Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-F354CLMvHPudSYrOSHh-vg2i3I.roa
File: 1-F354CLMvHPudSYrOSHh-vg2i3I.roa (raw, json)
Hash identifier: x/uy7iJrBSzW9dIp5Uvmz1ZL5+XjTtXCPM32UlMYFbA=
Subject key identifier: F8:5D:F9:E0:22:CC:BC:73:EE:75:26:2B:39:21:E1:FA:F8:36:8B:72
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904D6097FBF6524E4987E1928EB225D670
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-F354CLMvHPudSYrOSHh-vg2i3I.roa
Signing time: Tue 25 Jun 2024 03:11:34 +0000
ROA not before: Tue 25 Jun 2024 03:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4d:60:97:fb:f6:52:4e:49:87:e1:92:8e:b2:25:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 25 03:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85df9e022ccbc73ee75262b3921e1faf8368b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:85:04:6f:54:b4:53:f9:2e:f0:0b:ab:c4:
91:ef:3a:47:c6:e1:4a:e2:b2:af:ca:56:3c:bc:23:
ce:a7:26:90:c3:6d:35:5d:ed:cb:db:d3:10:e8:92:
3d:03:db:a4:1b:2d:c7:17:10:98:83:8e:a0:ba:1a:
70:6c:68:36:fa:ab:6e:55:a1:08:20:70:c2:d5:66:
39:ac:42:bb:62:11:06:3b:85:66:07:1d:38:1d:75:
ec:21:0f:40:4b:e7:35:93:28:1e:a6:8c:cc:98:90:
56:7f:b0:97:ab:4d:31:96:90:5f:f5:a1:9c:cb:2a:
ad:16:28:0c:a2:00:3b:26:16:64:65:eb:9c:7c:0e:
56:f8:dd:b5:20:5f:20:fc:95:ac:6b:2b:ed:18:a2:
df:19:b9:1b:98:64:c4:f8:2e:95:45:a4:7d:23:97:
75:b4:af:24:cf:0b:ab:e2:15:27:c8:d1:c9:11:3d:
00:c9:3a:ad:3f:6f:08:7f:0f:04:00:92:c0:85:3e:
2c:bb:75:e2:25:4f:d0:bb:29:b5:92:37:ec:b6:11:
01:20:04:a7:e1:06:74:a1:8b:de:1b:47:b4:95:cb:
af:39:ff:4c:0a:27:7b:0c:03:cc:91:6f:fe:4e:2e:
85:62:7a:93:fe:d1:9f:a6:6c:73:92:a3:6a:74:55:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:F9:E0:22:CC:BC:73:EE:75:26:2B:39:21:E1:FA:F8:36:8B:72
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-F354CLMvHPudSYrOSHh-vg2i3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:7b:ad:4f:f9:a9:bd:86:95:0b:12:58:60:2f:56:b7:32:8c:
e4:49:5b:82:8c:0d:82:13:89:ee:36:64:06:9f:87:d6:2e:e3:
2a:dc:17:02:1e:42:7a:80:4f:4f:68:62:d4:fd:1f:e2:bf:35:
e5:d1:6f:7a:70:97:b8:0d:89:b3:73:b5:21:b0:ea:fc:5d:08:
b4:85:56:f1:15:13:42:79:1d:f0:5e:a1:ca:d9:28:91:06:e6:
33:8c:10:7f:f4:73:f7:9a:5c:b2:d2:bd:70:70:3a:86:34:25:
b8:ed:2d:a2:2d:a9:ab:99:31:9e:fe:88:8c:10:c8:2a:d5:b6:
02:e9:bb:9b:2f:cc:44:77:f8:fb:9d:cb:2d:8b:b2:6f:34:bd:
4e:e1:9a:82:11:6f:e1:81:15:36:31:4e:38:b0:29:96:89:b1:
4e:05:01:d8:fb:d7:81:a3:d4:cc:07:fa:33:5f:22:0a:50:92:
f7:29:71:89:2c:cb:43:d9:4c:da:19:b1:b4:ff:53:30:2a:a6:
5c:63:3d:e1:77:60:98:53:70:51:9e:3f:4c:26:70:34:3f:ce:
58:5d:cc:7d:0c:cf:64:97:d0:6b:08:37:1a:4a:fc:5a:e7:64:
94:b5:bc:8d:39:da:f1:93:62:c4:18:5e:ba:a5:13:d1:3a:7c:
0a:e9:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:27 2025 by rpki-client