Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tlHLiQ4a6oR66pvvuAZl579nQFI.roa
File: tlHLiQ4a6oR66pvvuAZl579nQFI.roa (raw, json)
Hash identifier: aifN280Zd2p5U7Gcfnn6GnZXK0A2cbe+NNrIyj+Zx5k=
Subject key identifier: B6:51:CB:89:0E:1A:EA:84:7A:EA:9B:EF:B8:06:65:E7:BF:67:40:52
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F69489997DFC60199B46A223B9470EB55
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tlHLiQ4a6oR66pvvuAZl579nQFI.roa
Signing time: Sat 11 May 2024 20:11:56 +0000
ROA not before: Sat 11 May 2024 20:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:48:99:97:df:c6:01:99:b4:6a:22:3b:94:70:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 11 20:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b651cb890e1aea847aea9befb80665e7bf674052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:95:00:e6:4e:83:04:dd:db:d7:a6:2e:27:
9b:52:87:b3:bc:ff:9d:d1:61:34:ac:83:97:22:4c:
1b:5c:41:74:e8:42:78:41:23:47:4c:d3:cf:37:85:
4f:c2:e2:2b:5e:36:56:28:de:67:10:1f:f1:d9:e7:
e1:3c:1f:92:75:0c:18:6c:d8:ed:17:6e:92:c5:9b:
24:c9:08:63:ac:2c:3e:8b:8a:e0:61:1f:42:7d:fc:
fb:cb:61:cc:63:98:46:94:d3:9b:8b:4e:bf:44:ba:
bc:a3:58:9a:a6:88:38:92:0b:c0:05:7f:a3:39:5d:
74:c0:65:7d:cf:3c:68:c5:d3:85:db:e5:e2:bc:25:
aa:75:14:07:b6:09:bb:e1:31:ce:1a:09:e3:1e:f7:
f9:3d:3c:57:9a:99:28:9c:9c:33:5e:ff:34:4f:8e:
d2:05:c5:bf:2c:f2:fe:06:b1:e0:4b:eb:b1:b5:07:
0c:1d:5f:1f:60:db:ee:f9:63:7c:a4:ba:4c:da:fb:
56:8d:bf:7c:3e:33:22:d7:ad:af:cf:71:bc:ae:6d:
63:44:16:38:57:55:70:42:f7:ac:94:9a:ef:68:f7:
0f:81:f3:f3:4c:ee:c5:f6:db:2b:2c:c7:34:2d:39:
3d:9f:81:85:3d:03:b2:d6:a7:b3:73:a5:a5:85:b0:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:CB:89:0E:1A:EA:84:7A:EA:9B:EF:B8:06:65:E7:BF:67:40:52
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/tlHLiQ4a6oR66pvvuAZl579nQFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:59:1c:d7:ff:ac:ae:37:c5:4e:84:13:4f:d8:4e:4c:8a:f5:
5b:ae:b3:f5:c5:b4:ff:42:2c:af:35:f8:52:b8:e6:a5:b2:51:
52:fb:db:92:58:eb:32:4a:90:42:9b:29:e6:89:5a:9c:47:66:
72:88:04:63:3a:fb:87:33:a1:42:63:9f:00:6c:a7:f2:c0:a6:
d8:ff:5c:04:73:dd:64:26:76:f5:e4:ca:70:6a:0e:14:17:64:
b5:1e:9d:e3:e4:ff:53:09:f8:02:33:76:c6:b3:0e:a7:be:7c:
a5:c3:5f:6b:9c:db:9f:d3:84:50:f4:62:3e:51:d4:7d:fa:86:
4b:44:f7:f8:f3:89:4e:79:5d:da:02:37:8f:cd:fd:b8:21:43:
8f:19:12:78:10:d4:d7:60:9f:e4:37:17:0d:01:9e:1e:87:86:
46:39:dd:f1:b5:a9:92:18:65:36:51:73:45:13:20:93:b5:48:
45:35:d1:1c:f7:d8:86:9e:c0:3b:f7:ad:60:e0:3f:19:f5:6d:
a9:34:5b:ce:56:55:e4:aa:50:9e:69:5e:8c:37:82:d0:ac:4f:
33:31:8b:63:99:8f:13:00:2d:34:ab:c2:fb:d3:f6:d7:b6:0e:
dc:b2:f8:20:09:93:d4:d5:c9:19:7d:7b:ea:b6:c2:2f:8e:de:
72:1c:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:38 2025 by rpki-client