Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JeKFDHmfd1wiigsYUfCsuuA13Zw.roa
File: JeKFDHmfd1wiigsYUfCsuuA13Zw.roa (raw, json)
Hash identifier: WVUOF8AvlulD2dTTDj97J5PxlboqIALbq9daMLsk+dw=
Subject key identifier: 25:E2:85:0C:79:9F:77:5C:22:8A:0B:18:51:F0:AC:BA:E0:35:DD:9C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4127784AAC51F822E2720CF43552C763
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JeKFDHmfd1wiigsYUfCsuuA13Zw.roa
Signing time: Sat 04 May 2024 01:10:56 +0000
ROA not before: Sat 04 May 2024 01:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:27:78:4a:ac:51:f8:22:e2:72:0c:f4:35:52:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 4 01:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25e2850c799f775c228a0b1851f0acbae035dd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:6d:d3:b4:66:07:d8:04:50:a6:ca:45:86:
f8:ae:24:5c:d9:94:e8:39:06:14:2e:21:de:27:38:
90:82:00:ae:d9:05:5e:66:24:71:5e:40:bd:fa:4b:
b6:c2:82:30:b6:42:e6:0d:71:20:85:7c:26:61:b0:
58:33:f6:c3:ae:c2:55:c4:c2:36:43:f6:77:7b:98:
55:bc:61:0e:ef:18:7c:cc:71:59:88:15:a2:1f:d0:
99:9f:1b:16:52:a0:f8:4b:81:bd:34:2f:cc:b8:c8:
e6:31:71:09:ec:3e:a6:ee:4d:e3:40:c5:cc:55:5d:
a8:49:15:b7:0f:08:19:84:f2:f7:6c:27:ca:85:e6:
f2:e8:8a:bc:72:95:c3:af:52:92:17:9f:70:bc:35:
53:33:20:b7:c3:97:90:85:9d:4e:ec:f5:f0:fc:d8:
35:1b:af:89:1b:b8:dd:33:cf:04:db:8b:ab:e5:67:
23:57:63:d9:3e:5a:50:04:ca:18:d3:c9:46:fd:b6:
8b:1d:bf:40:e2:23:08:4a:21:5c:e1:00:4a:2a:85:
87:54:59:cb:15:62:f4:60:f0:ce:c8:ea:aa:36:0d:
22:67:7c:6f:be:ca:cf:74:24:55:7f:5c:36:ba:c7:
8c:29:64:f6:34:70:68:c0:ba:9c:53:e4:31:d9:41:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E2:85:0C:79:9F:77:5C:22:8A:0B:18:51:F0:AC:BA:E0:35:DD:9C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JeKFDHmfd1wiigsYUfCsuuA13Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:91:5e:28:7b:3c:18:ff:01:3c:2c:63:6a:b8:e6:7d:9d:c0:
67:4b:c8:fe:76:6c:63:3b:7a:ca:ed:67:17:60:3d:e7:78:ba:
4a:28:7a:49:b6:4b:8a:8a:0a:b5:d8:1c:33:4a:e7:eb:c4:48:
b0:f0:b3:b5:69:18:49:69:5a:54:4d:a3:88:99:4b:2f:fd:1e:
d5:fe:94:08:3c:c2:39:9c:37:d9:f2:06:79:f8:70:36:26:30:
1f:aa:ea:91:86:ec:70:2c:d7:8b:3d:e8:27:a1:ce:66:80:5c:
5d:03:50:cf:c8:f0:eb:fc:85:86:e7:2f:c7:74:b9:d6:8d:d8:
2d:b3:4f:c5:d1:99:3a:9e:d8:f5:89:1c:e1:f3:1e:9a:ba:2b:
f0:d3:0a:6c:a8:07:da:22:75:c6:98:80:f8:50:2a:68:03:02:
78:42:5b:93:ff:37:07:62:2c:4f:e6:61:d1:2c:e3:f3:d8:87:
ec:3d:68:c9:b7:ff:b4:c9:a6:a4:e6:b1:0f:81:d0:87:80:60:
6e:8f:ad:0c:79:ef:5c:5a:a3:f5:78:b1:64:d2:3e:75:b2:e0:
b5:53:37:d4:09:35:95:42:26:a7:a5:62:4c:38:80:95:57:81:
ec:6b:13:83:b0:e0:47:ff:4c:cf:20:dd:87:05:b5:10:d7:f6:
08:de:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:50 2025 by rpki-client