55:f5:e9:94:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AB:FB:62:3C:EE:58:D2:24:7B:F0:0C:A0:F7:9C:94:52:51:7A:74
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vav7YjzuWNIke_AMoPeclFJRenQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d5:22:ce:ba:c9:29:a5:ad:12:fb:9e:a9:ad:f7:7e:a9:05:85:
22:cb:82:9f:d7:5b:95:7d:e3:82:98:58:f9:4c:6c:66:2f:33:
3b:20:df:fe:9a:ff:d2:0b:7d:66:95:44:a6:2a:5b:1a:de:f2:
0e:17:72:ac:0d:5c:0c:00:84:77:eb:74:51:8a:3f:21:c6:5a:
dd:59:77:d5:15:86:2e:8c:51:22:22:cc:e2:16:18:a3:e1:33:
17:fe:c8:11:e1:29:2d:81:c3:0c:87:3d:cb:45:8c:b5:c1:a7:
f3:b9:c3:44:c7:68:ba:74:94:62:54:fa:c5:db:f6:ed:ec:f2:
78:b4:26:f8:ad:b4:0c:59:88:81:6c:51:11:52:87:6d:95:9a:
10:78:0c:04:5b:b6:36:33:d5:ce:d4:ed:3f:af:51:23:e7:50:
c4:00:7e:37:fc:c8:bb:94:1e:87:12:39:d9:f1:e2:b7:fe:83:
61:99:10:f9:bc:09:58:d3:e3:36:4b:07:b5:ef:5b:c0:bb:c1:
f3:49:5f:b0:bf:ce:f9:58:ba:5e:63:0a:33:b6:7f:c3:29:fd:
dc:66:8e:3f:9a:1e:1b:6b:f4:31:14:3d:3d:8b:52:05:1c:22:
ae:00:fd:91:1a:fc:e7:de:51:63:c4:1c:7a:d3:6a:1e:6f:cd:
e1:a6:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:48:53 2025 by rpki-client