Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/viECMovKnpi0gkXpwhJ5gBeAUKU.roa
File: viECMovKnpi0gkXpwhJ5gBeAUKU.roa (raw, json)
Hash identifier: Vm85Ty2m1KZ2Ma8F3C/yvZ9v4vID0Q+LBKYsfjaTyTc=
Subject key identifier: BE:21:02:32:8B:CA:9E:98:B4:82:45:E9:C2:12:79:80:17:80:50:A5
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F355A3A176CF253C11B7EE8156012B67D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/viECMovKnpi0gkXpwhJ5gBeAUKU.roa
Signing time: Wed 01 May 2024 18:10:56 +0000
ROA not before: Wed 01 May 2024 18:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:5a:3a:17:6c:f2:53:c1:1b:7e:e8:15:60:12:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 18:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be2102328bca9e98b48245e9c2127980178050a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:ae:1c:0d:b4:49:7e:2f:3c:44:78:8c:c4:
90:d2:4b:b7:b3:32:70:11:69:cb:4a:bb:cc:22:36:
75:62:c3:e0:27:12:24:82:2c:b0:b5:00:ed:3d:b9:
d7:ac:ba:8c:77:78:74:f6:6b:17:84:dd:a8:c3:af:
21:b7:e9:44:2d:6a:12:60:80:d7:bd:4b:15:68:fb:
44:10:02:ef:61:ac:f5:8b:c5:3d:68:97:ff:de:79:
d2:8d:c5:15:d4:e8:0f:83:43:95:dc:2c:10:32:5a:
cc:69:71:0e:5b:5a:5f:a0:34:c9:48:23:54:73:bc:
80:37:a1:13:bb:56:dc:58:98:37:1b:cf:0d:e1:a5:
56:22:a5:e8:61:e7:73:3e:70:90:68:92:59:7b:8e:
b0:92:a2:09:16:9e:23:97:d5:2b:13:9c:24:d7:8e:
0e:c1:4c:21:23:aa:0b:38:4d:57:85:1c:63:42:b3:
0a:f7:6e:31:9e:97:2e:65:72:73:aa:81:58:ab:4a:
fd:00:bd:72:6a:25:60:0b:e2:2d:7a:f7:8f:1a:42:
82:55:13:6b:7c:0a:7b:f4:2f:2b:99:2a:ed:83:65:
f3:6d:09:0e:b9:80:86:82:e0:d0:bb:d8:ab:d7:47:
73:a0:06:ac:06:79:b7:c3:cb:f8:a5:10:31:3e:01:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:02:32:8B:CA:9E:98:B4:82:45:E9:C2:12:79:80:17:80:50:A5
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/viECMovKnpi0gkXpwhJ5gBeAUKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:01:15:1b:7e:e4:52:f9:73:c8:a8:84:17:b0:dc:64:47:59:
cb:79:bb:50:9e:8c:11:d5:3b:d5:27:7a:34:e1:45:cc:e7:89:
97:f7:b2:ad:7e:a6:11:dc:0a:04:25:28:9b:07:21:31:52:ca:
15:f9:2d:e5:b0:0d:85:51:07:be:fe:04:0b:2c:30:f7:ec:ef:
10:aa:b8:08:b2:3d:e7:34:90:0b:97:01:ee:aa:8b:88:81:f3:
b2:42:d5:d9:04:ab:09:9c:aa:07:e6:73:9c:6e:9e:d9:27:45:
02:76:d3:b8:bc:c6:b5:12:1d:c8:56:b4:f8:53:ae:cd:87:e4:
77:62:ab:ea:6f:b8:f6:32:db:e5:d9:93:03:24:9e:a7:d8:a0:
30:ec:54:7e:31:9b:f2:a4:43:69:2b:e9:80:02:ad:56:b1:e1:
76:a8:42:1c:a4:51:64:d4:a5:d8:96:2a:2b:bf:41:ef:46:73:
6d:00:63:18:64:fa:3c:41:aa:77:ac:f9:2e:49:7f:4b:c9:d7:
85:da:0a:46:45:b3:ee:5f:e4:77:ed:c7:6e:07:d4:72:6f:99:
27:e3:b6:3b:01:40:a1:bd:8b:f2:4a:7f:3e:7e:c8:95:56:5b:
cd:a4:41:5b:aa:22:5d:2c:8a:84:8c:7f:fc:99:74:aa:7e:5a:
7d:3c:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:58:11 2025 by rpki-client