Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NmeyH5JZ66bWa_eYNE0SVFgJJmk.roa
File: NmeyH5JZ66bWa_eYNE0SVFgJJmk.roa (raw, json)
Hash identifier: wVptXIUgk9Zj8mnNanMqv4yceWPa/xtMzwPS1VxhOug=
Subject key identifier: 36:67:B2:1F:92:59:EB:A6:D6:6B:F7:98:34:4D:12:54:58:09:26:69
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F38CAF7929CCFF00F5E931A5C249F2953
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NmeyH5JZ66bWa_eYNE0SVFgJJmk.roa
Signing time: Thu 02 May 2024 10:12:56 +0000
ROA not before: Thu 02 May 2024 10:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:ca:f7:92:9c:cf:f0:0f:5e:93:1a:5c:24:9f:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 2 10:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3667b21f9259eba6d66bf798344d125458092669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:2c:f3:2e:c8:54:22:43:e1:40:b1:a8:c6:
fa:99:be:26:49:42:b6:c0:9a:f7:f7:f6:ac:82:a6:
38:25:ea:d3:e1:57:9e:9c:71:03:18:92:a0:87:88:
a7:5e:ac:d5:4b:45:0d:6b:59:6f:64:20:9f:cd:35:
2a:94:e8:6e:68:6e:ba:8a:87:0d:0f:56:d9:21:b4:
ef:30:f2:1f:fc:9e:3f:c4:bf:c6:cf:2a:4e:3f:03:
f7:dd:79:9b:06:d8:d7:6e:a6:20:3f:e3:cd:f9:d6:
e9:e3:d9:88:74:0e:36:d2:82:c3:85:9e:14:61:dc:
3d:c0:f3:f2:91:93:6a:72:5f:8c:ec:b3:01:18:97:
74:74:6f:6d:0b:30:35:ef:0e:08:2d:4e:6a:e2:4a:
eb:2e:6f:a7:e7:38:f7:76:5f:47:1a:91:ea:fa:07:
78:a1:ec:8e:b1:bb:2d:72:20:21:93:84:37:b9:c4:
f3:fc:45:ca:02:4a:cb:97:1f:14:3b:cb:74:67:d8:
d0:91:84:c5:e6:96:fb:45:95:f1:91:20:7d:86:a3:
3f:fb:8b:25:74:8a:7f:a9:c2:ea:38:24:79:68:bc:
ba:fc:89:89:39:9a:0e:d2:99:2f:3c:14:98:fa:88:
1a:a0:68:b6:0f:82:d6:d2:19:50:1d:d6:94:08:62:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:67:B2:1F:92:59:EB:A6:D6:6B:F7:98:34:4D:12:54:58:09:26:69
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NmeyH5JZ66bWa_eYNE0SVFgJJmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ff:bf:01:70:da:61:ac:15:1c:1a:34:db:6c:c4:19:8c:94:
95:25:ac:80:ce:da:6c:1a:5c:82:54:a1:0c:65:e5:f6:36:48:
66:89:18:30:7c:f7:ef:4b:17:fa:15:fc:78:74:2a:05:dc:91:
4f:20:32:ac:13:8b:a6:5f:49:5b:cc:ea:e1:ba:bb:4c:d2:08:
48:43:ae:bf:82:ae:47:a7:62:30:02:f8:5c:45:b2:a9:62:49:
d4:3c:93:03:8c:f6:9b:d0:04:1d:47:cc:68:03:1f:57:36:a8:
84:6b:50:e3:96:86:7b:a6:5f:f4:61:d0:99:c4:d5:81:c4:8a:
af:5b:b0:f4:ba:8e:43:2b:e1:fb:40:90:22:c7:75:d1:7a:b5:
d9:55:f0:9e:d5:c5:5a:ac:f6:bd:b3:c6:2d:9c:eb:7e:22:c5:
5f:a7:bc:d8:1f:fd:d7:e3:68:93:c8:9f:94:fb:69:87:2d:e3:
ef:68:ee:ea:bc:39:d1:9f:e9:e7:39:ef:d4:b8:18:6f:d9:41:
2b:3d:bd:25:40:4f:9e:2a:f3:6e:69:3e:09:66:ef:c5:65:6c:
a8:37:72:ab:48:ea:61:ec:02:2e:3a:2f:f5:26:bd:a6:ea:48:
b1:64:ec:41:e8:cf:18:87:c1:79:59:07:c6:fe:a4:ff:e9:7e:
28:cd:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:04:10 2025 by rpki-client