Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-2la48vl8X3tmkFIneTyJMffeAU.roa
File: 1-2la48vl8X3tmkFIneTyJMffeAU.roa (raw, json)
Hash identifier: bCTDjfwmNDdvY/ORGGev8a3ld6H4dXvidzDAFw3qHvE=
Subject key identifier: FB:69:5A:E3:CB:E5:F1:7D:ED:9A:41:48:9D:E4:F2:24:C7:DF:78:05
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190BA98CCFD1728CE1D53D07240E5B01611
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-2la48vl8X3tmkFIneTyJMffeAU.roa
Signing time: Tue 16 Jul 2024 08:11:34 +0000
ROA not before: Tue 16 Jul 2024 08:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:98:cc:fd:17:28:ce:1d:53:d0:72:40:e5:b0:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 16 08:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb695ae3cbe5f17ded9a41489de4f224c7df7805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:0d:b2:75:92:9b:d0:09:b1:64:c2:cd:1f:
fc:1e:09:bf:49:e6:4c:29:b5:36:62:12:28:ac:98:
c9:69:43:c0:92:d8:ec:43:1c:ce:ad:52:82:76:bd:
10:31:db:32:84:61:f9:30:f1:fe:de:53:bb:c7:74:
ed:08:5b:21:af:1b:40:5e:d1:b5:76:a9:20:b8:5b:
42:6e:b4:9f:1f:ec:30:1a:8c:ed:0c:9f:3e:fb:0e:
53:c9:b2:88:e1:51:0b:1f:29:82:aa:82:b2:72:9f:
b0:79:73:3d:89:40:5d:80:b9:2e:d3:a3:1a:05:5f:
93:cc:14:f7:32:1c:92:ab:88:8c:4e:d9:58:bc:70:
51:9b:cf:4d:80:0d:14:56:b7:52:a0:45:bf:62:39:
b0:63:25:ca:73:c2:3b:6c:d7:80:3c:8c:00:71:4e:
68:63:81:e7:9c:c0:96:50:11:d4:e6:e6:f3:46:04:
2b:a0:9d:fe:56:4f:3f:7c:c4:7a:95:c8:d5:07:85:
c9:6f:b2:3d:84:7f:7b:fc:f9:4b:dd:70:bb:14:eb:
72:71:01:4d:c2:5c:20:22:59:19:0a:2a:77:fb:4d:
52:06:43:9b:f1:e7:ab:75:79:ef:d6:39:a8:41:00:
66:0f:b9:9d:8e:0e:9a:83:9e:d3:4e:f7:66:92:0f:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:5A:E3:CB:E5:F1:7D:ED:9A:41:48:9D:E4:F2:24:C7:DF:78:05
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-2la48vl8X3tmkFIneTyJMffeAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:df:95:13:9d:ba:64:d4:d1:ab:19:80:7b:67:ee:90:9b:a8:
9d:21:03:91:db:35:a5:19:10:a6:27:4c:02:d2:f4:06:90:50:
e1:56:0b:ee:90:83:a1:ff:ec:b6:47:74:d7:77:b8:c0:37:ef:
6a:15:da:49:88:7a:62:62:25:fc:ff:9a:e8:57:75:2e:2b:ec:
28:d4:34:ba:7e:5c:e1:2b:34:f6:04:79:b0:3b:43:c6:81:9c:
c3:c9:54:06:e6:1d:3b:8d:57:71:69:84:e8:86:a3:15:81:ed:
48:33:fa:6e:84:26:1e:6e:25:29:25:b0:61:06:05:e6:6f:92:
ab:33:22:f0:6b:24:00:8f:c9:e7:33:e5:b3:92:a5:d3:55:aa:
3a:8b:03:62:1e:45:f1:0d:9c:c2:6c:7e:e9:21:95:26:51:b3:
6b:b9:60:fd:50:33:5f:c9:81:a5:33:c4:6d:f0:7d:69:40:c5:
db:2e:de:2e:2d:b6:9d:e4:0f:60:da:62:64:df:27:8e:25:87:
74:c2:38:7a:0e:99:d6:0f:48:f2:df:59:7d:99:0c:f8:ea:e8:
6c:71:78:10:70:3f:c1:1d:7a:17:1d:d9:18:91:68:ad:5f:93:
d5:34:93:33:2d:ed:ac:0f:5e:5a:81:00:10:b0:49:77:f4:eb:
1b:63:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:14 2025 by rpki-client