Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ukTF3Q7usLmp1E0WT736ZPCS78k.roa
File: ukTF3Q7usLmp1E0WT736ZPCS78k.roa (raw, json)
Hash identifier: 6PAXYGN04K/mknGvCJq9BOzXMFAEEayDQoHt02Iocxo=
Subject key identifier: BA:44:C5:DD:0E:EE:B0:B9:A9:D4:4D:16:4F:BD:FA:64:F0:92:EF:C9
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA4F04C3361319192C92CC0883D991B0A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ukTF3Q7usLmp1E0WT736ZPCS78k.roa
Signing time: Thu 23 May 2024 10:12:42 +0000
ROA not before: Thu 23 May 2024 10:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:f0:4c:33:61:31:91:92:c9:2c:c0:88:3d:99:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 10:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba44c5dd0eeeb0b9a9d44d164fbdfa64f092efc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:da:aa:b0:7e:40:fb:c6:26:dd:f9:e4:ec:
13:8c:0e:b5:38:e7:06:56:5e:40:6e:07:72:a2:fc:
b8:98:61:e9:76:ca:4e:cd:e1:98:4e:b1:df:c5:43:
a6:24:eb:2b:99:e1:09:54:9d:c6:54:3b:62:9b:5f:
cf:6f:41:ec:8a:e7:f9:b8:6c:65:dc:aa:9f:fa:f9:
b7:3b:f9:37:2e:38:a0:3f:54:5d:4b:d1:7a:d2:e1:
97:50:5f:d7:41:d6:bb:e1:a2:5e:37:38:f0:4d:b4:
bd:ff:ad:fc:d0:cf:ad:d3:3c:43:d3:40:32:c6:ae:
40:f8:37:ec:1d:e9:df:6a:4f:5f:f5:d8:09:2c:9c:
77:a4:a6:8f:b4:36:8d:c8:fa:36:61:59:2c:76:6f:
e8:86:9f:ff:11:0d:ff:a8:17:7c:b1:05:51:37:f6:
0c:db:e0:c5:50:15:48:26:cc:8e:c1:00:81:74:4b:
c4:9f:f8:22:9c:5d:2a:ca:97:bc:02:98:ec:3b:a4:
33:3e:bc:8f:c3:4a:6c:b1:0c:66:6f:e1:4b:3c:71:
10:f5:bf:fb:77:e3:14:7c:e3:d8:7f:06:21:41:14:
2c:27:2c:02:e8:90:6b:5c:a1:ab:e8:f7:eb:97:28:
32:12:62:95:38:eb:82:05:67:ab:a0:55:50:29:0f:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:C5:DD:0E:EE:B0:B9:A9:D4:4D:16:4F:BD:FA:64:F0:92:EF:C9
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ukTF3Q7usLmp1E0WT736ZPCS78k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e4:4b:50:c7:7e:05:b1:10:33:aa:c5:00:3e:1d:0c:a6:42:
eb:58:47:8d:f8:45:e3:d7:5d:cb:c7:7a:e5:68:eb:0d:96:7a:
a6:21:a2:3e:02:ab:25:3b:d8:07:d5:2a:e4:a7:3e:37:34:3e:
63:8a:e2:c7:a6:d4:a0:d2:d8:77:9c:36:96:72:0d:37:4a:c7:
6c:48:7d:fe:8d:55:d3:77:91:9d:fe:f6:7c:df:99:e8:27:93:
41:bf:0f:4d:2a:69:e7:0c:8b:96:6e:8a:9d:2f:4d:e1:c1:9c:
76:76:9c:07:65:79:40:55:a7:d3:d9:c8:55:0f:a8:de:9d:4f:
1b:7e:d9:46:87:4e:20:e5:f4:4d:df:15:e4:9d:18:3d:76:60:
50:b6:99:ec:21:e5:bb:1c:76:21:49:a2:90:90:9a:1a:cb:2c:
f5:60:c1:82:c9:81:09:87:ec:d9:cc:07:89:b4:be:b1:ab:12:
71:d5:e1:f3:d1:f4:36:e6:f9:11:6d:88:26:6d:f5:ae:29:0e:
b4:1d:12:cf:09:c4:3c:56:9c:6f:30:c2:0d:73:ab:ca:9c:a2:
8e:4c:af:3b:70:d6:ad:38:2d:9b:84:f8:17:46:c3:47:ea:77:
2c:f7:01:6e:da:a4:b9:56:76:3c:cb:fc:cc:36:5e:6f:e1:4c:
39:3b:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:44 2025 by rpki-client