Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9akgfsRLe7dEsu2i1R2mmKzS_TU.roa
File: 9akgfsRLe7dEsu2i1R2mmKzS_TU.roa (raw, json)
Hash identifier: 4FoVGq4z7LBKaYRFhw1wj1urEAmGoWxirdKr3oIA2Lw=
Subject key identifier: F5:A9:20:7E:C4:4B:7B:B7:44:B2:ED:A2:D5:1D:A6:98:AC:D2:FD:35
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9E7B7AB628196F57596C09FDFCDE470A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9akgfsRLe7dEsu2i1R2mmKzS_TU.roa
Signing time: Wed 22 May 2024 04:07:23 +0000
ROA not before: Wed 22 May 2024 04:07:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:9e78:bf67/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9e:7b:7a:b6:28:19:6f:57:59:6c:09:fd:fc:de:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 04:07:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a9207ec44b7bb744b2eda2d51da698acd2fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:51:42:dc:f3:b4:7b:ed:54:67:1a:1f:53:
1a:07:c9:23:b8:20:34:5e:ab:10:74:9e:17:f4:e4:
a0:6b:ef:a0:93:ca:bd:96:da:c2:fb:7b:13:d2:4c:
8e:2d:16:fd:bf:dd:aa:06:14:f6:8c:c4:44:69:57:
9c:60:7d:52:74:4a:93:35:4c:df:a5:fa:c6:cf:ed:
ac:10:88:d1:49:a7:88:82:3e:75:5a:84:b8:45:27:
f4:d5:9f:19:f2:95:61:dd:a6:4c:97:a0:af:7b:20:
ba:16:a1:45:44:f7:75:70:82:86:82:4d:75:17:36:
99:21:e4:bd:b1:38:1f:47:ca:f1:02:0e:4b:1d:d0:
59:f8:fc:43:92:e9:b6:32:d0:27:12:06:23:19:01:
99:25:ae:1d:71:50:63:39:a5:2b:2a:46:dd:54:f5:
23:32:55:2d:69:d4:de:e6:eb:1f:2f:ea:e6:b3:f8:
f5:57:71:88:6c:cd:84:38:ae:ea:8d:d8:97:3a:a3:
dc:73:32:1b:23:6d:a9:94:b5:90:d5:30:e1:e8:b9:
16:b0:8c:2e:52:6a:63:64:fa:36:04:48:e3:91:9b:
a1:68:71:e4:56:27:65:1d:1e:e9:15:56:04:e4:ae:
fc:07:66:10:c9:01:4d:f3:e2:30:61:71:e5:3a:b8:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:20:7E:C4:4B:7B:B7:44:B2:ED:A2:D5:1D:A6:98:AC:D2:FD:35
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9akgfsRLe7dEsu2i1R2mmKzS_TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:b9:8f:cd:30:e0:1d:ef:26:bd:f0:52:eb:ad:56:fb:bb:24:
13:ed:4a:f1:1d:37:4e:b2:86:ee:db:cd:45:94:48:3d:8d:b4:
9e:8a:dc:f8:54:f2:1f:d4:df:f2:8d:60:47:30:47:f8:91:de:
44:36:14:61:ad:fb:c7:3b:bb:fc:30:a3:3e:24:95:19:ed:01:
88:8e:55:02:77:2f:91:0f:a5:69:e0:c3:df:4f:b1:23:ef:ff:
f0:ff:7d:82:a5:c8:01:78:0f:f7:49:c3:00:1f:1d:91:c6:a7:
b8:e0:ec:ab:c3:0f:12:44:93:2e:4d:4a:6f:80:d5:a7:32:71:
39:e1:2d:8d:c7:90:45:3f:6f:5b:d6:ee:51:d9:3d:19:37:e3:
80:30:4b:b8:35:03:3e:57:af:3c:70:a0:72:c6:75:2d:16:19:
a0:16:89:e3:4b:bb:ee:b9:fa:a1:d1:9c:9a:1e:3d:f3:7f:0f:
b9:ea:de:8b:d1:d7:ad:79:b8:73:80:b9:c3:44:51:f2:ea:90:
25:40:10:96:02:21:89:f7:15:94:5f:97:a4:02:73:83:16:67:
88:7a:73:9d:02:46:7b:8e:18:c0:8e:63:13:1f:73:f2:71:be:
4f:8b:1d:09:89:b0:34:f2:28:bf:d6:b7:4f:f0:73:05:95:0a:
f7:3f:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:48:15 2025 by rpki-client