Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UoR_ai2jvb5GGJsqIcYQHilfk_8.roa
File: UoR_ai2jvb5GGJsqIcYQHilfk_8.roa (raw, json)
Hash identifier: opbhk88EIQmi6Q/YjfwBjMnA/MOG0ZghUdB0GSJH8A8=
Subject key identifier: 52:84:7F:6A:2D:A3:BD:BE:46:18:9B:2A:21:C6:10:1E:29:5F:93:FF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F2BEB77137DB940C7B9AE185E3BD74510
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UoR_ai2jvb5GGJsqIcYQHilfk_8.roa
Signing time: Mon 29 Apr 2024 22:13:22 +0000
ROA not before: Mon 29 Apr 2024 22:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2b:eb:77:13:7d:b9:40:c7:b9:ae:18:5e:3b:d7:45:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 29 22:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52847f6a2da3bdbe46189b2a21c6101e295f93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:69:13:4e:3c:c1:c9:b2:67:63:8a:3d:da:
b1:9b:ac:1d:e6:0c:a4:bb:b6:3a:06:26:92:ea:7e:
d3:04:f9:12:ff:e7:8c:32:55:9d:ff:bc:4c:fb:60:
24:08:fa:d1:97:83:dd:77:76:f8:01:89:66:a8:03:
10:d4:17:1e:a4:a3:e6:6e:7f:94:e8:9e:47:62:23:
02:0c:96:6e:98:cb:cd:48:c4:15:4b:92:ae:d2:f6:
59:35:85:69:14:ff:93:a0:e9:1f:5a:ff:c9:16:ee:
27:c9:4a:28:3d:4d:eb:87:5a:42:0a:c3:90:e8:38:
01:3a:7c:78:61:d4:61:6d:ae:0a:7b:5f:00:50:8f:
3f:1e:16:8f:a5:e0:68:b8:72:44:6d:b6:cf:53:22:
2f:0c:7f:eb:fa:c9:34:68:80:79:47:0c:26:55:0c:
44:1d:9c:16:2f:33:01:1c:ea:8b:03:ec:a2:44:85:
ac:96:e0:62:86:5d:2b:d6:4c:6a:d6:ae:5a:be:0d:
09:dd:26:f8:40:b6:34:40:08:d5:b0:31:49:1a:bc:
2b:05:82:cf:34:23:10:dc:24:5d:f4:ac:ee:58:a3:
39:d9:6d:04:45:fd:dd:ff:16:4c:87:ca:a8:18:7d:
70:7a:44:b2:c4:62:51:9a:3b:f9:ee:bc:bc:a8:8c:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:7F:6A:2D:A3:BD:BE:46:18:9B:2A:21:C6:10:1E:29:5F:93:FF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UoR_ai2jvb5GGJsqIcYQHilfk_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:27:7e:20:eb:77:dd:e8:3e:53:32:9e:48:2e:20:2c:c7:22:
cd:13:5c:c7:e8:62:18:9a:f4:c8:0a:d8:a3:82:1b:c6:98:16:
06:eb:71:f1:50:e3:f1:f9:7a:fa:16:d7:bb:a8:f1:25:d8:75:
4b:0f:65:af:14:0d:31:cc:fa:ee:ff:53:fd:13:ff:fa:49:0f:
66:34:18:8d:f4:ad:71:57:6f:4a:ea:bc:f4:ef:6f:f5:11:f7:
2b:2a:39:09:2a:25:fd:c1:ca:e6:1b:18:fb:d6:ca:10:ba:da:
c7:fe:f4:64:19:3a:77:35:f5:4d:3d:1b:6d:4f:85:04:eb:4d:
28:78:58:00:86:e0:1f:9f:d5:42:e6:a9:88:7a:5b:49:da:8f:
10:18:71:f5:02:e6:3d:5c:ae:ca:f8:e4:b2:cc:55:a8:35:32:
d0:58:d9:bc:dc:2f:9f:d0:3e:8d:6b:50:de:55:30:fb:f8:e4:
dc:a5:0b:8d:45:38:77:0a:dd:a8:dd:fa:21:bc:27:33:0d:9c:
ba:79:8b:85:56:2a:a8:87:90:f5:a3:45:4e:6a:62:ef:c9:ac:
83:12:09:57:47:21:7a:e1:4d:18:3d:bf:7b:e0:6c:58:cf:7c:
f1:ca:64:21:bc:bb:ea:f6:8c:8d:b5:78:1d:45:b2:fc:00:86:
a4:bd:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:58 2025 by rpki-client