Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OE9M7ibpg6WgqX6RUzMJ2B30ynU.roa
File: OE9M7ibpg6WgqX6RUzMJ2B30ynU.roa (raw, json)
Hash identifier: ZfhI2j0vB/pBIk71xqdNUBquwbWQJRilVS+Giz091Hs=
Subject key identifier: 38:4F:4C:EE:26:E9:83:A5:A0:A9:7E:91:53:33:09:D8:1D:F4:CA:75
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFAFED6907AF9962E964F4F084C4E8B90
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OE9M7ibpg6WgqX6RUzMJ2B30ynU.roa
Signing time: Sat 20 Apr 2024 10:13:08 +0000
ROA not before: Sat 20 Apr 2024 10:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fa:fe:d6:90:7a:f9:96:2e:96:4f:4f:08:4c:4e:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 10:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384f4cee26e983a5a0a97e91533309d81df4ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:48:34:88:ed:49:53:08:a4:c1:cd:2d:71:
66:58:a0:0c:12:f6:39:22:eb:ec:70:a4:33:c2:23:
46:21:b9:92:df:e3:34:6d:e4:8f:99:3b:ca:74:3a:
53:2f:6b:08:e5:63:e0:ba:81:71:05:2c:62:b1:77:
2b:0a:b1:0a:5c:72:f8:90:e5:90:49:e9:ff:43:4a:
10:e7:9e:fc:cc:23:76:85:3e:42:e0:06:06:9d:2f:
c6:0c:28:b4:bc:9b:f3:e8:43:b0:2d:4d:05:81:3a:
ba:37:fd:38:80:7e:bc:c8:42:59:14:d6:24:72:47:
f8:2d:9d:12:62:39:74:4d:a2:c7:af:08:e2:af:28:
40:a2:d5:32:e6:cf:42:1f:9d:61:3b:59:7f:13:ee:
a4:38:ec:21:0e:81:b7:d9:cd:86:c3:06:38:02:1a:
43:d1:d5:4b:6e:5a:7f:bb:93:59:30:4c:4f:1f:c3:
32:65:26:ba:eb:e9:43:4a:cc:2e:eb:da:c8:ef:62:
bd:9d:c1:52:04:25:fc:5b:8d:6f:87:99:4e:db:ff:
34:51:d3:5d:3f:a6:13:6c:fc:a3:be:b2:ff:32:bf:
88:be:6b:4e:06:fa:82:42:96:b8:f6:35:06:ae:b5:
a7:c0:74:ad:28:e0:60:b0:3a:90:99:a0:7d:ff:c8:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:4C:EE:26:E9:83:A5:A0:A9:7E:91:53:33:09:D8:1D:F4:CA:75
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OE9M7ibpg6WgqX6RUzMJ2B30ynU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
09:58:1e:27:8b:a0:48:51:34:e8:06:60:56:a9:90:56:0e:40:
95:1d:29:12:42:b6:9a:f5:a1:a3:55:85:e0:d8:e3:28:c2:ef:
fb:69:ac:2d:04:f4:fe:ae:7a:5e:92:cf:49:be:21:8e:26:a2:
74:27:fd:ef:de:38:f9:3f:db:b7:60:ee:98:9b:16:9b:e2:24:
7d:f3:c2:1e:28:6b:4d:10:b0:8a:0e:b7:52:04:08:ca:72:49:
87:d2:a6:25:ac:50:d5:97:ff:7c:6e:d6:c7:99:6e:b1:3f:b4:
d6:7c:5b:d8:fd:16:65:0d:bd:ad:1a:9d:d7:c6:ee:4c:1c:a3:
56:ab:c4:cd:11:db:bd:4e:7c:4a:61:1b:9e:94:00:9a:14:dc:
5c:e4:23:58:fb:c5:ac:1a:9b:be:4f:3e:ed:fe:4a:85:d6:5d:
96:dd:74:79:a3:54:eb:45:ba:d6:b6:0d:85:7c:0d:e6:61:68:
94:33:22:a5:56:c2:f1:13:90:a8:98:67:4c:63:1b:e2:2c:25:
f4:66:2d:8d:6c:6a:2f:c6:eb:c1:39:b3:4c:03:05:62:f9:c4:
19:7e:cd:36:38:0d:e3:da:1f:0d:c6:64:49:57:26:ac:a4:80:
13:ca:90:df:c2:f5:c9:27:28:4f:8e:e9:c1:e2:98:1c:a0:cf:
20:32:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:06:53 2025 by rpki-client