Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UWUcdcyasLW50foxa9iYghW3mq8.roa
File: UWUcdcyasLW50foxa9iYghW3mq8.roa (raw, json)
Hash identifier: 1CFaXPi9e4oP1BjmU8y+Di8UXB8Zmiwe2+k73lwgqH0=
Subject key identifier: 51:65:1C:75:CC:9A:B0:B5:B9:D1:FA:31:6B:D8:98:82:15:B7:9A:AF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8299BCEC3C291ADD26A7DAFFADC08571
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UWUcdcyasLW50foxa9iYghW3mq8.roa
Signing time: Thu 16 May 2024 18:11:04 +0000
ROA not before: Thu 16 May 2024 18:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:99:bc:ec:3c:29:1a:dd:26:a7:da:ff:ad:c0:85:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 16 18:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51651c75cc9ab0b5b9d1fa316bd8988215b79aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:bf:e8:09:04:70:2a:04:c2:77:22:39:c6:
7c:41:45:31:0f:3c:d0:c6:7c:59:ff:96:c2:d7:0e:
a1:1c:de:b4:36:b2:75:d4:b8:28:67:3d:b8:1f:ef:
26:bc:7b:e2:71:c9:a3:ac:18:e7:3b:69:c5:05:b0:
e1:de:53:c0:2b:17:3b:ff:c5:06:b5:42:59:e2:f9:
b8:e1:ca:72:a9:61:41:df:b8:ab:47:6f:19:61:93:
9e:a0:82:eb:e9:a9:4f:c7:dc:58:7b:88:e4:91:da:
e3:86:2f:c1:73:2f:61:73:57:1e:08:19:6e:ad:2b:
58:5f:40:ba:04:c4:fe:01:70:41:16:86:fb:12:09:
86:93:c9:b5:d9:00:ba:4f:03:6c:29:91:ee:52:e2:
ae:8e:94:07:d7:10:8e:78:24:68:68:20:6c:2d:55:
7b:ee:92:ae:0f:df:11:47:2d:47:d6:f4:f0:62:e8:
7b:dd:da:23:d4:17:b6:87:a2:82:13:86:3f:54:d3:
9b:1e:17:d6:69:21:b2:d2:11:0c:14:2c:9d:d9:be:
ff:0d:f3:dc:5f:b0:be:cc:fb:58:eb:e2:c7:12:90:
6a:9d:5c:ca:41:cc:3d:2e:a2:0f:a0:21:10:ae:95:
0f:e1:6f:3f:e4:ce:c3:73:c2:51:d8:86:9f:5f:4c:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:1C:75:CC:9A:B0:B5:B9:D1:FA:31:6B:D8:98:82:15:B7:9A:AF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UWUcdcyasLW50foxa9iYghW3mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:56:d8:60:87:50:21:71:69:a7:e5:27:01:65:4d:20:fa:9b:
5a:31:5c:cf:69:10:8e:c0:e4:e0:de:9c:c9:77:4a:49:e1:8a:
cc:84:6f:98:88:d7:f0:84:1e:d9:c6:ac:f7:a5:6a:3f:2a:c6:
de:17:75:22:ce:e7:a6:95:20:dc:cc:6d:a0:a4:a1:65:89:0e:
30:58:53:37:6a:22:fe:45:8f:7f:a4:39:cf:3b:2d:39:be:ed:
57:bd:3b:d7:c4:a0:e8:3a:d9:bb:10:dd:ff:96:8d:75:fc:da:
8b:cb:bb:82:e6:72:09:50:57:ff:a3:1a:97:80:4c:15:8b:53:
7d:37:65:89:f7:c3:67:4b:f6:95:57:ef:e9:00:f5:8d:0b:a5:
a2:4a:0d:0e:a2:73:ae:5a:e9:7d:80:da:ec:46:7b:0a:4d:62:
a8:20:88:c5:f3:9a:6c:60:66:19:5b:f0:ba:a9:62:51:c2:e1:
89:24:01:d3:ea:ad:8f:a3:39:19:4d:e9:40:8c:b6:86:8a:c9:
fb:84:1a:ff:5c:0d:58:15:dc:53:4b:97:c6:90:38:19:62:6d:
89:ac:4b:40:22:af:3b:32:cc:bf:dd:5c:80:32:bf:66:50:e4:
f7:4f:76:58:79:16:44:90:3e:0a:e3:05:53:20:90:57:12:2b:
65:25:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:27:17 2025 by rpki-client