Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Vp1EQ18own7ZjQx1HSNK1gmU2Ms.roa
File: Vp1EQ18own7ZjQx1HSNK1gmU2Ms.roa (raw, json)
Hash identifier: XKdadLRnMLeR6IbP0tJlrbq1sUjaijzlBDRKDUurt/c=
Subject key identifier: 56:9D:44:43:5F:28:C2:7E:D9:8D:0C:75:1D:23:4A:D6:09:94:D8:CB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F396DEDEA8BBFD00262FA6BBD557E9FFF
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Vp1EQ18own7ZjQx1HSNK1gmU2Ms.roa
Signing time: Thu 02 May 2024 13:10:56 +0000
ROA not before: Thu 02 May 2024 13:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:6d:ed:ea:8b:bf:d0:02:62:fa:6b:bd:55:7e:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 2 13:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569d44435f28c27ed98d0c751d234ad60994d8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:3d:a9:ef:fb:94:88:c2:ce:64:dd:6a:b8:
c3:20:5e:c1:ef:90:01:10:f3:af:10:fc:77:c1:51:
f2:04:1f:34:42:9e:9c:f0:23:b5:33:09:71:74:d5:
e7:4e:71:db:93:b0:5c:b4:36:46:73:8d:f6:b9:05:
72:e7:a7:9c:e2:ed:3c:f7:a3:11:26:d5:82:60:4c:
3e:de:23:51:16:f4:15:f4:9b:61:51:bd:53:69:5e:
7d:a1:52:b0:1b:20:25:1c:36:de:8f:08:c5:c1:0a:
84:26:99:0d:f3:38:21:26:c6:14:4a:bf:f7:98:67:
e9:93:72:6c:a6:65:e2:f8:1e:41:8a:59:fe:75:8b:
75:fe:a3:43:1a:44:63:e1:3e:69:c1:a4:dd:06:18:
8f:9d:4e:57:f3:47:0f:c7:3b:10:90:5d:65:2c:27:
f6:00:1f:55:f9:7d:30:54:75:b9:c3:a1:cb:57:85:
5d:bb:4a:f5:91:4d:2a:cf:1c:4c:cc:23:f0:c4:c9:
1d:97:fb:88:c6:90:54:cc:75:8a:2a:2c:21:98:da:
60:89:d7:e1:97:85:22:90:b0:30:41:94:36:f2:e6:
80:14:a8:f6:78:aa:aa:f7:14:13:03:3e:eb:bd:3b:
5a:a8:ad:6e:41:72:02:ab:a7:f3:f5:d4:ce:45:2f:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9D:44:43:5F:28:C2:7E:D9:8D:0C:75:1D:23:4A:D6:09:94:D8:CB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Vp1EQ18own7ZjQx1HSNK1gmU2Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:8a:a9:dc:7a:15:70:3e:00:ff:6f:ca:18:b6:ac:6a:e9:03:
a4:5f:f0:80:46:3c:4e:30:88:39:92:15:ea:89:b5:9c:96:8d:
b9:af:ff:1c:18:f2:2d:8b:5a:41:12:71:2a:f4:fb:ae:d8:0a:
8b:74:6f:1c:12:33:0f:e6:d0:f8:00:ad:76:6b:02:f0:61:0c:
0c:42:18:50:e8:45:b2:12:01:99:0f:dd:42:5a:73:49:87:f3:
f3:7b:51:2e:2a:33:22:e4:ad:25:fa:57:be:6e:e1:72:65:8c:
02:0d:49:32:cd:b1:f9:a1:0a:37:3d:b0:1d:dc:3b:b9:d0:b3:
e5:93:3a:1a:70:2e:72:78:22:69:f3:cc:a1:55:63:82:d3:e4:
cf:c4:f6:ac:bf:43:7b:ca:be:3d:df:33:34:86:cc:c2:fe:da:
9d:e8:24:83:b7:0a:8b:be:ef:27:3e:d8:18:6a:52:a3:e6:66:
10:4c:b2:fe:0a:50:b0:62:a6:12:79:c6:35:10:d3:3e:2a:7b:
96:7c:03:c3:e4:f3:91:05:8c:a4:8e:7f:2b:f5:4e:16:e2:2d:
72:b1:da:3b:1c:0c:3a:cc:21:64:ad:a3:bb:3d:1a:8e:fa:82:
c1:52:3d:70:3d:74:30:f7:46:32:9f:e5:1c:9a:b6:fe:48:cf:
86:35:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:26 2025 by rpki-client