Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/juLRrYJWOV8zbIAm16cX_-Ptz2s.roa
File: juLRrYJWOV8zbIAm16cX_-Ptz2s.roa (raw, json)
Hash identifier: O5zNcgB03aIBEQgFnT4zlVF6qY3DdeWJpLfPQpVesg8=
Subject key identifier: 8E:E2:D1:AD:82:56:39:5F:33:6C:80:26:D7:A7:17:FF:E3:ED:CF:6B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA58DC4B6CD4E4639C8DF87EEEF3BB546
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/juLRrYJWOV8zbIAm16cX_-Ptz2s.roa
Signing time: Thu 23 May 2024 13:04:42 +0000
ROA not before: Thu 23 May 2024 13:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:a58d:69b0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:8d:c4:b6:cd:4e:46:39:c8:df:87:ee:ef:3b:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 13:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ee2d1ad8256395f336c8026d7a717ffe3edcf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:f1:8f:d5:f9:6b:96:0d:13:5b:6d:c2:fe:
f6:8d:79:4d:93:8e:1d:8c:5d:90:2c:7c:8e:d6:10:
cb:6d:8b:cd:10:5a:99:6a:59:7e:e5:3d:72:d4:e6:
ee:15:be:cc:12:d3:11:f0:bf:42:fe:90:58:51:91:
8a:57:eb:e7:3f:95:ef:c8:5e:10:82:8f:51:2b:1b:
37:9b:62:6b:cd:d5:da:89:09:a4:76:d9:87:42:e9:
f3:b1:6e:5e:7a:4c:8e:06:f2:2f:fa:0e:ce:29:81:
7f:6e:99:d8:f4:42:c8:83:11:b1:20:22:0b:d7:31:
e0:3b:e8:7e:8e:61:57:06:64:ab:63:bc:6b:14:7e:
26:0c:aa:d3:ad:49:f7:69:7a:b6:3d:2b:57:75:71:
93:08:d8:d5:60:de:59:5c:8d:50:4a:7d:1e:80:81:
66:17:61:57:79:0d:7c:52:ed:37:da:60:d1:29:b4:
13:64:ea:47:a1:43:7c:57:62:ae:5f:af:93:a6:47:
52:4c:0e:59:58:fa:08:58:96:05:aa:ff:eb:2c:3d:
2a:19:aa:28:4f:69:c6:63:02:a8:d7:8c:b4:0a:98:
0c:a7:fe:6d:92:d6:27:ea:ae:0d:64:b2:b9:ac:c6:
56:e8:78:2b:db:b9:a7:9f:54:a7:d9:8d:d9:bd:ee:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:D1:AD:82:56:39:5F:33:6C:80:26:D7:A7:17:FF:E3:ED:CF:6B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/juLRrYJWOV8zbIAm16cX_-Ptz2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:d6:f2:8f:c4:94:2d:79:e7:65:0e:42:87:42:22:e2:d8:e7:
c2:74:0d:62:66:d4:03:50:09:cb:ff:ad:4f:aa:96:7b:f5:c5:
d2:24:7c:82:1a:23:84:61:2c:8a:fe:f8:9a:ec:8e:b7:4f:74:
b5:df:e4:ce:69:e9:98:49:6e:e7:d7:30:62:97:26:ad:f7:45:
8f:ea:26:b6:47:94:cb:cd:bd:a0:71:1e:7b:18:24:33:fb:89:
35:b1:65:dd:02:a2:5c:90:cd:76:cb:16:52:1c:5c:b3:6e:ea:
47:d8:2c:38:ea:c4:9f:a4:90:50:9a:b3:58:c6:5b:1f:6c:41:
9d:07:d8:52:2f:2a:b8:95:9f:b0:db:a5:cb:80:7a:a2:d0:f0:
6c:5d:dd:a1:6c:e6:2d:5b:f9:c9:9d:cf:c6:d4:c4:d8:80:9c:
89:a7:20:08:73:f6:aa:71:54:49:e8:85:13:fe:66:d4:f0:f4:
fb:49:4e:48:93:82:cb:b9:77:01:0f:d1:b3:17:7d:04:2c:5a:
3a:8e:8f:1e:94:a2:dd:99:3d:80:ab:a1:e5:ac:e8:f0:d9:76:
1b:80:14:00:53:58:ae:73:8f:48:4a:4b:86:e1:9e:b9:f8:27:
37:a2:56:50:07:19:61:9b:3c:b5:5f:a1:7f:27:7d:81:f1:01:
54:28:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:37:29 2025 by rpki-client