Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2lsNt8VQ2pfi6on-0zGsVM8SQRs.roa
File: 2lsNt8VQ2pfi6on-0zGsVM8SQRs.roa (raw, json)
Hash identifier: iAYaKCU6rpVNTU6lukxtBLRM3nN6kf5sC0PKLFTOW5c=
Subject key identifier: DA:5B:0D:B7:C5:50:DA:97:E2:EA:89:FE:D3:31:AC:54:CF:12:41:1B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFE2F7C36A81816663C1F61E758B6D7E0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2lsNt8VQ2pfi6on-0zGsVM8SQRs.roa
Signing time: Sun 21 Apr 2024 01:05:08 +0000
ROA not before: Sun 21 Apr 2024 01:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18e:fe2e:9ede/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fe:2f:7c:36:a8:18:16:66:3c:1f:61:e7:58:b6:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 21 01:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5b0db7c550da97e2ea89fed331ac54cf12411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:8e:fd:c7:31:54:d9:8f:d3:9b:db:5b:38:
f3:5f:66:6c:3c:78:65:cd:f0:9c:41:ac:9a:16:34:
96:7c:96:af:6c:9f:d5:c5:99:48:d6:96:6b:b4:38:
ac:ac:4e:8b:f0:4f:c9:51:dc:aa:ed:0c:14:a4:d1:
fd:f4:91:0e:e6:76:d8:73:4b:cb:fc:66:1b:ef:bd:
35:72:af:21:6d:d5:b4:f2:ab:68:cb:1c:8f:a9:60:
03:d2:7f:b6:98:3a:44:6d:43:9c:82:1c:10:15:90:
08:96:70:43:3b:39:c2:1e:b7:ca:44:62:e4:94:bb:
4a:65:7f:24:9f:2a:1f:3c:41:3c:cb:58:2e:27:a3:
b9:25:ea:27:a8:21:08:02:f7:8d:42:4e:04:92:e6:
70:76:9a:67:8b:5c:e2:3f:b5:21:8b:30:e6:91:90:
f9:8f:79:e9:4d:3f:1a:2a:62:86:d2:28:6f:df:77:
bf:08:8f:5c:e2:76:bd:36:82:fb:91:ec:fb:2d:73:
94:a1:6d:7d:8f:2a:d3:c7:13:50:0a:4d:99:66:d8:
b2:11:f3:be:4a:64:90:f7:1d:32:00:eb:8c:1a:b9:
5e:8f:de:cd:ab:86:a5:c3:39:0f:80:45:56:ed:cf:
95:26:8b:68:da:59:84:aa:70:ba:10:c2:e7:f2:f4:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:0D:B7:C5:50:DA:97:E2:EA:89:FE:D3:31:AC:54:CF:12:41:1B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/2lsNt8VQ2pfi6on-0zGsVM8SQRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18e:fe2e:9ede/128
Signature Algorithm: sha256WithRSAEncryption
3c:25:a9:2d:69:3f:9f:9d:2d:8e:46:75:21:52:9b:f1:e6:24:
7a:a6:6a:0c:a8:80:c5:a3:c3:62:5f:9c:40:f0:18:e2:0e:cd:
08:e5:cb:b3:52:0d:13:3e:f9:24:8e:b4:3a:6d:12:70:35:42:
1b:ed:e8:48:90:c9:30:29:82:b4:8d:90:cc:1d:73:df:2b:c3:
ac:4d:83:68:11:8d:35:d3:66:78:4f:69:bd:f4:e8:f6:64:bc:
5f:2b:76:e5:31:2a:29:6d:d5:a0:f7:29:c8:b6:b8:15:b1:98:
01:03:5b:5a:ff:ee:ea:93:a7:37:a0:76:d8:18:9b:ad:4a:e6:
f7:2d:a4:56:ff:20:50:db:db:5e:d5:fe:90:fa:9f:a7:1d:be:
b8:ce:36:7d:eb:79:89:19:8a:33:82:dc:f4:bf:02:14:e0:3a:
f3:1b:d5:1a:61:54:2d:8f:aa:d9:27:b3:7a:3b:de:6a:66:13:
4e:62:f1:d1:99:f7:35:8e:cd:24:0b:1b:24:bc:9b:64:ba:74:
e5:fb:b8:19:f5:85:64:1e:76:17:45:d6:29:0d:b4:a7:ae:98:
13:78:99:6b:a1:6c:7c:c1:bf:e5:d7:90:b8:c4:3c:ed:1e:d8:
69:3b:d5:32:89:59:a0:64:83:35:f6:ab:c3:06:01:cb:eb:39:
db:69:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:15:23 2025 by rpki-client