Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-sajAoMRbyKCaGYcYhiqTraGa9s.roa
File: 1-sajAoMRbyKCaGYcYhiqTraGa9s.roa (raw, json)
Hash identifier: ETLcVuWKzeHKefLd2SqDg/6t3tITPbF8UOKzCNQZ0BE=
Subject key identifier: FA:C6:A3:02:83:11:6F:22:82:68:66:1C:62:18:AA:4E:B6:86:6B:DB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8E31E0DABFF363299D1D2E804EB09B88
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-sajAoMRbyKCaGYcYhiqTraGa9s.roa
Signing time: Sun 19 May 2024 00:13:04 +0000
ROA not before: Sun 19 May 2024 00:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:31:e0:da:bf:f3:63:29:9d:1d:2e:80:4e:b0:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 19 00:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fac6a30283116f228268661c6218aa4eb6866bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:5e:35:6c:a4:88:2b:5e:a8:a3:7e:b4:bc:
f3:f7:e2:ee:34:11:20:41:c9:39:36:62:03:48:4d:
0c:61:2e:2d:c2:b8:1c:8a:d4:ac:96:0e:b7:4a:33:
05:b7:f3:c6:4f:74:a2:8e:a1:61:eb:f8:ea:a7:3f:
f7:29:db:11:f1:be:f1:9d:a5:6d:88:86:be:71:42:
4b:07:a5:4f:5b:98:02:7f:43:5a:b9:32:7c:e9:c3:
3d:cc:3d:3a:62:35:b7:33:65:23:fb:6a:f1:2f:ea:
86:3f:3c:2c:03:73:c4:b1:e2:62:44:b7:06:7e:58:
07:fc:71:2e:f3:31:69:4b:91:e3:7a:6a:3d:c6:fc:
e3:f1:d5:0e:50:3c:4b:85:ba:f4:44:a2:a5:fa:fa:
84:da:c8:f2:a7:9d:13:49:8a:a3:0f:ad:c1:c3:f8:
f6:3c:24:6e:32:5c:95:91:39:b3:07:0d:02:7a:dc:
99:e3:22:7a:53:db:76:6a:55:24:72:06:b2:cd:e3:
ea:0a:e7:c5:9e:f0:95:72:01:0e:a0:2f:b7:1f:2c:
a7:97:76:66:90:50:5f:0e:fe:d3:b2:d2:7a:64:6d:
20:c6:b5:77:f6:9a:58:f9:27:2d:5f:58:d0:7c:3b:
b5:ed:d6:ae:a1:dc:bf:d3:32:d6:49:92:0b:f8:50:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:A3:02:83:11:6F:22:82:68:66:1C:62:18:AA:4E:B6:86:6B:DB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-sajAoMRbyKCaGYcYhiqTraGa9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:b1:61:d9:73:d5:01:16:03:c7:ee:62:f6:1b:8e:1b:3a:75:
86:8c:b0:78:8a:18:f8:f9:b6:0e:82:60:45:a2:58:25:c6:d9:
f6:b5:85:04:f1:be:70:a2:60:c4:a6:5b:09:68:ae:1c:50:e3:
c2:8e:b6:a8:e2:ab:cf:5b:65:3f:0c:fc:e7:e2:9a:d8:63:a4:
be:dc:d2:04:fa:f8:89:37:50:6d:25:aa:e6:6c:7f:2b:39:55:
0d:d4:c3:f8:6f:a8:5d:10:ab:4f:fe:52:97:25:e4:af:6c:07:
0b:0c:38:61:cb:9a:60:88:9d:d6:0a:4f:65:f9:46:53:c3:28:
b8:78:21:4c:80:11:c1:96:c5:80:d4:12:7e:cc:59:6f:71:29:
36:4e:a7:0a:dc:a3:c7:94:8a:ba:cd:5e:72:3f:74:47:38:36:
70:bd:67:a9:70:d4:e8:ab:39:4a:de:ba:70:88:8a:46:e9:16:
05:5a:8c:62:47:7f:fb:2a:30:9f:8c:cd:3d:b0:06:62:2f:49:
cc:8e:ae:0b:9f:18:c0:79:55:15:52:dc:43:9f:4f:07:5c:4d:
a3:96:b4:12:ee:5c:03:c9:d5:f8:f1:3b:32:8e:fa:c6:f3:73:
06:62:b0:58:45:60:82:58:19:c2:2d:16:e9:87:14:59:3c:e4:
e4:fd:7c:6e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY+OMeDav/NjKZ0dLoBOsJuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE5MDAxMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWM2YTMwMjgzMTE2ZjIyODI2ODY2MWM2MjE4YWE0ZWI2ODY2YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47JeNWykiCteqKN+tLzz9+LuNBEg
Qck5NmIDSE0MYS4twrgcitSslg63SjMFt/PGT3SijqFh6/jqpz/3KdsR8b7xnaVt
iIa+cUJLB6VPW5gCf0NauTJ86cM9zD06YjW3M2Uj+2rxL+qGPzwsA3PEseJiRLcG
flgH/HEu8zFpS5Hjemo9xvzj8dUOUDxLhbr0RKKl+vqE2sjyp50TSYqjD63Bw/j2
PCRuMlyVkTmzBw0CetyZ4yJ6U9t2alUkcgayzePqCufFnvCVcgEOoC+3Hyynl3Zm
kFBfDv7TstJ6ZG0gxrV39ppY+SctX1jQfDu17dauody/0zLWSZIL+FC0wQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPrGowKDEW8igmhmHGIYqk62hmvbMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvMS1zYWpBb01SYnlLQ2FHWWNZaGlxVHJhR2E5cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmUvZDg5MDI1LWQ2ZjMtNDg5MS05ZDg2LWQxMmYwMzlkYjJj
OS8xL3NyN0VHOUx6c1huZUNWRkRCbE1MMF91c2NIcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQB3sWHZc9UBFgPH7mL2
G44bOnWGjLB4ihj4+bYOgmBFolglxtn2tYUE8b5womDEplsJaK4cUOPCjrao4qvP
W2U/DPzn4prYY6S+3NIE+viJN1BtJarmbH8rOVUN1MP4b6hdEKtP/lKXJeSvbAcL
DDhhy5pgiJ3WCk9l+UZTwyi4eCFMgBHBlsWA1BJ+zFlvcSk2TqcK3KPHlIq6zV5y
P3RHODZwvWepcNToqzlK3rpwiIpG6RYFWoxiR3/7KjCfjM09sAZiL0nMjq4LnxjA
eVUVUtxDn08HXE2jlrQS7lwDydX48TsyjvrG83MGYrBYRWCCWBnCLRbphxRZPOTk
/Xxu
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:06:14 2025 by rpki-client