Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wEDASp0q20vLVJedd-s6lb3K_ps.roa
File: wEDASp0q20vLVJedd-s6lb3K_ps.roa (raw, json)
Hash identifier: Y/4ocujJpj35xSZwEnTMjE3ALpxxwQz0a8oPXa9rg9c=
Subject key identifier: C0:40:C0:4A:9D:2A:DB:4B:CB:54:97:9D:77:EB:3A:95:BD:CA:FE:9B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F2CC731470B69267906E4AE93ED2391D3
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wEDASp0q20vLVJedd-s6lb3K_ps.roa
Signing time: Tue 30 Apr 2024 02:13:22 +0000
ROA not before: Tue 30 Apr 2024 02:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:c7:31:47:0b:69:26:79:06:e4:ae:93:ed:23:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 30 02:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c040c04a9d2adb4bcb54979d77eb3a95bdcafe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:2d:9e:e3:19:f9:3c:23:a8:a0:be:22:73:
a7:b9:6e:18:35:83:5d:e8:8c:70:ca:eb:0c:70:2d:
4f:0d:9b:42:bc:e3:7f:37:b8:0e:06:f8:f6:3b:55:
24:e1:6c:94:6a:2b:74:d9:bc:d0:ee:80:08:db:d4:
0e:11:b2:d0:ba:70:35:1a:62:49:7e:d5:5c:f7:5e:
1d:2f:01:f4:38:7c:e5:76:99:b5:c5:7c:0d:c6:7a:
39:03:c5:98:76:19:98:31:e0:e9:9f:33:4b:a0:51:
b7:41:c6:f9:61:36:04:fa:1c:32:5c:d7:27:e2:c9:
8f:a3:f5:5d:43:94:92:ea:61:19:58:0b:a2:c8:ef:
e5:73:1a:c3:64:78:51:01:53:41:c7:99:10:8c:c8:
df:4f:3e:06:f5:4d:b4:95:20:bc:5b:a9:2c:e0:81:
ea:88:c7:64:df:53:99:92:8f:2b:10:86:3f:97:4a:
9d:d4:aa:39:3b:5a:c4:ff:f3:cf:0c:a8:4c:b5:71:
ae:d2:1b:0d:94:84:b1:b6:af:9a:f3:8b:4b:37:13:
f6:c6:b5:39:11:03:ba:15:42:a4:e4:33:89:7d:45:
c5:d2:86:83:e2:26:ce:46:97:ec:fe:a2:a0:8f:6c:
51:9e:6f:70:74:82:eb:c7:9e:89:13:cc:f3:1c:cc:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:C0:4A:9D:2A:DB:4B:CB:54:97:9D:77:EB:3A:95:BD:CA:FE:9B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wEDASp0q20vLVJedd-s6lb3K_ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:e3:a6:f7:e3:25:5b:9f:83:1f:0a:0b:19:da:a3:2d:ba:8a:
dd:c1:92:e2:81:7f:c8:93:ec:25:c6:97:8d:a0:90:9f:56:df:
56:47:d9:04:ec:12:8e:f9:27:c4:ea:ed:09:a1:13:8c:7a:43:
27:f0:58:ca:c6:6b:05:92:40:f9:a5:37:02:0f:4b:60:60:5c:
17:48:c3:97:8b:2b:ff:b1:c0:fe:6a:16:a5:6b:d8:54:5f:ee:
52:a0:d7:de:46:55:ee:0a:2c:cd:62:9f:07:7c:ed:d3:e3:a6:
cb:9f:f4:69:37:8f:d7:58:f0:ce:58:5f:9a:18:8d:cc:e9:fa:
31:f7:96:e7:52:aa:74:c6:66:60:0d:39:dc:98:3e:3c:d5:a3:
a2:36:b8:9c:09:a6:ba:41:0c:e1:8e:60:12:58:c6:0e:9f:fb:
3f:37:47:87:1d:b9:69:86:f0:d2:72:fd:80:7f:50:94:67:dc:
a4:03:2d:85:c0:7b:85:f5:73:13:c5:54:df:79:2a:c8:3c:60:
1d:94:f1:52:1f:1f:9e:a6:14:59:c5:82:f4:7a:a0:9c:2f:72:
2f:a7:f3:69:c1:61:71:7a:88:df:fe:d0:80:44:ad:ab:a7:20:
90:94:3e:9c:c3:31:2c:25:78:ac:b4:f3:f6:5d:d7:c5:84:9c:
27:32:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:06:42 2025 by rpki-client