Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1ZmFjJ2vZ5zohl0Grsuajf2M_f0.roa
File: 1ZmFjJ2vZ5zohl0Grsuajf2M_f0.roa (raw, json)
Hash identifier: yATdK0FCbGyE1txIU7V3e5TitahdsRNYA93YaJRBDyE=
Subject key identifier: D5:99:85:8C:9D:AF:67:9C:E8:86:5D:06:AE:CB:9A:8D:FD:8C:FD:FD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194186CEC4829EA30E9F5441C9EF5A80E10
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1ZmFjJ2vZ5zohl0Grsuajf2M_f0.roa
Signing time: Mon 30 Dec 2024 16:36:19 +0000
ROA not before: Mon 30 Dec 2024 16:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:6c:ec:48:29:ea:30:e9:f5:44:1c:9e:f5:a8:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 30 16:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d599858c9daf679ce8865d06aecb9a8dfd8cfdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:0e:31:80:cd:2c:d6:a9:b4:d5:68:46:df:
60:ff:8a:c0:84:f1:86:47:c7:4a:25:1d:d8:36:f2:
84:4e:de:2e:c0:54:5c:2d:a3:81:94:2e:45:12:65:
ea:7e:c3:cb:10:51:52:e7:11:74:ba:bc:0c:72:6f:
6a:99:6c:76:8f:6c:3c:bb:84:7e:78:64:0b:41:44:
cf:f4:97:8d:b8:bd:1b:64:8f:78:1e:b4:e6:13:d1:
81:6b:df:e9:3e:c3:e5:6a:c3:5e:f0:38:d3:15:17:
1f:68:f1:6e:90:b8:94:f9:1c:cf:90:af:a0:b7:a9:
3a:27:83:5c:32:77:75:25:b8:e3:98:08:88:ad:cc:
d2:27:b1:92:3e:14:bd:c8:11:a8:b0:22:d5:d1:f4:
48:ed:df:ba:39:61:b0:12:61:ce:b0:8b:53:f0:71:
2f:19:dd:4c:6b:e3:5e:a3:b9:73:c9:a2:5f:a1:0f:
fb:06:2d:60:bb:56:dd:3c:ff:21:90:fe:43:f6:a6:
98:2e:2a:a4:06:6a:b5:af:f3:3e:31:90:21:35:98:
77:70:c2:10:43:5a:73:93:f4:01:f7:54:14:45:5a:
93:30:76:50:d5:ef:79:fd:8d:80:9e:85:af:7f:f9:
98:3d:aa:04:d6:90:35:99:ea:2b:25:eb:84:d9:9f:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:85:8C:9D:AF:67:9C:E8:86:5D:06:AE:CB:9A:8D:FD:8C:FD:FD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1ZmFjJ2vZ5zohl0Grsuajf2M_f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:b3:4e:89:81:5d:16:b6:6c:3b:e9:5c:9e:e4:9a:f7:a8:49:
b6:94:1a:0d:5e:e3:2c:16:d1:8e:7f:c0:7a:99:83:a5:a4:b8:
74:91:2f:e0:d3:04:74:83:af:3a:6d:55:67:62:ba:5c:8b:56:
8f:16:d1:ee:e6:be:fa:c8:a0:47:fb:44:df:4b:62:b6:d1:44:
46:b9:aa:8f:a9:1f:4c:56:4c:46:f5:1e:72:22:8e:89:3b:56:
f9:f5:bf:1c:9c:c8:f2:1a:c0:bf:02:2d:72:f6:c9:7a:b6:70:
c7:49:3e:ec:00:83:b2:2c:6e:fc:a6:f2:db:a8:16:6f:d5:55:
cb:b3:02:d4:cb:53:10:bf:d9:5b:8b:4a:fb:cb:bc:52:cf:0c:
c7:b7:b6:9f:15:a1:a6:82:a3:52:17:d3:5b:ef:92:79:1b:60:
53:8c:2d:0f:85:c4:ad:11:67:d4:b8:3e:53:ea:08:1b:68:cb:
72:6a:d2:49:98:8b:db:96:7a:44:ed:f2:46:62:43:06:2b:05:
a2:d6:ea:21:b5:db:9c:5d:9b:db:7f:b8:05:c6:7e:92:5f:e9:
75:db:5c:b4:2d:f1:d8:82:e9:b8:ee:8f:de:44:e3:c5:ec:e4:
ba:78:07:3c:33:f7:8a:2d:a1:c3:e6:ce:d7:e2:db:f2:59:c5:
19:04:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:07 2025 by rpki-client