Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J8WovNCpczGlb7elVBRoWYvsVVE.roa
File: J8WovNCpczGlb7elVBRoWYvsVVE.roa (raw, json)
Hash identifier: ygrnUtk+5GUG1S0yroBxxh8FLpKMRyXrZ6/CfKld1KE=
Subject key identifier: 27:C5:A8:BC:D0:A9:73:31:A5:6F:B7:A5:54:14:68:59:8B:EC:55:51
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F272AB9F57A3FE8179B069F555A01128B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J8WovNCpczGlb7elVBRoWYvsVVE.roa
Signing time: Mon 29 Apr 2024 00:04:22 +0000
ROA not before: Mon 29 Apr 2024 00:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:272a:a61c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:27:2a:b9:f5:7a:3f:e8:17:9b:06:9f:55:5a:01:12:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 29 00:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c5a8bcd0a97331a56fb7a5541468598bec5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:fb:4f:80:5c:5e:89:f6:20:1b:e8:2b:ae:
b7:9d:f5:57:fa:47:5f:0a:a1:32:86:9a:ba:86:62:
d9:24:4a:cf:d7:e5:7a:06:39:56:56:64:72:8a:4e:
2a:bf:42:c4:91:23:e0:4c:5a:cf:a5:ca:60:f5:f2:
de:ac:7c:f4:f3:ff:c5:42:85:c0:26:6c:d9:61:68:
cb:80:e1:82:fd:63:a8:64:58:e6:70:be:8e:d2:83:
8d:04:ea:09:7a:b1:f6:98:38:47:69:ae:af:8d:2b:
d9:60:7f:98:a3:dd:c9:b1:89:f4:db:0b:71:d4:0a:
d9:c5:bb:5d:2d:c5:16:e0:90:f9:f1:5e:e2:f3:ae:
6a:11:79:de:4c:17:71:c4:15:eb:e6:0d:9d:39:38:
d7:4e:14:1f:b3:f0:b1:7a:59:65:f5:45:25:7b:98:
0c:c8:f7:c5:5e:ff:9f:d0:8c:fe:27:10:d5:80:20:
ab:fe:9d:ef:3a:a4:d1:ec:7c:2d:76:bd:6b:ce:49:
45:5e:82:fe:44:77:d4:c7:3d:ed:87:d4:50:f0:64:
ff:aa:25:ba:9f:0c:87:ee:c6:b9:fd:2a:20:e9:f1:
b1:76:19:c9:7e:91:4e:2c:28:ce:0d:ad:50:31:9a:
03:0b:c2:61:62:d3:a6:bb:09:30:b6:4c:fd:74:8b:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:A8:BC:D0:A9:73:31:A5:6F:B7:A5:54:14:68:59:8B:EC:55:51
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/J8WovNCpczGlb7elVBRoWYvsVVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
2001:67c:64:ffff:0:18f:272a:a61c/128
Signature Algorithm: sha256WithRSAEncryption
0f:01:2e:22:39:49:41:13:27:e7:8c:1e:ee:89:9e:1f:f5:5f:
a0:19:c1:51:16:5a:e2:c9:8d:ef:18:c7:fe:fe:47:04:81:8b:
54:c1:7f:8d:4b:71:e5:98:16:93:9c:13:a8:7e:22:f2:e1:d6:
fa:28:da:d0:09:1e:47:fa:99:6b:5b:6d:35:3b:75:3f:50:27:
02:be:e4:1c:85:6b:f0:ff:cb:58:c6:21:af:3a:54:a9:fe:ca:
ac:b8:f9:22:8c:c9:18:4c:e8:62:25:a6:83:fe:23:ba:bb:da:
cf:77:0f:a6:69:94:74:c3:11:51:fe:30:1e:d1:9f:45:b1:b7:
7d:58:00:f1:70:b9:bf:5e:62:ca:52:86:85:67:60:62:6f:b9:
b4:62:1e:6f:10:ee:f0:cb:6f:82:76:93:63:37:b3:f4:de:7e:
6e:6b:1a:31:ed:68:29:b7:f9:85:3a:15:36:3c:bc:56:bd:7a:
42:1f:53:5a:09:5b:88:9b:b9:5f:12:c0:a3:cd:59:31:a6:bb:
7a:3f:54:67:a9:8b:87:4c:2d:c1:41:96:95:70:a7:e3:26:3d:
fa:d9:3f:45:94:50:d4:ad:a8:e0:f8:27:e0:3f:33:22:4c:fd:
1c:6e:46:b2:1d:d1:99:fc:fa:fc:f4:b6:c8:74:f5:a6:00:5a:
6e:ce:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:25:47 2025 by rpki-client