Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/M5fzYmC52w2ZFs9P_a6pcgFQQs8.roa
File: M5fzYmC52w2ZFs9P_a6pcgFQQs8.roa (raw, json)
Hash identifier: pnW9Z8fDRXZ7bRxlb9O4C4+5W0l0KMmoYq2SyEtSCBQ=
Subject key identifier: 33:97:F3:62:60:B9:DB:0D:99:16:CF:4F:FD:AE:A9:72:01:50:42:CF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F95EB6AD4602A89C7C0F8ED475239DABC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/M5fzYmC52w2ZFs9P_a6pcgFQQs8.roa
Signing time: Mon 20 May 2024 12:13:04 +0000
ROA not before: Mon 20 May 2024 12:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:eb:6a:d4:60:2a:89:c7:c0:f8:ed:47:52:39:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 12:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3397f36260b9db0d9916cf4ffdaea972015042cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:53:b6:bc:17:97:29:ea:dc:86:2f:f2:db:
b7:07:55:ef:01:88:58:4a:30:1f:12:4c:5d:38:3d:
1a:b6:2c:9c:f0:b8:a7:71:39:83:82:20:6b:a5:08:
af:d2:cd:5c:67:53:4b:c9:fd:c9:c7:34:d1:7d:f9:
94:06:6c:2a:ae:8a:0d:58:18:ea:3e:29:e3:ab:09:
8f:9d:d9:24:04:b0:3d:e6:29:31:97:b4:5f:bf:20:
b1:21:e8:45:ad:d2:17:42:59:d7:75:cd:e4:c5:bc:
53:14:61:5c:1c:1f:9d:a4:6a:a6:ff:25:7c:46:26:
3c:e9:63:8f:32:08:b6:54:ef:a3:75:b3:29:fc:7c:
86:c4:cb:f5:a8:be:7c:7a:73:e5:0a:e4:3d:43:f4:
22:74:d0:58:e0:b2:f8:cb:6c:fd:16:1c:78:88:80:
c2:54:29:5e:ca:c3:3f:85:f0:cd:d6:35:17:e0:4d:
7d:5b:2b:68:62:fc:47:97:7e:9b:53:65:4a:e0:c8:
b2:25:61:fd:3b:76:00:33:1a:aa:17:51:fe:fa:d3:
45:b4:94:7d:74:fe:14:19:26:0c:65:28:29:fe:bd:
74:41:57:16:0e:66:41:6c:b0:85:74:dc:fe:d3:46:
de:2f:56:ba:c3:a6:74:68:93:44:16:92:fa:70:bd:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:F3:62:60:B9:DB:0D:99:16:CF:4F:FD:AE:A9:72:01:50:42:CF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/M5fzYmC52w2ZFs9P_a6pcgFQQs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:79:e3:11:1c:8c:1e:42:bd:8e:e1:e4:35:6f:2a:3b:99:b7:
15:7e:8e:ba:d5:01:c8:11:a0:da:38:38:e1:7a:16:16:18:12:
31:dd:aa:41:79:bc:cc:86:fe:61:d7:3d:17:1e:cb:e1:6b:9f:
c7:a4:84:10:3a:25:5a:6b:e9:73:cc:93:7c:9a:a0:1c:93:3b:
e1:ad:91:88:8a:81:4e:a3:b5:6d:ac:37:28:78:26:87:6d:03:
3a:42:07:1f:08:5a:32:91:53:41:d7:5e:b3:ba:4d:3d:d3:08:
1d:1c:55:9b:24:47:f6:b6:fc:54:62:60:bd:fa:85:2e:39:0f:
84:49:99:12:a5:4b:a1:06:35:31:b5:44:02:08:06:26:84:76:
4b:68:d7:5b:11:48:81:56:a1:80:ef:c2:2b:4b:26:46:03:39:
da:f2:9a:11:f3:da:55:28:54:ad:34:c8:ed:89:6e:a9:03:49:
c9:4c:3b:b3:36:e8:90:9d:55:21:c1:b9:0d:72:65:bb:e3:70:
18:76:42:b0:bd:46:26:2c:fd:0f:16:4d:5e:fe:4b:c0:2f:c8:
6b:28:56:ef:d7:a8:83:4f:84:6f:28:33:26:39:6d:cc:c1:f5:
68:58:c7:c4:48:d2:85:aa:d6:de:65:b3:2f:b1:65:6b:96:c2:
47:2f:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:10 2025 by rpki-client