Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/e_zu9JQpbJlgxjGC-fqhHH5B_Eo.roa
File: e_zu9JQpbJlgxjGC-fqhHH5B_Eo.roa (raw, json)
Hash identifier: vBNyZF9IsgT3829vIyTZywl3U0JlDT4qJhRaiB2N02w=
Subject key identifier: 7B:FC:EE:F4:94:29:6C:99:60:C6:31:82:F9:FA:A1:1C:7E:41:FC:4A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F51412CC132DA5115EAD742A75E54CE19
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/e_zu9JQpbJlgxjGC-fqhHH5B_Eo.roa
Signing time: Tue 07 May 2024 04:12:56 +0000
ROA not before: Tue 07 May 2024 04:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:41:2c:c1:32:da:51:15:ea:d7:42:a7:5e:54:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 04:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bfceef494296c9960c63182f9faa11c7e41fc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:ff:d2:f4:25:20:47:bf:30:27:fa:92:72:
99:52:a2:47:e7:47:8c:5e:4f:f9:11:ed:26:40:b5:
fe:44:a7:43:48:c8:02:68:bc:59:ac:fb:81:ac:92:
67:35:d2:c4:6a:7c:65:5f:43:09:3e:0d:12:aa:cf:
c7:8b:a5:fe:38:7f:1a:9e:e6:13:78:0e:73:03:a6:
d6:a0:8d:a6:00:29:7d:0b:6c:d0:10:fa:48:da:ed:
12:fe:fb:44:94:c0:90:e4:4e:e8:07:9b:cb:2b:e7:
77:28:75:ce:0f:a4:11:db:a5:f6:1a:d4:f8:b0:73:
d9:c9:7d:59:d6:52:75:ba:b9:c7:e4:cb:e7:d7:40:
12:41:e6:f6:cf:6e:e2:97:3e:4b:5f:32:fe:b5:95:
e9:c0:8d:19:2a:bd:8d:40:cb:97:11:8b:3d:f7:47:
2f:13:d0:a4:33:53:c7:df:7e:f1:98:1c:89:2e:02:
3e:c8:39:f5:9a:d1:82:c9:18:e2:f3:c2:25:a1:16:
e5:3c:16:8f:c5:6e:7d:1a:0e:00:78:97:3a:81:8f:
bf:3e:b5:52:d3:18:92:42:80:02:e7:47:14:b6:82:
ae:c4:b5:b0:3a:5c:85:17:3a:6c:f4:23:80:ef:b3:
94:5c:80:c9:5b:f1:bf:0d:05:f9:4d:4c:fc:eb:78:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:EE:F4:94:29:6C:99:60:C6:31:82:F9:FA:A1:1C:7E:41:FC:4A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/e_zu9JQpbJlgxjGC-fqhHH5B_Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:49:ed:b6:b6:98:c7:b0:68:77:3a:53:7e:38:67:a4:b0:a6:
d1:3e:5d:73:7b:bb:a9:4e:cb:71:7e:dd:1b:b9:15:e9:69:3b:
57:2b:1d:e4:38:24:16:35:a7:73:a0:da:10:9d:95:31:78:a8:
42:91:35:0d:af:6a:5a:6e:68:74:2f:ca:36:3f:bc:15:a9:76:
61:d4:79:17:00:e4:27:74:1c:df:db:15:43:e8:45:66:b6:89:
c6:d4:51:3f:3c:ee:bc:ee:3c:63:b2:a9:ec:48:50:44:f0:2f:
33:1d:28:83:7b:a7:ff:de:7f:f9:63:d8:b9:80:fb:be:63:7b:
93:c0:ce:27:fb:79:a1:7f:9a:25:85:f8:f7:be:51:35:28:fa:
66:55:4f:dd:0c:79:bc:3f:99:b5:83:2f:c3:30:b6:6f:3c:68:
7f:f7:a1:9b:66:ba:5a:47:28:51:6e:38:f0:bc:4b:22:df:78:
1b:3c:9a:39:88:31:77:ab:4f:4b:c6:a2:c4:a7:60:25:d2:41:
d4:77:ee:db:97:49:b7:ac:eb:83:d5:e8:41:08:1d:f9:d4:08:
fb:28:98:33:8b:e0:f1:2e:1b:09:79:23:65:91:e1:6a:b1:92:
a8:ad:c9:6f:36:f7:9e:83:bb:11:b4:5c:2f:c6:24:f8:8b:f9:
3c:02:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:15 2025 by rpki-client