Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0HxILQ2KHPVz8VYf-eFbLzBSz7g.roa
File: 0HxILQ2KHPVz8VYf-eFbLzBSz7g.roa (raw, json)
Hash identifier: DR4wriiyBjv8Jx1frVp3Q8jscqv1sMI6vvNOM3vgibM=
Subject key identifier: D0:7C:48:2D:0D:8A:1C:F5:73:F1:56:1F:F9:E1:5B:2F:30:52:CF:B8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902F4FC17DCA81D15EBEF9DF07B22BD095
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0HxILQ2KHPVz8VYf-eFbLzBSz7g.roa
Signing time: Wed 19 Jun 2024 07:04:34 +0000
ROA not before: Wed 19 Jun 2024 07:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:2f4f:7ce4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:4f:c1:7d:ca:81:d1:5e:be:f9:df:07:b2:2b:d0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 19 07:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d07c482d0d8a1cf573f1561ff9e15b2f3052cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:cd:b0:a2:8f:82:5e:34:47:96:44:9a:20:
c2:9a:45:c1:11:1b:42:79:be:c1:57:a4:ae:18:55:
96:d7:e5:0f:6a:da:44:b9:0f:a1:37:99:71:b6:f6:
4b:a2:70:e5:56:ea:00:8d:c0:88:1a:62:00:be:8b:
92:f7:99:a6:5e:c7:10:74:66:2c:1f:f4:06:45:8c:
13:52:09:7f:2e:10:f2:48:cb:2c:82:e6:d1:14:66:
fd:32:23:46:5a:06:e6:9c:6b:a1:bd:8d:bd:fc:1b:
2b:34:47:1e:fa:02:14:45:f7:d0:c7:ec:61:54:a4:
ac:65:21:04:bc:49:d6:82:d6:05:f0:63:c5:74:ba:
98:31:a7:aa:35:6e:34:46:6a:0c:f6:b1:0c:90:63:
89:e7:3a:e4:07:0b:be:c6:dc:cc:3d:8e:f6:a8:70:
07:3a:27:22:32:68:97:b2:54:39:91:bf:07:17:43:
a0:9a:91:af:25:cc:26:6e:12:85:b3:67:36:8d:cb:
88:9d:4e:ec:ec:55:d6:75:ac:66:87:e1:e7:4c:4b:
88:98:bd:dd:e4:f3:4a:fd:35:6a:4e:18:55:2c:54:
c4:05:60:aa:16:6f:c7:b6:9d:b8:0e:39:2c:57:ac:
1f:6d:69:0a:98:ab:ce:37:36:db:80:ac:a6:33:3c:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:48:2D:0D:8A:1C:F5:73:F1:56:1F:F9:E1:5B:2F:30:52:CF:B8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0HxILQ2KHPVz8VYf-eFbLzBSz7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:b6:b2:dd:17:13:0a:07:d4:0a:52:67:15:bc:5f:c7:01:e7:
76:12:b2:9a:44:c4:4f:ba:47:bc:b1:ca:61:05:ea:31:af:79:
ed:b5:79:c3:d6:25:99:9d:54:9b:6b:74:ee:8b:21:d2:79:f0:
b3:b0:5c:fa:3e:88:de:39:47:fe:06:51:6c:c0:97:af:48:a2:
71:59:5b:e5:70:dd:e1:77:e5:25:4d:4f:22:dd:0f:ca:6b:ff:
74:aa:b8:c4:95:0b:9c:11:80:5d:4c:09:14:c6:41:ac:a6:3d:
62:79:e5:ed:34:22:3b:a9:cb:87:38:08:ed:3e:78:6f:e4:fe:
3b:f9:2f:5c:89:26:56:4d:7a:30:af:70:11:2f:4e:56:f7:b7:
96:ab:1b:b2:89:a7:2c:35:43:61:1b:15:06:8f:1e:51:1d:43:
05:01:32:e0:ff:c1:9b:ac:68:2b:9d:be:bf:3d:59:9b:ad:08:
1b:d2:6a:70:13:57:36:0b:df:6e:4b:b3:84:68:56:26:ce:65:
06:6e:01:94:9e:ba:00:5b:9f:c2:61:3e:46:32:b1:23:b0:52:
5a:5a:e5:c8:71:d8:5a:48:7c:65:95:1d:b7:49:40:42:9c:04:
f0:1b:82:a5:59:a7:b6:b0:c2:38:92:27:f7:e2:3f:f5:69:dc:
9e:c2:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:54 2025 by rpki-client