Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2OR3Pe1nfzfv0i43R7FJmYNuIs8.roa
File: 2OR3Pe1nfzfv0i43R7FJmYNuIs8.roa (raw, json)
Hash identifier: Y/0crWAPJTtccgnzPEDo1DlRq9Qf6zZAMrjr9EL5zTk=
Subject key identifier: D8:E4:77:3D:ED:67:7F:37:EF:D2:2E:37:47:B1:49:99:83:6E:22:CF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190411F151053A651F23C0D0215F9305495
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2OR3Pe1nfzfv0i43R7FJmYNuIs8.roa
Signing time: Sat 22 Jun 2024 18:04:34 +0000
ROA not before: Sat 22 Jun 2024 18:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:411e:bd55/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:1f:15:10:53:a6:51:f2:3c:0d:02:15:f9:30:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 22 18:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8e4773ded677f37efd22e3747b14999836e22cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:af:eb:d2:4c:32:96:26:b0:dd:9b:ae:3f:10:
49:ef:1c:67:10:2f:76:64:be:7c:98:98:79:cb:de:
d1:5b:27:4f:70:19:23:49:5a:ae:94:ed:73:cd:49:
f0:00:a8:14:94:c5:50:03:5e:01:24:48:db:84:6e:
bc:15:18:99:2e:77:a4:d6:53:7c:ee:22:e4:04:89:
e9:d7:a8:9d:55:c9:81:97:a0:36:5b:54:12:47:2a:
84:69:f8:7d:d9:7c:4f:9e:e8:90:2b:4a:37:42:35:
a2:de:18:0d:2b:fb:9f:7e:31:24:13:44:45:df:5f:
0b:5e:fa:6c:26:e1:0c:93:f4:ff:02:e9:49:26:ad:
0f:14:c4:33:bc:7d:e6:b0:e2:8e:80:ab:fa:81:e7:
e7:31:22:cf:fe:95:10:05:a1:88:d2:a9:3c:17:87:
13:81:57:07:17:db:fa:94:69:ad:59:41:f8:5a:06:
56:89:47:a4:af:12:fb:ee:9c:75:a0:0d:c9:4a:21:
ac:a3:8d:f3:86:58:f5:6e:e4:70:e3:80:d8:3a:5d:
2f:27:2a:68:1b:4c:77:0d:a3:58:16:74:9c:dd:63:
8e:0d:48:9a:74:bd:21:56:75:c7:fd:5f:7f:cb:43:
4c:04:0d:b7:98:b9:64:92:18:59:ea:00:24:7a:78:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:77:3D:ED:67:7F:37:EF:D2:2E:37:47:B1:49:99:83:6E:22:CF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2OR3Pe1nfzfv0i43R7FJmYNuIs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d8:7c:54:98:f7:ad:ee:6c:db:2f:23:6a:95:2e:24:ab:d0:
ad:04:3b:b6:6a:47:70:0b:84:96:e6:a5:ba:b2:92:54:6e:88:
fa:74:7a:38:20:61:55:ef:bd:17:0e:14:3a:df:d4:02:e8:4e:
06:1c:cf:0e:c0:de:58:64:0a:3f:5e:3a:22:85:73:fc:8f:d2:
1c:13:0d:1f:f1:81:d1:e7:77:2d:d2:25:84:1e:c1:37:7d:11:
e8:ab:12:f5:c2:a5:a0:cf:e2:87:06:d7:bf:0f:e1:a2:a8:c4:
13:9d:d7:82:71:f5:98:a9:6a:e6:cd:c1:3b:d1:a4:fe:05:fb:
6f:10:a3:57:fe:ad:9f:be:19:2d:67:47:0a:43:a0:2c:1c:4a:
4d:66:92:d5:bf:81:e9:24:6a:b3:83:70:28:25:e0:2e:fe:14:
73:f8:2d:fd:5c:a6:45:af:27:d0:df:8f:c5:f1:a3:47:e8:82:
53:6b:4c:f6:30:ca:8b:48:fb:1c:95:56:4a:1e:b0:ab:37:80:
31:03:f1:05:c6:86:e4:fd:a1:e1:b7:ec:9f:3a:d0:ee:44:39:
55:68:58:c5:81:cb:60:1b:3f:6e:4b:52:2c:69:fa:3a:0e:64:
3b:d6:c5:12:b0:84:d0:3c:cc:8f:83:f5:63:e0:5c:66:f1:18:
e6:c8:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:10 2025 by rpki-client