Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CEuTJVe0inJjz28E9dpPlpixTBw.roa
File: CEuTJVe0inJjz28E9dpPlpixTBw.roa (raw, json)
Hash identifier: n75w8znXxneJdEOFvBI64QN6HaibFWqCcdXUmIZcncA=
Subject key identifier: 08:4B:93:25:57:B4:8A:72:63:CF:6F:04:F5:DA:4F:96:98:B1:4C:1C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFD53C38272473E95D309FB16716DFA83
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CEuTJVe0inJjz28E9dpPlpixTBw.roa
Signing time: Sat 20 Apr 2024 21:05:08 +0000
ROA not before: Sat 20 Apr 2024 21:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18e:fd52:e762/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:53:c3:82:72:47:3e:95:d3:09:fb:16:71:6d:fa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 20 21:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=084b932557b48a7263cf6f04f5da4f9698b14c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:4e:36:8d:a0:5e:88:1d:66:0b:23:da:99:
f5:76:81:62:7e:3a:77:44:e5:a1:8f:99:04:e6:80:
c8:2c:a0:dc:2c:e9:a3:1c:30:05:ba:28:23:18:3c:
1c:81:d9:4b:bb:f5:e2:36:75:ff:90:5c:17:90:79:
c8:63:5a:cb:2f:ec:a7:e1:76:2b:02:28:86:d9:bd:
b3:fb:ae:c7:04:f8:58:76:05:fd:6d:4b:08:1a:b8:
44:86:fa:b7:a5:76:b6:d8:d0:a6:f8:17:c9:89:78:
0d:c1:31:d9:a0:c9:5c:8d:98:00:7b:ec:f9:5d:c3:
8f:4e:b0:79:0e:f9:36:ae:6d:1f:f7:f3:a1:f4:b2:
07:9a:4a:fd:a4:94:db:67:a4:05:ef:aa:b8:81:49:
67:c4:79:7e:e3:96:2a:79:e3:39:92:8b:84:fd:5e:
86:a6:3e:18:fa:1a:ba:fa:e5:47:34:b3:aa:3f:f2:
ac:ad:5a:33:5e:b3:b5:44:dd:f6:37:8b:67:43:a5:
98:b9:be:20:6a:a5:eb:22:c7:01:30:4b:26:ab:97:
29:0d:c6:56:d5:aa:92:1d:80:ac:50:e5:11:f9:31:
54:e5:b2:71:ad:e4:8f:df:ad:d9:9d:23:79:53:74:
1f:36:b3:ff:64:92:15:a0:ce:bc:02:c0:3a:79:cc:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:93:25:57:B4:8A:72:63:CF:6F:04:F5:DA:4F:96:98:B1:4C:1C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CEuTJVe0inJjz28E9dpPlpixTBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18e:fd52:e762/128
Signature Algorithm: sha256WithRSAEncryption
b1:10:86:54:50:18:bb:9c:be:69:80:ea:34:11:5f:49:94:d9:
7c:1c:12:b4:cb:95:4d:97:e7:29:55:b3:e5:af:f0:cc:a1:c0:
b4:dc:82:e1:2d:1d:3e:91:cc:60:50:63:41:74:f6:62:81:c8:
5d:52:59:7b:5d:9f:65:f5:2f:85:37:cb:02:05:9d:59:bd:85:
c7:6c:54:b7:22:02:af:81:19:99:71:54:1f:a3:16:f6:a3:4c:
91:da:86:b0:a5:a3:ca:72:a6:89:2d:f5:32:e4:10:f6:e2:63:
9f:4d:43:cf:fc:a1:65:8a:88:4a:ae:d3:a1:cd:cb:25:8d:cb:
cb:33:f2:19:1f:8f:47:6f:ca:21:0b:3f:67:6d:9a:ae:0f:9c:
98:2c:64:5c:7d:94:7f:0e:6d:6f:54:5e:fe:48:d3:37:3d:42:
99:15:67:47:82:cc:33:09:80:95:3e:54:fb:19:70:93:80:8a:
7e:a7:70:87:44:06:13:04:40:63:30:84:5e:16:25:64:40:03:
ba:44:28:86:c6:f2:1f:29:25:fc:6b:bf:d5:76:6e:b7:b6:59:
19:e4:ae:80:2a:99:a6:5e:95:be:6c:58:57:5e:a1:24:72:8a:
ab:9d:2b:88:c5:fa:84:5b:ad:d2:b0:a5:03:ea:8b:b8:6f:23:
a5:0b:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:30:11 2025 by rpki-client