Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-3FStoyTY6WEqTBDQ2dysWNFpvI.roa
File: 1-3FStoyTY6WEqTBDQ2dysWNFpvI.roa (raw, json)
Hash identifier: Og3n2iPDiq2bWB9m+VbARHNWAQnWpPpkUIw1RCUsRb8=
Subject key identifier: FB:71:52:B6:8C:93:63:A5:84:A9:30:43:43:67:72:B1:63:45:A6:F2
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F3E2757494ED7893041B846CFF799B594
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-3FStoyTY6WEqTBDQ2dysWNFpvI.roa
Signing time: Fri 03 May 2024 11:11:56 +0000
ROA not before: Fri 03 May 2024 11:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:27:57:49:4e:d7:89:30:41:b8:46:cf:f7:99:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 3 11:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb7152b68c9363a584a93043436772b16345a6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:1c:5f:05:a1:f1:1f:af:e8:a8:f2:48:50:
17:40:7b:bb:60:2b:ee:57:28:a1:60:40:b7:ad:ce:
fc:83:35:33:6c:13:a5:96:e1:78:32:6d:7b:fc:2a:
52:d7:6f:81:90:0d:4e:e8:5a:34:ca:ec:e7:78:4f:
43:3a:5a:44:5a:93:86:20:16:41:2a:35:2d:79:53:
3e:bb:36:72:a4:62:71:d5:e5:93:7c:d2:32:5d:6b:
6e:2d:4b:11:6f:62:fd:e6:9b:eb:f7:59:3a:c7:62:
a5:15:0d:90:63:bc:93:7b:d3:92:07:7a:50:f8:68:
54:c5:47:c2:f9:48:f7:6e:56:02:2c:e9:02:3d:83:
e2:ed:27:30:43:2a:4c:27:4c:fd:dc:aa:0f:d5:56:
46:bd:15:cd:60:a4:03:9e:f4:7f:27:87:96:9e:a6:
da:5f:e7:cb:93:96:25:ea:1d:b6:09:15:11:65:7f:
fa:a9:1a:c1:33:e3:7c:e4:9b:ba:ef:b1:63:4f:fa:
1e:92:a1:99:32:67:8f:3f:31:a3:86:68:2b:cc:0f:
71:49:1e:d3:4c:25:04:0f:44:a1:13:f1:29:a2:0e:
bf:da:77:d8:3e:a5:ad:aa:02:dc:c6:37:7b:a8:ef:
f1:db:5a:13:4e:ac:d4:be:60:46:f1:89:4e:8b:68:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:52:B6:8C:93:63:A5:84:A9:30:43:43:67:72:B1:63:45:A6:F2
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-3FStoyTY6WEqTBDQ2dysWNFpvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:03:5a:4c:32:ae:1a:ac:ad:64:40:5a:82:19:8e:94:5a:66:
1b:91:c9:67:8d:ab:4d:8c:b5:48:20:b0:44:f7:8a:e5:2f:79:
22:62:26:5a:d8:24:fc:90:63:fe:65:03:9a:94:b8:a4:8a:49:
b8:f5:2e:7a:04:91:c8:36:a4:2a:0c:ef:cd:41:f9:48:b0:f2:
d7:14:91:62:47:a6:ef:f9:b1:f9:87:91:0a:c0:93:1e:ca:b1:
54:2f:8a:0a:87:8e:dc:b2:15:9c:22:b2:a2:e9:0a:74:53:a1:
2f:95:b1:b6:d7:7f:ac:ca:5b:e4:07:5d:08:d8:e9:a1:74:5f:
83:c3:17:ea:39:c4:8b:e9:5d:49:a0:27:2a:05:fa:f9:8c:d3:
d2:8d:ee:ee:b9:b4:5f:ee:3f:73:a0:5c:28:c1:fc:23:3a:d7:
45:c3:e2:4b:b2:ef:ab:4d:50:c9:17:f3:fc:77:a2:af:6e:30:
f5:37:fb:6c:e6:02:3c:2e:7c:6e:86:b3:16:14:6d:f6:70:da:
0e:80:96:c0:c9:61:47:59:ff:0f:fa:3b:70:39:c2:4c:3c:4c:
8a:0a:c5:91:ee:48:ca:c1:1f:45:74:e8:d4:50:da:cd:6c:32:
e9:ba:42:74:bb:0f:b6:fb:9e:4b:37:ea:64:bb:2f:51:8b:f3:
bc:b1:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:16 2025 by rpki-client