Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5T8C3ZZdLKWqLR7rekmSzBLCyZo.roa
File: 5T8C3ZZdLKWqLR7rekmSzBLCyZo.roa (raw, json)
Hash identifier: 2NdJca4wOJeCZSkvNDh9x8aBuauggB5240Y6n34wQgc=
Subject key identifier: E5:3F:02:DD:96:5D:2C:A5:AA:2D:1E:EB:7A:49:92:CC:12:C2:C9:9A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904B036EC64F0D5D3E17E077110CEB67E5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5T8C3ZZdLKWqLR7rekmSzBLCyZo.roa
Signing time: Mon 24 Jun 2024 16:10:34 +0000
ROA not before: Mon 24 Jun 2024 16:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:03:6e:c6:4f:0d:5d:3e:17:e0:77:11:0c:eb:67:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 24 16:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e53f02dd965d2ca5aa2d1eeb7a4992cc12c2c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:87:42:45:f7:3a:f4:bc:d6:a3:a6:72:64:
54:ae:85:01:64:df:97:b8:5a:ad:28:0c:8f:99:98:
61:71:11:86:58:80:bd:e8:01:d8:21:8d:4f:85:a7:
f1:ef:b0:32:d0:a1:9a:45:ae:d1:91:37:ea:63:9b:
1a:47:ea:ab:df:00:e0:da:81:91:23:d4:31:38:de:
d5:24:f9:0c:ea:c6:f5:50:d9:73:86:b7:4f:29:6e:
0b:86:f2:62:40:65:43:2d:bd:bf:eb:6b:4a:b6:08:
0e:7b:61:5b:35:a9:9f:7c:ca:cd:44:7f:17:1c:64:
fb:0c:e3:37:55:37:ed:3c:ca:5c:be:16:05:0f:37:
c1:e5:2f:15:28:b1:8c:33:81:d4:68:cd:75:6c:2b:
a4:98:e3:cc:e8:d2:e1:c9:df:16:a4:6a:86:02:89:
2a:99:fb:dd:7e:1c:aa:18:f9:57:c3:b6:5b:f9:d6:
f1:ae:80:9e:e5:a7:e3:16:23:ab:88:9c:74:dd:1c:
10:c1:71:77:50:74:13:49:95:8b:07:ae:04:1e:e2:
a8:47:94:1f:44:d4:94:50:d1:2b:bd:6e:11:20:ce:
4a:51:33:07:23:03:95:45:ca:5f:dc:08:7d:83:0d:
a5:3d:95:65:88:92:7e:ff:b8:cd:dc:14:07:c0:ca:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3F:02:DD:96:5D:2C:A5:AA:2D:1E:EB:7A:49:92:CC:12:C2:C9:9A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5T8C3ZZdLKWqLR7rekmSzBLCyZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:f0:c2:17:0f:fd:19:70:2d:95:20:4e:1f:d4:94:86:9f:12:
bc:bd:cc:74:70:fd:63:52:95:f5:4a:cd:f7:71:71:c3:25:27:
87:77:b3:b5:79:0c:89:a1:34:fb:7c:cd:0d:85:05:99:e2:0a:
0b:e2:f4:cb:21:17:fc:63:ed:dd:d7:df:c7:d8:76:3a:29:9b:
50:e1:35:58:e6:67:f9:6f:29:73:96:93:ac:e2:f7:4e:97:a7:
b1:a2:ec:de:7c:b6:d6:27:d3:23:0d:31:07:fc:0f:68:d5:f6:
a5:b2:71:9e:b2:0f:70:b8:f3:0d:65:cc:97:3c:ab:f3:97:02:
d7:52:1d:bc:36:2b:87:8e:cf:98:38:cd:52:a5:f1:e2:79:8a:
5d:e4:17:5a:88:c0:9b:13:15:ec:78:bd:56:b3:25:f2:53:5b:
f2:2c:7a:3f:23:16:a9:76:fe:0e:33:f2:eb:67:30:29:6c:99:
6f:89:bd:30:b0:cf:08:f8:8b:54:9f:bd:83:9d:82:e4:39:08:
4e:4d:84:9b:0f:97:fc:11:13:c3:93:46:15:77:c8:26:80:c4:
94:0e:d5:7a:d2:c8:93:c2:f5:3a:ca:ad:75:4d:d8:36:09:ce:
1a:d4:f4:40:ca:1d:25:fb:a5:9b:74:5c:b3:76:b1:29:bc:a3:
04:a1:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:47 2025 by rpki-client