Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4w7QJj7tSwGW5SRJUc18uYY64MQ.roa
File: 4w7QJj7tSwGW5SRJUc18uYY64MQ.roa (raw, json)
Hash identifier: EBRIDtINn2pGTF6vDcjheA0vMnXLFpB8BqzIeuoRpA0=
Subject key identifier: E3:0E:D0:26:3E:ED:4B:01:96:E5:24:49:51:CD:7C:B9:86:3A:E0:C4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCD0E745A4E5DB2FDAE8B10D9E3AE8125
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4w7QJj7tSwGW5SRJUc18uYY64MQ.roa
Signing time: Fri 31 May 2024 05:10:27 +0000
ROA not before: Fri 31 May 2024 05:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:0e:74:5a:4e:5d:b2:fd:ae:8b:10:d9:e3:ae:81:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 31 05:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e30ed0263eed4b0196e5244951cd7cb9863ae0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:a4:a4:fb:a0:bc:4b:d9:8c:d2:ed:4a:a6:
15:60:f5:48:78:4e:df:e1:ec:89:d5:79:e9:07:bf:
23:77:66:6d:fe:91:8d:42:be:63:ff:96:a3:8b:85:
ef:a8:45:22:b1:07:6b:b3:69:38:38:44:61:23:ab:
61:f2:3a:7c:8c:3b:de:de:74:03:72:42:80:40:01:
ae:80:5b:db:52:e3:52:b6:4c:12:a7:10:ef:a3:85:
e4:a9:71:c4:7a:4b:97:97:cf:0c:28:5e:8d:20:9a:
51:8a:3a:6b:16:2b:a2:b4:02:0b:cc:94:70:7a:0d:
20:30:a8:d1:13:14:06:29:3c:86:56:06:46:46:5a:
14:96:21:58:99:2c:57:44:e8:45:b3:ee:9e:71:bc:
28:6c:28:d0:9f:b8:09:01:44:9c:de:99:a0:dd:b3:
44:60:4d:14:d5:0b:83:1f:81:14:9c:c0:b0:f4:49:
bd:cf:73:1c:52:ec:1f:10:1d:e4:41:1b:aa:a7:d6:
2a:23:05:2b:19:c7:5d:a6:f2:f2:88:b5:01:ec:aa:
3f:35:71:d3:fa:36:89:b6:e8:46:c2:1e:9c:20:70:
3a:ec:ac:6e:c3:7d:f6:c4:5d:0d:26:cc:55:31:82:
31:38:d1:41:71:b7:ba:2c:5d:72:cc:a5:d8:28:7b:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:D0:26:3E:ED:4B:01:96:E5:24:49:51:CD:7C:B9:86:3A:E0:C4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4w7QJj7tSwGW5SRJUc18uYY64MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:26:0e:a6:60:aa:54:72:ea:b8:64:b3:48:7c:57:13:2d:8e:
3d:e4:4b:32:37:8d:73:60:03:23:bd:0f:83:74:f6:84:f8:d3:
b6:ce:32:49:b8:eb:f1:6d:f1:5a:7f:c3:8c:d0:fb:5f:e0:70:
eb:40:26:74:13:4d:c9:d8:95:05:ac:e7:52:22:73:71:af:50:
da:25:ec:0e:6a:e0:97:76:ac:1e:9f:01:6c:0e:ea:7a:3c:2e:
fe:aa:6d:26:f7:d3:d3:6c:5a:ea:50:3c:0b:bc:a5:b3:5a:0c:
29:8f:a6:01:f3:2b:19:b4:6a:63:ee:cf:c1:e5:b6:4b:d0:11:
b3:65:e4:53:95:47:ea:99:89:42:ce:e2:77:72:d6:2e:90:7c:
e8:38:c0:26:2b:9b:01:6e:d7:24:94:97:2f:89:f4:7f:6f:f8:
d7:89:db:5c:6a:83:d6:3d:1f:12:30:1b:a9:19:c6:0d:8b:01:
a3:d4:52:25:1b:de:c6:ca:63:7b:a0:41:d4:0b:7b:bc:78:66:
57:f3:b7:86:38:b7:36:59:f3:ce:59:59:99:d3:05:eb:23:00:
53:ac:4f:54:81:9e:fb:89:8c:f2:ea:62:09:f5:d0:3e:7f:ab:
40:1b:17:46:53:6d:8e:f4:8c:a6:80:40:7f:a7:5f:78:39:9f:
d5:43:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:34 2025 by rpki-client