Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/51jLixnzRWUtjsN6oEF1BxoUxL4.roa
File: 51jLixnzRWUtjsN6oEF1BxoUxL4.roa (raw, json)
Hash identifier: urx51taXYiqrePtKj6GOfsoFRw5qdoiFFFyMZuZAupg=
Subject key identifier: E7:58:CB:8B:19:F3:45:65:2D:8E:C3:7A:A0:41:75:07:1A:14:C4:BE
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA670D14A0F148BEFFFA2444E5801BAD2
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/51jLixnzRWUtjsN6oEF1BxoUxL4.roa
Signing time: Thu 23 May 2024 17:12:42 +0000
ROA not before: Thu 23 May 2024 17:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:70:d1:4a:0f:14:8b:ef:ff:a2:44:4e:58:01:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 17:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e758cb8b19f345652d8ec37aa04175071a14c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:e7:33:42:0a:04:08:7a:26:b2:dd:24:63:
36:88:43:38:00:6b:3c:33:be:85:ee:df:e1:33:13:
08:77:c5:a1:47:6f:5f:dd:df:ef:80:22:a4:dc:80:
b5:27:9f:18:18:98:d0:82:ba:d3:5c:0e:bf:7f:9d:
1b:4a:d7:4b:3c:9f:78:ae:bf:79:5c:87:95:7a:a0:
ff:f4:35:28:09:34:bc:68:cb:3e:93:b2:46:67:a4:
51:6f:70:c1:ad:8b:09:e7:af:e2:1f:04:2b:48:ff:
e9:85:fa:33:46:b3:02:21:1f:e0:68:1b:ba:82:77:
56:d9:75:92:be:41:67:b2:80:6a:d2:78:12:2b:14:
4c:59:1b:52:d6:9b:ac:24:81:0b:02:5c:5c:17:2c:
93:25:b3:20:8c:23:88:f6:14:c9:74:42:c0:fe:fe:
1d:2c:99:bd:17:1b:34:df:ed:ae:d4:f7:a4:e0:56:
fc:fc:82:e1:a9:be:b2:29:79:88:3f:69:ba:6e:cf:
19:15:53:a0:ce:36:6d:25:a5:00:fc:27:29:6e:53:
26:55:a9:36:90:30:3d:15:a6:d0:28:77:70:e9:93:
2b:e3:e1:75:83:20:6c:fc:3d:7f:8f:d8:47:36:92:
8f:98:b2:77:cc:f6:0e:9a:4f:0f:cc:a1:4f:55:21:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:58:CB:8B:19:F3:45:65:2D:8E:C3:7A:A0:41:75:07:1A:14:C4:BE
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/51jLixnzRWUtjsN6oEF1BxoUxL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:6d:ce:0f:06:6b:12:fb:6d:20:d1:1f:52:ab:01:76:6e:09:
b3:7f:3a:9c:0c:3c:c2:a7:d1:b5:2c:92:21:86:94:d5:c1:6d:
fc:34:05:fe:3e:7f:06:ab:11:88:ce:6b:7e:c5:8e:95:d1:c9:
cd:49:20:ca:99:09:c0:24:47:de:d0:81:48:2f:65:68:8a:00:
cc:60:39:34:78:e4:51:59:08:42:46:f9:97:89:eb:c6:28:38:
93:21:4c:1b:40:0a:5e:34:1b:59:80:13:b0:6d:a5:1c:2f:b2:
c3:00:5a:ad:28:02:09:eb:9f:7c:56:69:08:5e:7b:3b:90:b7:
bc:f5:69:42:b4:e1:18:be:86:e4:9c:f3:5b:c6:7b:1d:92:42:
59:c2:e5:10:ad:56:fb:4f:27:f0:bf:01:21:e1:4e:69:74:92:
ff:c0:b7:50:75:18:9f:fc:c1:3e:91:62:1f:ac:4b:e1:22:ae:
fb:7f:30:38:88:5c:52:e6:ad:73:89:f4:83:89:65:b3:0c:28:
a0:04:e8:9a:fb:d4:d8:6c:d0:15:c3:dc:7d:bb:65:c4:b2:b2:
79:e5:22:56:8d:71:69:79:91:ab:36:80:6a:e1:8c:42:81:19:
17:8f:9f:ad:25:5d:3b:ed:eb:e3:4c:5f:b0:bd:fb:30:5c:80:
98:2e:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:17 2025 by rpki-client