Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/5nMoMh-dJNx-0JfIMPnJjh3mmHY.roa
File: 5nMoMh-dJNx-0JfIMPnJjh3mmHY.roa (raw, json)
Hash identifier: 1kiMIF491Eynpc/qfkL95Oed/P1pkLZG8MKAidDMaoc=
Subject key identifier: E6:73:28:32:1F:9D:24:DC:7E:D0:97:C8:30:F9:C9:8E:1D:E6:98:76
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA93A039346FD287DD0931BF4C174B3D0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/5nMoMh-dJNx-0JfIMPnJjh3mmHY.roa
Signing time: Fri 24 May 2024 06:11:42 +0000
ROA not before: Fri 24 May 2024 06:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:3a:03:93:46:fd:28:7d:d0:93:1b:f4:c1:74:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 24 06:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e67328321f9d24dc7ed097c830f9c98e1de69876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:82:b7:bb:d5:7e:d5:80:7e:83:3b:76:cb:b3:
61:ed:5d:17:75:94:c7:bd:86:06:0a:2d:f3:62:df:
ba:a9:d7:a2:ef:4f:d2:01:9f:31:c2:82:e9:a8:e7:
d2:b7:c5:50:32:dd:d6:44:18:61:5f:bf:7e:05:62:
cb:df:fa:71:66:e0:38:e4:df:6f:99:22:0d:48:0f:
74:e2:7e:7f:dd:20:85:07:f3:a4:33:e8:c9:ce:67:
9a:19:d8:ca:a8:6f:ee:1d:2a:5d:ef:c1:c9:43:3a:
fe:6f:fb:69:bf:43:98:8b:ba:09:a5:a5:1b:9e:08:
8c:cb:2d:7d:21:0d:24:d6:83:61:c9:3d:7d:b7:1e:
1c:40:5a:0f:06:1a:d5:5c:aa:69:8b:8a:4f:97:0f:
ad:c1:a7:c7:94:7d:ca:1c:c1:f8:ee:68:ef:99:b2:
5a:ac:e6:ec:fb:ee:c3:11:b7:6f:df:d4:0a:78:06:
fb:4c:44:4a:6d:58:bc:14:dc:75:28:4d:6a:d7:69:
59:99:35:a7:76:61:00:cf:c3:01:98:87:1f:18:d7:
1d:24:08:b8:f5:8f:08:87:5c:07:d7:13:67:1f:09:
cb:8a:20:2d:4f:85:2a:8c:10:37:ca:b7:39:ed:55:
b0:ee:6e:2f:29:b2:05:60:0a:bc:a2:c0:73:2c:51:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:28:32:1F:9D:24:DC:7E:D0:97:C8:30:F9:C9:8E:1D:E6:98:76
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/5nMoMh-dJNx-0JfIMPnJjh3mmHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:50:60:73:3c:3a:75:88:71:ac:67:c1:4e:dc:3a:17:57:73:
27:7b:c0:70:a2:49:1f:5d:c4:96:78:30:fe:95:3d:e1:50:d9:
d0:f9:2e:b2:c5:a1:d5:9f:b1:96:d8:6d:1f:11:7d:85:df:1f:
3f:e0:d2:31:7e:21:41:e5:1e:91:56:b6:a0:cf:55:59:42:89:
da:94:a5:de:b4:d1:d9:1d:e6:1e:fe:9f:f0:cd:ce:c8:9f:6d:
66:58:2d:86:34:ae:0e:04:81:d2:12:02:c1:7e:87:77:62:8c:
b8:46:7b:36:18:ba:31:03:47:58:28:8c:05:1e:03:1a:d8:54:
96:2a:7a:76:c9:8e:85:1d:a2:4d:07:a7:8e:0c:24:27:6a:35:
65:0e:87:4f:fe:ef:54:b8:49:eb:39:5f:a1:f5:c0:8e:c9:c9:
9c:98:b9:78:11:30:e0:49:18:1a:aa:1b:d6:d9:81:96:04:09:
75:35:90:a6:6c:9b:fb:e5:95:a6:3f:fe:21:52:1c:f6:76:1f:
6b:fc:37:1c:a0:84:43:2b:b0:23:a5:12:6a:db:0b:fe:a2:f8:
61:e1:18:94:e3:28:88:87:13:c7:e9:a3:c1:3a:51:b6:e0:69:
ee:7b:0a:01:87:00:7d:ee:29:1c:4a:65:f8:d2:ad:3c:10:e3:
7a:8a:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:37 2025 by rpki-client