Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa
File: eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa (raw, json)
Hash identifier: OS5Y0dVKD+SIL0QDKQgW5o6NZSGfrgs8Wg+BUTvYIjs=
Subject key identifier: 78:46:DA:25:6C:24:48:F5:80:F3:1D:54:D8:FF:89:D4:CB:AC:F4:83
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F50D34EEEC750D925D7F1040DDA60ABEA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa
Signing time: Tue 07 May 2024 02:12:56 +0000
ROA not before: Tue 07 May 2024 02:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:50:d3:4e:ee:c7:50:d9:25:d7:f1:04:0d:da:60:ab:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 02:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7846da256c2448f580f31d54d8ff89d4cbacf483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:5b:a8:b6:85:cc:c8:e7:c5:ae:e2:5d:91:
c1:39:a8:4a:63:67:44:bb:b2:ad:cd:de:b6:0f:77:
5e:61:8f:cc:4d:4f:d2:b8:a6:cf:c4:26:3a:4d:2e:
c4:be:07:f7:34:14:a7:88:72:86:af:7a:78:62:68:
a8:fd:24:47:10:5c:c9:15:dd:04:c0:eb:28:84:76:
39:19:af:e8:95:96:01:30:06:a6:e5:85:d0:a8:9b:
ac:6b:68:cc:78:a5:65:e8:13:40:ef:5b:f4:b6:3e:
4d:74:61:33:0f:77:5d:e4:3e:71:8e:4c:5b:75:c8:
51:84:e1:47:06:bc:71:d3:08:68:8d:83:a5:41:00:
aa:74:7a:57:49:70:25:5c:d4:85:9b:3e:0e:d2:d0:
1d:5c:9c:ad:17:b8:15:ef:23:5c:c0:54:e7:e9:21:
f1:6f:23:c8:66:64:90:e0:e0:07:ba:8f:0b:52:bb:
66:94:11:6a:6e:fc:f4:0e:21:1b:cc:e4:48:01:bf:
de:64:c3:d4:c0:77:e8:e0:c6:56:fe:f1:96:2c:82:
13:92:4d:e0:bc:27:1a:95:57:57:65:f9:2c:40:bc:
ee:44:b5:35:4e:d8:fe:11:7e:f4:22:33:8f:3a:eb:
5d:c5:65:06:64:6b:6d:93:d3:12:de:b0:70:b9:84:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:DA:25:6C:24:48:F5:80:F3:1D:54:D8:FF:89:D4:CB:AC:F4:83
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:f1:b0:71:e0:1d:cd:04:8f:6c:8e:fb:ad:43:23:14:bc:75:
c6:c8:65:f7:74:ef:00:fd:0f:bc:b7:a6:5b:9a:fa:98:8f:87:
7b:94:13:17:16:7b:4d:7f:04:9a:da:8b:2f:a6:02:b3:f6:04:
f5:2b:eb:e0:aa:43:bf:8b:87:d0:06:aa:61:23:60:26:29:45:
e7:42:21:67:25:38:5b:43:76:04:f1:b3:1c:eb:01:b1:cd:c2:
2f:30:8c:db:f1:fe:c7:8a:3b:6f:b4:e8:8e:77:ce:7b:25:69:
96:ed:53:ab:1c:b1:55:9f:b0:7d:ba:71:59:e6:a1:6a:0b:39:
14:59:3b:93:e5:9a:35:49:24:41:19:49:84:5c:92:20:2c:38:
c4:3f:c1:0f:29:2a:fc:05:52:59:08:97:12:a4:e2:5b:22:21:
a7:2c:a1:ec:6d:57:fb:1f:4f:1b:0b:b4:c2:03:3e:23:3b:63:
14:c3:9c:32:94:84:a2:a9:ec:2a:e4:54:ca:55:31:73:a0:c2:
34:c2:5c:c0:ae:cc:87:56:e2:2d:d8:0b:cf:30:ec:a5:38:5d:
7d:a4:4c:78:26:76:9d:6a:8c:9b:20:bb:ec:14:25:cb:bd:96:
58:4e:cc:27:4b:cc:09:3a:b2:37:9e:ed:96:12:fb:50:90:08:
59:94:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:05 2025 by rpki-client