Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jsOmS5U6EEaYUgPgOID8p8watDY.roa
File: jsOmS5U6EEaYUgPgOID8p8watDY.roa (raw, json)
Hash identifier: Rgyq3ChzprzLcP452LWCpUfQZO8dt67zmXg3B9NxG/U=
Subject key identifier: 8E:C3:A6:4B:95:3A:10:46:98:52:03:E0:38:80:FC:A7:CC:1A:B4:36
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F0E7E4BA898C30F6E97F3DF787EC20ACA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jsOmS5U6EEaYUgPgOID8p8watDY.roa
Signing time: Wed 24 Apr 2024 05:05:08 +0000
ROA not before: Wed 24 Apr 2024 05:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:e7d:783e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:7e:4b:a8:98:c3:0f:6e:97:f3:df:78:7e:c2:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 24 05:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec3a64b953a1046985203e03880fca7cc1ab436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:76:a4:26:c5:24:9b:97:18:d1:6e:f1:35:
89:df:95:83:79:ad:e9:0a:d8:1e:dc:44:67:f6:82:
42:2e:35:3b:37:b6:16:9f:ef:2f:bc:90:42:8c:8a:
07:0b:7e:c0:14:cd:4b:35:73:32:e8:72:b7:52:32:
2f:ee:b7:32:13:0c:fb:84:de:18:8f:57:9d:10:93:
0a:4d:90:c0:c9:9e:53:70:bf:bd:42:21:fb:df:33:
24:f9:a2:79:35:b2:86:4d:96:1b:9f:a1:a2:ef:34:
ca:5f:a4:1a:3b:e6:25:a8:41:18:49:1f:9e:fb:52:
77:ac:dc:4b:b5:f0:f7:57:84:57:14:0f:e5:78:6f:
02:6c:e6:46:fc:9d:3b:be:fa:bb:96:3b:ae:b8:7d:
80:c0:49:e0:c1:90:20:64:07:35:64:db:f6:35:cf:
37:d0:b0:8c:3f:77:32:42:7f:f5:48:1c:f3:33:3f:
15:72:ed:79:60:42:46:c0:43:97:92:c4:79:dd:c8:
d3:f6:82:24:1e:c9:51:32:e9:0d:70:4f:2c:5c:1f:
e8:d0:6b:a3:92:42:cc:73:06:54:71:d5:89:ba:6b:
40:3c:59:57:16:fb:f0:c8:e2:76:62:2b:07:45:ca:
69:4a:40:88:2b:d6:da:50:0c:72:b9:fe:ad:99:88:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:A6:4B:95:3A:10:46:98:52:03:E0:38:80:FC:A7:CC:1A:B4:36
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jsOmS5U6EEaYUgPgOID8p8watDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
2001:67c:64:ffff:0:18f:e7d:783e/128
Signature Algorithm: sha256WithRSAEncryption
64:59:f3:b7:22:15:b4:c9:7c:18:97:40:19:fc:f1:a3:94:2c:
91:6b:0a:05:e1:b8:4b:38:e1:2f:45:3d:a9:ca:14:dc:0d:4a:
b2:94:ef:cd:8d:7d:a4:77:25:46:45:ed:3e:fe:fa:35:ec:28:
08:b8:85:13:5b:c5:1f:73:dc:8f:d6:fe:b2:15:e1:35:fa:47:
ab:f0:9b:65:a2:bc:d5:96:64:f6:38:d1:d1:93:9f:13:9f:31:
1e:b8:7b:c5:ef:c3:ed:cf:22:2a:b5:17:9c:bd:b3:f5:54:cb:
32:e5:44:40:6e:c0:59:66:af:bc:58:51:1d:3b:db:1b:ea:e1:
81:2c:5a:08:76:5e:ab:3b:4c:b4:96:5b:7a:0a:d3:c4:4f:e1:
e6:d0:3d:58:bd:3d:99:7a:9d:f6:ca:53:aa:aa:bf:45:5f:04:
fd:e3:eb:4f:82:8a:f0:2e:01:8b:ee:19:78:85:8a:ee:f3:d3:
36:b6:37:55:bc:83:6a:9f:d8:1a:1c:cb:3c:7c:f1:f8:29:d0:
e4:c1:18:48:ff:4f:06:3a:80:0b:e7:f1:ea:ca:84:0c:69:ce:
f8:5b:35:56:bf:32:2e:c3:35:4d:da:c3:2b:23:67:d3:6a:e2:
de:d6:07:52:9d:b9:bd:27:6b:d1:f8:98:9c:77:e5:bb:4c:7b:
df:59:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:30:47 2025 by rpki-client