Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/pZaBgUKaWsqRlW3yv7CPmNjP_EI.roa
File: pZaBgUKaWsqRlW3yv7CPmNjP_EI.roa (raw, json)
Hash identifier: pLBdO2L6cYHeJ8xNPt0qIB/nUeCsTYBASEkoRcGg9q0=
Subject key identifier: A5:96:81:81:42:9A:5A:CA:91:95:6D:F2:BF:B0:8F:98:D8:CF:FC:42
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F0EBC8C5DD091633B1D9FF0BE70DACB62
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/pZaBgUKaWsqRlW3yv7CPmNjP_EI.roa
Signing time: Wed 24 Apr 2024 06:13:08 +0000
ROA not before: Wed 24 Apr 2024 06:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:bc:8c:5d:d0:91:63:3b:1d:9f:f0:be:70:da:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 24 06:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5968181429a5aca91956df2bfb08f98d8cffc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c7:fb:d9:66:31:a3:0c:6a:55:e5:94:57:d6:
0e:5e:e5:64:e4:ba:49:4d:b3:05:a4:85:85:42:4d:
81:2c:1b:df:c5:45:dc:ab:64:bc:ef:f1:ba:5e:8f:
8b:3f:88:e0:b5:34:c6:d7:8d:93:67:e9:d9:60:79:
8c:89:70:d4:bb:87:74:21:d1:6d:ac:46:05:f2:9e:
44:60:7f:91:b6:d2:c5:e0:ea:24:29:d6:7c:75:6b:
71:c3:64:04:51:0c:72:39:ae:12:e8:54:35:5e:06:
ac:3f:a5:14:16:8b:0e:cd:37:9f:8f:8c:cc:b5:15:
1e:d1:04:dd:a7:30:16:9d:e2:b5:70:87:0e:54:52:
7d:c9:08:a2:1c:36:96:1e:ac:b6:be:2d:9a:dc:62:
0a:4b:05:2b:d5:d6:e0:a4:3f:17:3d:85:ba:aa:1a:
e7:a7:da:9a:67:9b:d6:87:ea:c3:e1:4c:38:98:a7:
08:47:18:da:40:1d:8a:19:e1:2b:12:cc:de:29:89:
3b:e4:9f:34:aa:da:3c:d1:33:27:f8:2e:ae:a0:ac:
67:e8:1d:ba:10:ac:e2:60:7c:d9:86:5b:22:96:64:
16:34:d2:68:7c:65:f7:dc:0b:16:1e:9e:02:03:bc:
2a:35:65:5a:33:f7:d5:fa:be:bf:be:c0:8e:ec:e6:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:81:81:42:9A:5A:CA:91:95:6D:F2:BF:B0:8F:98:D8:CF:FC:42
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/pZaBgUKaWsqRlW3yv7CPmNjP_EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
59:65:06:6c:81:fb:08:8a:e1:3a:61:be:b9:25:99:c8:28:e6:
7f:06:24:30:e0:e8:25:b6:c3:ea:d4:ff:ad:65:1e:76:49:66:
b3:76:85:fe:82:b7:77:83:9d:9e:ef:32:6f:5c:cc:da:0c:99:
44:3c:f0:01:5e:91:8c:e5:96:23:75:c4:57:c6:d6:a6:50:a6:
27:4f:a4:6f:d0:b8:a4:22:ea:31:08:a1:5a:3c:6a:d5:14:f2:
25:34:db:f9:0c:42:2b:bb:de:6a:67:14:3f:6a:9a:15:21:7a:
c8:1b:dc:d6:07:aa:fb:97:ee:3d:a2:14:40:14:59:29:f9:e0:
13:45:b8:16:44:67:11:51:7d:4b:b2:83:9b:f6:61:c1:36:10:
9c:59:27:41:67:be:b0:b6:32:0b:a5:c3:31:31:4d:62:34:2e:
62:df:d9:da:c0:bd:30:15:db:9f:12:ac:41:9a:87:b5:9f:53:
fe:d3:06:a9:81:44:db:73:84:04:a4:83:e7:50:5c:9a:13:27:
04:37:6b:a3:30:a3:a9:de:54:9e:dd:fc:22:f8:b4:ed:75:ae:
50:af:c3:32:80:2c:da:7a:c2:ce:da:2a:04:f5:85:7c:0d:56:
6f:c7:cd:5b:07:bc:5e:3e:ab:7b:99:54:cb:46:39:be:fa:95:
2c:e6:44:cb
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8OvIxd0JFjOx2f8L5w2stiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDI0MDYxMzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTk2ODE4MTQyOWE1YWNhOTE5NTZkZjJiZmIwOGY5OGQ4Y2ZmYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMf72WYxowxqVeWUV9YOXuVk5LpJ
TbMFpIWFQk2BLBvfxUXcq2S87/G6Xo+LP4jgtTTG142TZ+nZYHmMiXDUu4d0IdFt
rEYF8p5EYH+RttLF4OokKdZ8dWtxw2QEUQxyOa4S6FQ1XgasP6UUFosOzTefj4zM
tRUe0QTdpzAWneK1cIcOVFJ9yQiiHDaWHqy2vi2a3GIKSwUr1dbgpD8XPYW6qhrn
p9qaZ5vWh+rD4Uw4mKcIRxjaQB2KGeErEszeKYk75J80qto80TMn+C6uoKxn6B26
EKziYHzZhlsilmQWNNJofGX33AsWHp4CA7wqNWVaM/fV+r6/vsCO7Ob8swIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKWWgYFCmlrKkZVt8r+wj5jYz/xCMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvcFphQmdVS2FXc3FSbFczeXY3Q1BtTmpQX0VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQBZZQZs
gfsIiuE6Yb65JZnIKOZ/BiQw4OgltsPq1P+tZR52SWazdoX+grd3g52e7zJvXMza
DJlEPPABXpGM5ZYjdcRXxtamUKYnT6Rv0LikIuoxCKFaPGrVFPIlNNv5DEIru95q
ZxQ/apoVIXrIG9zWB6r7l+49ohRAFFkp+eATRbgWRGcRUX1LsoOb9mHBNhCcWSdB
Z76wtjILpcMxMU1iNC5i39nawL0wFdufEqxBmoe1n1P+0wapgUTbc4QEpIPnUFya
EycEN2ujMKOp3lSe3fwi+LTtda5Qr8MygCzaesLO2ioE9YV8DVZvx81bB7xePqt7
mVTLRjm++pUs5kTL
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:23:38 2025 by rpki-client