Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/f18x_sl3Wa0eUQ8q1KB81nxsDFg.roa
File: f18x_sl3Wa0eUQ8q1KB81nxsDFg.roa (raw, json)
Hash identifier: DYw+QQBlLPLwq/Dmr7c01Zk/ig1FGkBS27onilVllLs=
Subject key identifier: 7F:5F:31:FE:C9:77:59:AD:1E:51:0F:2A:D4:A0:7C:D6:7C:6C:0C:58
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFE6BEA573D030F894D2D61A230149C84
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/f18x_sl3Wa0eUQ8q1KB81nxsDFg.roa
Signing time: Sun 21 Apr 2024 02:11:08 +0000
ROA not before: Sun 21 Apr 2024 02:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fe:6b:ea:57:3d:03:0f:89:4d:2d:61:a2:30:14:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 21 02:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5f31fec97759ad1e510f2ad4a07cd67c6c0c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:f2:85:9d:7d:df:91:ac:a5:c1:89:94:13:
b0:be:87:e8:0e:9e:73:de:c2:79:b0:ca:5f:b4:6f:
a0:af:9e:31:6f:dd:e9:ef:f4:0f:98:d3:22:07:a5:
f3:29:71:3f:d6:c9:c0:0c:6c:d6:2b:7d:ea:54:62:
24:15:9f:32:aa:96:65:d0:cd:c8:bd:a9:b5:45:8c:
a2:7f:ac:4c:7b:2b:14:04:37:99:71:1a:30:e0:9b:
19:19:cb:a5:11:28:e1:3a:08:f7:12:cf:0a:4e:ed:
3b:27:43:0c:70:fc:3c:85:e8:05:d9:94:f4:c5:9b:
66:85:2b:8d:88:81:46:59:8e:8e:77:27:5f:72:10:
3d:58:8d:c0:a0:37:a4:b6:dd:7d:7a:96:3a:cd:56:
75:ee:be:fa:e5:8e:34:83:f1:8f:02:35:fb:1a:59:
a5:c5:e8:f6:9b:c0:c3:36:04:7b:d2:46:e6:de:91:
23:b0:fa:8c:55:68:54:21:f4:73:09:83:2e:01:77:
ff:00:c9:a0:9f:b2:33:b5:74:77:56:13:e8:ce:7c:
2f:28:bf:5a:df:cd:3e:d1:99:6d:73:86:fe:17:6d:
86:6b:fe:b1:0c:30:ac:ae:28:aa:74:60:13:55:a4:
90:35:f0:4a:df:03:7e:df:e0:a5:e6:6f:b8:41:1c:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:31:FE:C9:77:59:AD:1E:51:0F:2A:D4:A0:7C:D6:7C:6C:0C:58
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/f18x_sl3Wa0eUQ8q1KB81nxsDFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
88:cf:55:e3:11:bc:29:61:be:ac:c0:d4:00:e5:ab:f4:eb:08:
45:63:b5:12:e1:39:7e:88:75:90:08:1c:d3:e1:4c:64:8c:f5:
2a:68:70:6f:f6:9b:de:55:38:81:5b:30:8d:a2:bb:f8:e4:a2:
1b:15:c4:a7:b7:9d:6e:ae:54:9c:d2:fe:cd:87:12:b7:d8:0a:
03:f4:25:05:f6:b2:36:7f:70:5a:ea:ad:ab:81:74:ef:15:2d:
2f:ce:c6:74:95:98:a5:72:68:49:e4:34:55:66:b4:87:e3:2a:
ec:41:68:4b:ad:f6:1f:9d:87:cc:bc:49:6e:c9:8e:d1:9d:be:
ef:3f:72:a8:ac:b0:f8:41:c2:dc:4e:1b:9f:0e:b1:93:c0:b1:
2e:a8:98:6f:ac:e4:ac:c4:c4:d4:ff:54:d5:56:20:f9:c8:4f:
fb:57:0c:51:18:e0:16:a3:7a:37:f4:43:05:8d:57:c6:8f:71:
2b:6b:a8:7c:67:17:53:41:b2:79:90:7c:f4:47:07:0f:e4:61:
d2:08:87:2b:76:c4:b9:b5:41:16:87:16:5d:88:fe:d4:f6:33:
95:4c:5d:00:43:f8:dc:59:40:5d:64:8b:01:ea:78:af:67:56:
b8:2e:b0:0d:19:cd:61:51:68:4b:76:f6:46:e1:16:d4:90:9d:
a0:ab:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:29:42 2025 by rpki-client