Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Efvjo0dq-TKcFrRfuRIAVlNjsM.roa
File: 4Efvjo0dq-TKcFrRfuRIAVlNjsM.roa (raw, json)
Hash identifier: rfJpGW5aTdnwBwy04Ixo7i6hfEcgazuTUzVXDSt8S70=
Subject key identifier: E0:47:EF:8E:8D:1D:AB:E4:CA:70:5A:D1:7E:E4:48:01:59:4D:8E:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE73D08CB95D4F2766BAD99332BB49D1A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Efvjo0dq-TKcFrRfuRIAVlNjsM.roa
Signing time: Wed 05 Jun 2024 07:11:27 +0000
ROA not before: Wed 05 Jun 2024 07:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:3d:08:cb:95:d4:f2:76:6b:ad:99:33:2b:b4:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 07:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e047ef8e8d1dabe4ca705ad17ee44801594d8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:78:34:c3:06:fd:9e:e0:18:a9:fe:2d:7d:
33:f9:9a:72:70:08:1a:b7:e2:37:b3:c6:17:67:c0:
98:1a:b3:9c:f1:3b:07:7e:72:5f:0a:cf:f8:71:b1:
26:84:31:89:c8:da:91:e7:80:1b:8c:9a:ea:29:e7:
ad:7c:6b:d9:47:c8:59:94:e7:73:ad:e4:ad:0d:13:
67:31:03:b8:18:66:57:3c:c1:29:20:e4:3f:6e:2a:
46:91:97:96:a7:24:93:61:f5:60:d6:35:3b:91:c7:
be:6c:8b:9e:61:8d:56:95:05:ea:8a:73:a3:52:fb:
91:cb:87:a4:69:ab:b5:bb:bb:9f:ca:f2:72:1e:58:
f9:6f:77:af:2a:f8:35:18:28:94:c2:8f:7d:e8:96:
9c:9e:4d:5c:f9:d2:81:3c:85:28:03:ee:e9:b3:62:
55:a1:b3:5c:bf:45:07:fb:d6:09:b1:97:6e:13:b2:
37:84:54:28:f0:77:d5:27:c9:a2:31:fa:d1:e5:e6:
86:77:65:cb:f1:62:eb:b3:e5:e3:1c:60:86:3f:26:
32:ad:9b:96:48:0b:2f:0e:87:c0:f0:83:5a:cc:9c:
18:e4:4a:4b:70:d2:7a:be:7f:69:f3:21:6c:fe:48:
42:b7:54:47:3f:e9:0f:4c:7c:d8:71:ec:94:8f:51:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:EF:8E:8D:1D:AB:E4:CA:70:5A:D1:7E:E4:48:01:59:4D:8E:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Efvjo0dq-TKcFrRfuRIAVlNjsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:b8:0c:21:3c:b2:dd:13:ba:29:53:d4:1e:33:aa:6f:d7:1f:
a3:e6:d6:f3:6c:f1:c0:74:08:9c:41:9b:d2:55:05:09:10:44:
2e:a8:80:ae:7c:87:e2:18:5c:7c:f4:d1:8b:8d:c2:a3:ac:85:
d8:36:5b:82:bb:23:ea:b0:d0:04:56:99:bf:14:0f:da:4e:32:
7a:4c:e6:9f:4c:5a:0b:31:2e:c7:d9:38:d1:84:9d:e9:a0:de:
15:4e:a3:8d:7f:d7:50:07:68:9e:90:35:88:5e:79:fc:99:61:
35:46:5d:ac:40:0d:e1:70:31:1f:04:f7:4b:02:81:f1:52:86:
de:25:0c:3c:fb:f1:71:56:43:86:c2:49:e5:81:21:41:e7:40:
b1:e6:7c:a9:44:38:9a:42:b9:f6:ef:65:b7:22:2a:dc:47:fe:
1d:89:ea:da:c1:57:22:b3:82:67:2d:f9:a8:76:55:c6:11:90:
42:83:41:ce:e6:09:0d:f9:99:91:31:d6:99:b8:a3:76:7e:75:
68:a7:0f:95:07:58:9c:56:92:6b:32:eb:e3:c8:b4:3f:3e:87:
94:a6:35:bc:2c:cc:73:ec:32:ef:bc:09:a6:65:6a:bc:ae:c5:
0d:ba:3f:a0:3f:06:38:75:96:cc:c2:12:9a:96:2b:5c:72:0d:
09:53:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:57 2025 by rpki-client