Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0xlAXDm8xzt2sCazKJKDFd1ZnAg.roa
File: 0xlAXDm8xzt2sCazKJKDFd1ZnAg.roa (raw, json)
Hash identifier: KLZqAU/Q93VQaZXNwomWxPegnSTd5pgKvcmNPuouiaQ=
Subject key identifier: D3:19:40:5C:39:BC:C7:3B:76:B0:26:B3:28:92:83:15:DD:59:9C:08
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B3BA1311A2ED7D4E1B59A2DC6F2D53AF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0xlAXDm8xzt2sCazKJKDFd1ZnAg.roa
Signing time: Mon 15 Jul 2024 00:10:34 +0000
ROA not before: Mon 15 Jul 2024 00:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b3:ba:13:11:a2:ed:7d:4e:1b:59:a2:dc:6f:2d:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 15 00:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d319405c39bcc73b76b026b328928315dd599c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:33:e2:07:15:cd:35:ac:63:e0:c2:ee:30:
71:eb:a6:1f:df:8b:ca:44:c7:04:40:25:3c:06:fa:
e0:1e:f7:5f:41:9c:0c:01:6a:7b:79:2b:fe:32:b2:
1e:e2:cd:5c:03:66:4d:bc:3f:8f:ee:f0:c6:c5:06:
78:64:9d:e1:d9:88:df:1d:3b:7b:ed:b8:04:77:be:
bc:61:65:3e:da:48:51:14:eb:e0:d8:79:de:cb:b3:
76:06:97:10:71:72:ad:19:25:a9:dd:d3:49:61:a5:
d5:29:2b:ca:d0:53:40:40:b2:96:50:d9:2b:8e:b0:
c7:2d:3a:f9:80:d6:90:1b:2a:57:0f:0d:5b:08:c8:
64:ad:31:3d:3e:b9:69:22:32:51:90:0f:a6:33:53:
ea:b4:56:99:a4:ee:4e:3e:26:b3:8c:34:7b:b4:c5:
bb:43:2d:d9:63:bf:79:aa:41:9a:64:96:2f:8c:96:
e4:d9:99:a2:1f:2e:3b:9c:66:ed:19:6e:39:be:59:
cc:8f:82:f6:05:bc:44:97:c2:5a:dc:f6:28:ea:e2:
e2:c2:78:2b:83:e3:6e:b6:78:48:20:a3:8c:a8:54:
be:dd:6f:4d:05:46:68:63:a6:90:5c:04:03:51:18:
ca:34:c9:d5:6e:b5:23:59:2a:cc:55:fc:0f:8a:89:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:40:5C:39:BC:C7:3B:76:B0:26:B3:28:92:83:15:DD:59:9C:08
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0xlAXDm8xzt2sCazKJKDFd1ZnAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:73:08:3c:61:07:9a:4d:e8:d0:37:1a:3f:be:e1:7b:83:28:
00:3d:e3:6d:bb:2a:9b:c4:93:b4:bf:dd:e7:59:48:37:dc:8e:
20:68:da:1b:d6:24:1d:1b:56:c1:7e:ba:e2:b2:8e:b8:15:5e:
1d:d3:73:dd:32:6e:0f:a9:42:48:84:88:12:01:25:98:e4:db:
c9:6f:32:18:8c:0c:fc:b1:9e:d5:ca:4c:ef:08:68:52:2c:f2:
8a:71:32:ae:b8:29:21:d3:28:cd:08:97:7a:9c:d2:5e:7d:40:
24:f3:ab:1d:5f:5e:03:f0:52:0f:19:45:c7:00:81:b4:56:a3:
c7:aa:16:66:38:0a:77:e0:47:2a:76:20:4f:c3:00:43:5e:17:
46:e6:69:5a:50:93:c5:e4:ce:c6:c6:b5:7e:4d:b9:8b:e5:d5:
a3:00:9d:65:62:04:ba:af:86:90:18:c0:6d:3d:2d:06:60:7d:
69:4f:37:d7:1b:1c:89:de:74:a7:11:40:6b:61:b5:bb:f5:35:
62:d4:a5:61:0c:77:e8:af:a5:69:a8:13:9a:7e:25:ca:92:45:
ae:35:b5:a0:19:aa:e6:42:00:95:34:78:25:e1:9a:90:df:4d:
76:d9:db:ec:c4:34:64:9d:98:55:ff:b5:83:e6:11:aa:9d:b2:
93:67:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:36 2025 by rpki-client