Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/S_7j6y3lh5B08b9QQyRsQVMCSRc.roa
File: S_7j6y3lh5B08b9QQyRsQVMCSRc.roa (raw, json)
Hash identifier: HhyHtUqv+WRDkcdTnEH7iP1VIIr9e3AoJfHR6ksiik0=
Subject key identifier: 4B:FE:E3:EB:2D:E5:87:90:74:F1:BF:50:43:24:6C:41:53:02:49:17
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F65A0EE44CC556240FC17655586598E91
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/S_7j6y3lh5B08b9QQyRsQVMCSRc.roa
Signing time: Sat 11 May 2024 03:09:56 +0000
ROA not before: Sat 11 May 2024 03:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:65:a0:ee:44:cc:55:62:40:fc:17:65:55:86:59:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 03:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bfee3eb2de5879074f1bf5043246c4153024917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:d3:31:15:92:ef:0b:46:af:e8:f4:a7:6d:
e8:80:5f:5c:4d:65:40:88:e8:42:63:7b:f4:2a:ed:
16:cc:90:c4:54:34:3b:b8:1c:83:41:b0:29:18:cd:
42:1f:20:69:d4:37:ef:45:33:03:08:a3:29:d3:18:
d3:fa:4a:82:5f:84:dc:ed:83:dc:1c:45:cc:97:a5:
80:bc:b9:e0:47:bc:cb:de:af:3c:48:2f:5f:db:ec:
2d:84:c0:86:92:94:84:03:0e:33:75:b9:25:05:3e:
eb:78:0e:38:65:cc:1b:fe:cc:06:88:64:77:0a:93:
f7:b3:da:46:b0:df:60:18:5b:cc:02:17:a8:cb:d1:
58:e3:6d:dd:13:92:6b:b7:dd:62:7a:6a:df:c2:60:
32:ee:63:fc:e2:b0:95:4a:8d:90:fe:6d:c0:15:ab:
98:89:e1:db:50:a3:20:74:31:80:c5:a3:76:7e:00:
33:1e:c4:3c:5f:79:ca:29:53:c1:34:58:ae:23:36:
f6:53:fa:46:41:35:bd:68:1b:69:8e:1c:c6:cb:fd:
15:3b:cd:0c:e7:d8:f2:a2:30:86:64:e1:fd:ee:19:
be:60:3c:bc:34:9e:03:ca:56:72:aa:a6:7c:f8:af:
41:89:c8:65:51:fd:4e:4a:d6:d8:8a:b8:c9:29:7a:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:E3:EB:2D:E5:87:90:74:F1:BF:50:43:24:6C:41:53:02:49:17
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/S_7j6y3lh5B08b9QQyRsQVMCSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:a6:24:ea:75:bc:08:e1:6c:8f:b8:2c:fb:00:22:12:6e:54:
46:0c:21:70:da:a6:91:1a:74:bc:69:7c:a2:7e:f3:54:be:32:
9d:d6:82:70:ff:9a:3a:d1:83:75:12:da:bc:36:c3:33:6c:41:
b8:de:31:63:f1:5b:62:a6:bc:e1:b6:ae:5b:94:3f:c3:27:ed:
e8:6d:54:fd:b8:53:8e:ba:10:1f:8b:c2:95:81:7a:a0:83:30:
9a:ba:94:13:c3:18:f2:10:94:60:88:01:9e:85:de:9f:44:4f:
47:79:c7:a0:f5:73:aa:c6:d4:d0:b7:6d:83:1e:5e:68:2a:ad:
95:21:05:b0:54:92:bf:04:2b:1f:1f:4b:ce:ae:07:96:c8:51:
3d:a0:46:a1:c1:b5:ae:48:18:e6:46:15:fc:ce:cc:ad:6c:05:
fb:9f:20:46:2b:79:5d:19:62:45:fc:f4:8a:51:2e:0f:85:ab:
36:07:53:b1:3f:52:7f:66:98:f2:7d:f1:d5:8f:9f:0a:15:b6:
3a:f6:79:69:d8:e1:8f:ff:cc:b1:88:09:b4:44:ae:b4:c5:d8:
bc:cf:dd:fb:60:2e:a5:56:1e:70:0b:41:c6:0c:e3:ac:6b:e2:
c0:e2:97:e5:34:83:4d:e2:d5:98:2c:21:36:8e:d0:ea:4d:1e:
b6:73:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:16:20 2025 by rpki-client