Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UB4q5xgjIl1Dy2QKHHT8DZIeCtk.roa
File: UB4q5xgjIl1Dy2QKHHT8DZIeCtk.roa (raw, json)
Hash identifier: w2PlLgmK2wW1fbY9JK+ovXExnYLgCj7IknUaQ4spskI=
Subject key identifier: 50:1E:2A:E7:18:23:22:5D:43:CB:64:0A:1C:74:FC:0D:92:1E:0A:D9
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EF8A01B1624FB6BCE5423EDF24D0E3868
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UB4q5xgjIl1Dy2QKHHT8DZIeCtk.roa
Signing time: Fri 19 Apr 2024 23:10:25 +0000
ROA not before: Fri 19 Apr 2024 23:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f8:a0:1b:16:24:fb:6b:ce:54:23:ed:f2:4d:0e:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 19 23:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=501e2ae71823225d43cb640a1c74fc0d921e0ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:33:1f:24:a1:9e:bf:a4:2f:ba:66:d7:92:
88:d3:3e:73:ae:30:f0:b5:84:f1:32:7f:03:2f:0f:
b4:7e:86:8e:41:33:36:55:30:f7:e7:07:ca:07:35:
8c:38:0b:d2:1d:7b:d7:c0:2a:70:c2:d8:c9:85:b3:
c4:b9:ae:1f:7d:ae:4d:e8:31:9a:ac:b7:56:d0:bc:
c4:57:16:28:dc:77:39:b4:71:40:7d:4b:49:2a:17:
f7:a0:a4:a6:72:e0:e5:b2:f8:a3:1a:b3:ff:6b:5b:
27:53:39:be:d2:c3:99:f6:02:43:03:d6:77:99:65:
36:f7:fb:4b:33:6a:1f:95:2f:76:79:7d:3c:d8:d1:
6f:ef:83:ef:d7:30:0e:5a:1b:eb:e2:45:68:80:a4:
0c:f6:75:f0:54:40:b7:b7:e8:c5:4a:f1:4f:f8:3d:
74:d9:82:19:0e:90:40:ee:2f:27:d1:7c:c5:d1:7d:
46:a6:da:29:eb:0b:66:bf:62:34:57:d0:71:be:04:
27:d7:1a:84:c3:82:1c:8b:0e:bf:e8:ad:dc:be:f3:
a2:64:d9:57:02:36:eb:79:01:bd:45:89:97:3a:24:
10:bf:d6:17:d1:4e:6f:b7:e1:52:0a:86:7e:0b:16:
25:06:1b:f6:92:55:aa:c3:f1:78:2f:6a:30:c6:b4:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:2A:E7:18:23:22:5D:43:CB:64:0A:1C:74:FC:0D:92:1E:0A:D9
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UB4q5xgjIl1Dy2QKHHT8DZIeCtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:5b:52:15:33:1e:ee:94:3a:a6:66:e1:38:f3:4a:98:f8:0c:
ef:30:59:c8:b6:62:d7:7a:30:8d:ca:60:99:c6:8d:af:e0:f5:
15:7c:b7:ea:5e:9e:56:a3:5c:c2:15:8f:0e:64:de:b4:f8:d9:
8b:4c:fb:42:b4:ab:67:da:56:f8:2c:13:a5:19:ef:4a:e9:f4:
5b:46:a2:a9:e1:45:c5:c3:f8:eb:bb:42:b4:91:77:f3:06:6e:
47:24:3c:16:8e:cd:d9:c4:05:b9:ac:c7:83:43:dc:5c:d7:cd:
58:5a:27:74:36:f9:74:e8:a0:b2:a7:c3:e8:e1:62:79:b5:7f:
df:bb:a0:c6:07:b7:04:2c:4d:e7:83:c6:b2:f0:a3:f7:aa:89:
f8:d9:3b:8d:96:a4:75:ca:15:71:60:1a:fe:8b:d6:9c:05:f7:
14:2d:a2:44:5b:23:d3:f1:a8:a3:1a:39:4c:b6:d7:5c:95:66:
32:5b:2d:cd:84:95:88:b4:11:83:b0:78:33:54:64:c8:72:f2:
8d:36:25:1c:c4:4d:06:db:c8:ba:8f:f2:bb:19:23:59:1e:b3:
42:4a:48:f6:e0:f2:2c:1a:4a:26:28:af:4c:0f:c8:aa:b2:4a:
56:c8:cf:f0:90:31:91:c3:45:79:e3:b2:11:d9:f7:46:d6:07:
da:94:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:35:51 2025 by rpki-client