Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa
File: FXlO6AB35uSMfZQ6_stBU-BabSU.roa (raw, json)
Hash identifier: J5OHiYbhZ/8lpiI6P+na12tnp9Kc1/s/M/8hMKFxTpo=
Subject key identifier: 15:79:4E:E8:00:77:E6:E4:8C:7D:94:3A:FE:CB:41:53:E0:5A:6D:25
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4B3C579A4DD8B5A3036BA612164B8657
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa
Signing time: Mon 06 May 2024 00:09:56 +0000
ROA not before: Mon 06 May 2024 00:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:3c:57:9a:4d:d8:b5:a3:03:6b:a6:12:16:4b:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 6 00:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15794ee80077e6e48c7d943afecb4153e05a6d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:e8:b6:fe:af:bc:46:d1:33:08:da:6e:09:
34:81:50:cb:c9:83:b4:34:2a:78:08:14:0e:0a:49:
a7:b3:24:76:cf:a8:d6:d4:80:0f:41:f1:eb:1b:bf:
ff:11:49:d2:ce:24:63:f0:1d:af:58:1c:47:b7:b1:
7a:ff:3e:01:89:52:42:85:f4:c2:f3:56:14:44:a2:
76:bd:33:5f:b4:41:de:54:71:98:4c:a5:4c:2a:b3:
88:ac:ab:6e:ea:58:f0:5b:62:19:1c:48:ff:b1:a5:
bc:e9:be:af:23:24:61:6c:21:7a:b3:c0:5a:e9:e1:
41:ca:0c:f2:77:d6:0a:57:d2:19:58:50:6a:06:e6:
a4:3a:2a:51:0a:52:ce:a7:63:ef:42:c8:53:dc:65:
18:69:23:ba:53:b5:2e:3d:c5:69:b6:5c:67:c3:ed:
e3:c1:f9:8c:55:28:51:93:fd:f6:73:e9:8f:37:a5:
3d:f0:2b:07:2f:0a:a5:e6:95:67:86:f9:0a:1e:47:
94:03:6e:49:7d:1a:56:52:5d:b2:fd:d3:fa:67:3b:
b5:9e:e9:bd:7f:ce:46:4d:d9:6f:69:ed:81:41:d6:
da:19:37:4f:ce:0b:bd:0e:df:b7:6f:9e:8e:38:62:
68:7c:87:aa:0c:81:d9:85:ed:8e:41:50:16:ff:07:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:4E:E8:00:77:E6:E4:8C:7D:94:3A:FE:CB:41:53:E0:5A:6D:25
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:e4:e8:31:98:7f:b5:37:c4:44:4b:b4:d0:1d:d9:a2:91:9a:
10:1c:d8:f2:9c:55:d5:19:59:01:92:76:cc:f3:79:b5:93:7c:
26:2a:9f:58:de:50:d6:79:a9:8a:5e:ee:59:8f:92:52:c0:87:
12:2e:8f:e9:73:3c:33:ad:be:91:ab:fb:cd:31:0c:a3:50:c7:
1e:ad:74:d8:ec:ad:a5:53:12:13:07:27:80:e9:f9:89:4d:c7:
2b:50:4f:73:fd:38:fe:24:87:ab:e9:4e:d1:34:43:c2:b0:05:
c1:54:2b:86:6b:11:a2:82:73:84:e3:ff:83:cc:54:10:2f:74:
bd:26:89:ae:e2:b8:4d:13:42:76:5b:93:4e:30:60:b0:a1:18:
26:ab:28:5d:5d:66:e1:5b:18:57:85:bf:be:6b:d0:0c:8d:53:
1b:aa:1b:5b:45:fa:15:4b:11:38:4e:32:00:cb:9a:55:49:e7:
86:39:cd:6d:13:22:b3:06:a9:7b:7f:09:a6:09:99:0f:02:15:
b4:7a:ff:56:33:8a:81:d7:49:2e:56:7b:42:76:fe:43:b0:09:
42:49:ea:f8:38:d1:9c:98:e5:8b:c5:77:81:50:1e:f1:77:41:
15:2c:89:f2:ba:13:bf:0d:7f:c5:fc:76:be:76:b2:a0:a3:ae:
01:73:03:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9LPFeaTdi1owNrphIWS4ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA2MDAwOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc5NGVlODAwNzdlNmU0OGM3ZDk0M2FmZWNiNDE1M2UwNWE2ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLotv6vvEbRMwjabgk0gVDLyYO0
NCp4CBQOCkmnsyR2z6jW1IAPQfHrG7//EUnSziRj8B2vWBxHt7F6/z4BiVJChfTC
81YURKJ2vTNftEHeVHGYTKVMKrOIrKtu6ljwW2IZHEj/saW86b6vIyRhbCF6s8Ba
6eFBygzyd9YKV9IZWFBqBuakOipRClLOp2PvQshT3GUYaSO6U7UuPcVptlxnw+3j
wfmMVShRk/32c+mPN6U98CsHLwql5pVnhvkKHkeUA25JfRpWUl2y/dP6Zzu1num9
f85GTdlvae2BQdbaGTdPzgu9Dt+3b56OOGJofIeqDIHZhe2OQVAW/wdSmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBV5TugAd+bkjH2UOv7LQVPgWm0lMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvRlhsTzZBQjM1dVNNZlpRNl9zdEJVLUJhYlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALHk6DGYf7U3xERLtNAd
2aKRmhAc2PKcVdUZWQGSdszzebWTfCYqn1jeUNZ5qYpe7lmPklLAhxIuj+lzPDOt
vpGr+80xDKNQxx6tdNjsraVTEhMHJ4Dp+YlNxytQT3P9OP4kh6vpTtE0Q8KwBcFU
K4ZrEaKCc4Tj/4PMVBAvdL0mia7iuE0TQnZbk04wYLChGCarKF1dZuFbGFeFv75r
0AyNUxuqG1tF+hVLEThOMgDLmlVJ54Y5zW0TIrMGqXt/CaYJmQ8CFbR6/1YzioHX
SS5We0J2/kOwCUJJ6vg40ZyY5YvFd4FQHvF3QRUsifK6E78Nf8X8dr52sqCjrgFz
A6U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:40:25 2025 by rpki-client