Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BXXz-UB9UZLZPg4b4CpIstEK50I.roa
File: BXXz-UB9UZLZPg4b4CpIstEK50I.roa (raw, json)
Hash identifier: XT9RcP0S2Dn4FgfDGZ+MKhc+WQv5PXploqmkjwUYDgc=
Subject key identifier: 05:75:F3:F9:40:7D:51:92:D9:3E:0E:1B:E0:2A:48:B2:D1:0A:E7:42
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F7DA9B7F780B0AD66789E22A9315501D7
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BXXz-UB9UZLZPg4b4CpIstEK50I.roa
Signing time: Wed 15 May 2024 19:10:25 +0000
ROA not before: Wed 15 May 2024 19:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7d:a9:b7:f7:80:b0:ad:66:78:9e:22:a9:31:55:01:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 15 19:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0575f3f9407d5192d93e0e1be02a48b2d10ae742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:c5:92:02:49:d1:c6:b2:ca:08:37:08:ae:
a0:65:64:8f:c3:74:77:f8:93:25:be:23:d3:79:d6:
72:6a:c6:21:1c:de:5e:a6:79:06:17:47:87:5b:2a:
f0:d0:38:d3:e4:ef:ba:6c:35:a3:ba:fe:37:26:c3:
e0:b0:24:38:56:42:e1:fc:9b:69:b2:ba:85:9f:21:
bb:95:88:42:cf:be:22:7e:59:a5:4c:3f:6c:9e:75:
54:c7:0f:d1:7f:4e:88:83:44:f4:d2:cf:07:06:66:
d4:d5:e9:11:bf:f2:db:f3:13:f0:94:16:16:6f:93:
fe:18:9f:c6:09:d6:28:05:4c:ac:a2:db:de:6a:d1:
6a:6c:3f:ad:3a:98:a5:83:e3:47:2a:aa:34:f4:f1:
b1:73:4e:5f:a2:d2:cb:d6:cd:3f:c6:e3:73:f4:2c:
73:62:38:47:c7:6d:27:da:c6:af:a9:fe:7f:85:8f:
11:36:9a:6a:4e:d7:5f:74:0f:ac:7e:47:88:d8:ed:
32:88:b4:1f:12:19:3c:99:68:ef:a2:f5:7d:7a:d7:
d2:96:86:fc:06:46:c9:cc:0b:58:a8:48:a9:9e:65:
f7:90:74:35:a5:dc:bb:4e:f1:f1:c3:89:19:b7:ca:
e2:98:2a:c0:d7:06:71:af:54:3d:6c:79:6b:f7:17:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:F3:F9:40:7D:51:92:D9:3E:0E:1B:E0:2A:48:B2:D1:0A:E7:42
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BXXz-UB9UZLZPg4b4CpIstEK50I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:bc:cb:b2:87:d1:9a:82:6d:5d:9d:6c:50:8e:d0:51:53:e3:
9b:e7:fd:57:f0:46:2a:3d:91:07:67:df:51:f6:a5:d3:10:f8:
5d:6f:b2:78:ea:d6:32:55:7d:d1:d0:f9:bd:6c:70:b5:66:0f:
10:5e:a2:91:f5:0f:94:3c:b4:69:23:23:f0:e4:4b:a5:a9:a2:
31:32:9a:86:cf:1e:78:f2:c8:53:a5:20:f1:48:87:a7:e9:d5:
3e:06:83:a8:a9:00:c3:59:e2:61:15:0c:f6:62:65:a6:e9:c7:
16:73:f5:a4:30:64:22:24:ab:a9:fa:3e:18:c5:83:1a:63:5b:
4b:27:de:4e:5a:9c:4d:ae:5c:32:49:81:68:05:e8:16:0e:2c:
0a:cc:af:a4:24:3b:40:17:32:24:d5:cd:d1:aa:58:e6:07:1b:
ee:e8:10:95:f6:54:08:3d:29:88:4c:68:b5:dd:0b:83:77:92:
88:b4:49:05:e7:a0:4b:d1:3e:00:6b:6d:ee:4c:62:3a:71:4b:
2d:dc:02:e2:f1:10:c9:77:3e:a3:d2:02:db:57:d0:ec:ea:44:
e3:47:82:9b:00:af:8e:47:10:be:8e:02:5a:74:a0:fb:4f:02:
2e:4d:f9:4a:99:59:3f:c2:ca:75:25:b2:02:51:ea:b0:b0:ec:
cb:a2:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:38 2025 by rpki-client