Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UvzudtLZCQEKpzTPXERoG8IAp6I.roa
File: UvzudtLZCQEKpzTPXERoG8IAp6I.roa (raw, json)
Hash identifier: FMr3SYeeBx2od3Fk9LCdPq6nHNb4RnqYeF4Fx9YvKwY=
Subject key identifier: 52:FC:EE:76:D2:D9:09:01:0A:A7:34:CF:5C:44:68:1B:C2:00:A7:A2
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F54097426FC51D8DE7CF41C805FBF146D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UvzudtLZCQEKpzTPXERoG8IAp6I.roa
Signing time: Tue 07 May 2024 17:10:56 +0000
ROA not before: Tue 07 May 2024 17:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:09:74:26:fc:51:d8:de:7c:f4:1c:80:5f:bf:14:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 17:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52fcee76d2d909010aa734cf5c44681bc200a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:9f:ab:96:96:f7:c0:7b:0a:4e:d8:97:77:
bd:74:6c:ce:62:7d:f7:4f:ae:e9:ee:34:b7:4e:ae:
34:5c:50:25:93:01:ee:c6:b3:1c:c8:c3:fb:32:ac:
7f:fd:57:6c:0e:de:83:d3:7f:75:54:27:93:e1:83:
e9:43:a4:01:cc:6a:23:66:5d:9a:44:8b:ab:83:0b:
72:59:eb:49:86:63:e0:5d:5c:03:69:44:79:8a:56:
73:a8:51:e6:4c:e3:d7:cd:2a:55:cc:32:f9:bd:d8:
69:79:ba:71:74:69:a4:48:0d:18:7e:24:d6:d4:78:
0a:f7:e8:0b:6f:cc:41:12:0a:90:9a:33:90:b3:b9:
05:76:3d:3e:fa:d5:9a:fb:2a:83:61:8b:d1:54:76:
ab:b9:22:b8:32:50:4a:b8:8c:bb:2c:77:f6:c9:47:
0f:8f:ca:95:76:2d:10:1e:c3:17:f5:11:01:c8:54:
cc:d4:f2:a2:99:cc:bc:3d:b2:67:65:a7:2d:fc:fa:
03:20:25:fa:2b:9b:7e:c7:57:2c:42:9b:9c:2e:f6:
fb:30:aa:2e:0c:4c:0f:dc:0b:b2:02:4d:ef:5e:e2:
32:b8:e5:ce:38:28:12:01:85:af:d0:c3:ec:3e:f7:
53:36:d7:2d:df:f4:5f:c5:a9:f2:29:b1:5e:c6:20:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:EE:76:D2:D9:09:01:0A:A7:34:CF:5C:44:68:1B:C2:00:A7:A2
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UvzudtLZCQEKpzTPXERoG8IAp6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b4:68:fc:f1:b1:14:3b:87:5a:ec:c8:7d:bc:7d:a0:02:c9:
d1:99:73:75:40:94:a2:0f:d0:a7:9f:56:b5:94:fc:03:ce:7f:
8d:a3:eb:03:e7:b0:9e:b7:dc:52:15:ca:f8:76:92:c2:ca:2e:
9b:ab:d6:48:6e:12:4d:e4:6d:29:76:68:e3:0b:9d:a5:a0:63:
53:c6:33:43:15:ff:41:6b:48:8d:c2:73:54:c6:62:a5:3a:34:
8c:94:3e:a7:a6:2a:25:42:d4:ad:88:34:dc:88:6a:63:3c:c2:
96:64:34:6f:c2:ba:88:a4:f0:de:b1:55:d2:76:cc:ed:26:05:
b4:8b:01:73:a0:83:0d:b9:8f:8f:65:7e:88:bc:07:1f:a4:e0:
36:33:0e:17:6f:15:ed:3c:c4:c5:75:ae:6f:c4:6a:17:25:aa:
79:6d:59:6b:bd:8b:c1:c2:db:b4:2b:ee:0c:7c:76:97:f1:c3:
08:6f:37:98:21:0f:22:71:25:7d:8d:27:ad:9d:88:69:86:43:
20:0d:5e:af:d5:43:a7:08:d8:ae:b9:34:1d:86:fd:87:ce:a2:
ca:98:df:7e:87:bc:22:d3:8c:1e:cf:4b:be:cb:a9:18:3d:a5:
d1:71:b8:11:c6:74:a3:1a:d3:e4:a2:40:16:eb:61:2f:ca:74:
68:c7:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:19:13 2025 by rpki-client