Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4I6-UN6Dtbh6HVJx31rcJEC-i5Q.roa
File: 4I6-UN6Dtbh6HVJx31rcJEC-i5Q.roa (raw, json)
Hash identifier: cDsfPgGOBQXZpWMTGR00IiowcxdP5htZPM42rnqlZ9s=
Subject key identifier: E0:8E:BE:50:DE:83:B5:B8:7A:1D:52:71:DF:5A:DC:24:40:BE:8B:94
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01907D04178FC1CF854A7077396053344A0B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4I6-UN6Dtbh6HVJx31rcJEC-i5Q.roa
Signing time: Thu 04 Jul 2024 09:12:18 +0000
ROA not before: Thu 04 Jul 2024 09:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:04:17:8f:c1:cf:85:4a:70:77:39:60:53:34:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 4 09:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e08ebe50de83b5b87a1d5271df5adc2440be8b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:71:a5:04:05:03:f9:ae:44:3d:70:27:6c:
a5:42:90:92:47:a7:ec:7c:86:a8:b9:7e:24:21:4b:
c8:97:11:06:40:13:15:6c:61:22:a0:70:0c:f9:8e:
27:ef:d5:79:35:17:54:96:76:c3:fd:a4:a5:bb:a2:
5f:d1:f6:14:78:85:92:06:18:a8:2e:1c:08:de:aa:
78:dc:56:87:6f:0b:a8:23:7c:e0:8c:c9:bf:56:17:
9b:f3:5f:13:4c:7e:34:20:dc:f7:97:82:d7:16:2e:
b5:86:df:4c:e9:c3:de:79:48:d5:87:21:84:a2:fb:
c4:58:c3:cb:f7:80:57:09:3c:19:7a:f5:7c:f3:a7:
00:a6:f4:48:00:1f:50:90:9d:73:79:16:c1:d3:95:
e4:62:a0:e9:c4:81:74:86:3b:27:f8:6c:65:98:be:
fc:7f:4c:71:97:d5:36:41:23:a8:b0:8f:05:3e:e1:
66:b2:1b:01:d5:80:87:84:36:33:e4:bf:6a:82:7f:
88:e4:fc:6e:ad:5b:e6:bd:a4:59:36:33:8b:00:f8:
1a:e5:5a:77:cb:9b:7c:06:c9:3b:d0:cc:b2:51:0e:
55:f0:e3:cd:a4:0c:fa:81:a9:76:d3:64:ef:d2:37:
d6:14:c3:0f:7b:d3:31:7f:af:b4:cd:49:78:89:f2:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:BE:50:DE:83:B5:B8:7A:1D:52:71:DF:5A:DC:24:40:BE:8B:94
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4I6-UN6Dtbh6HVJx31rcJEC-i5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:45:43:0f:b8:17:4e:e6:f8:bf:05:eb:98:26:43:3e:3f:66:
27:f5:d6:e3:c5:d9:a7:cc:f6:cd:79:99:af:52:50:0b:a0:a7:
96:e7:40:b7:bd:b3:7d:ac:a4:02:45:c1:88:04:d4:37:66:2a:
d8:73:5b:dd:52:53:38:4d:a5:e2:6d:fc:3b:6e:58:68:0c:61:
1a:8f:16:58:d3:55:c4:ee:67:b1:ca:0e:42:3a:52:28:86:e4:
3f:50:90:fb:b9:72:fe:88:df:92:6e:c4:66:4a:ef:c7:fa:76:
c4:03:0e:40:69:b4:8a:db:13:43:a6:37:5b:45:36:0a:c1:71:
5a:4f:d7:74:3c:63:d4:8d:b9:11:d3:6e:33:73:11:aa:b0:7d:
f2:34:e1:8d:d8:7e:b2:96:f8:4c:7a:17:98:76:75:07:99:9c:
9d:f4:14:b4:29:6c:14:e7:bd:ef:61:69:d1:70:05:3d:ac:e4:
d2:5a:ee:f4:de:bf:15:70:45:6d:8a:31:7d:c1:b1:d5:37:56:
00:1d:21:c7:d1:67:5c:3a:01:43:ed:c9:4b:cb:4c:22:ae:23:
45:92:55:4b:41:81:b1:0c:30:e6:c4:0a:de:e2:8f:49:86:ad:
30:d4:3a:43:95:01:ba:94:69:dd:6d:8d:66:c8:da:57:f4:8f:
7d:9b:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:57:31 2025 by rpki-client