Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/781XmDDdp0qWuAjfi79fnQsVjn8.roa
File: 781XmDDdp0qWuAjfi79fnQsVjn8.roa (raw, json)
Hash identifier: CnIBkKnJ+b31HNYmKJ5h7Y0SKuA/PgjJ9/k2O025uT4=
Subject key identifier: EF:CD:57:98:30:DD:A7:4A:96:B8:08:DF:8B:BF:5F:9D:0B:15:8E:7F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019084804A2DC1DE5BD7DB42BF332B40BDA9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/781XmDDdp0qWuAjfi79fnQsVjn8.roa
Signing time: Fri 05 Jul 2024 20:05:18 +0000
ROA not before: Fri 05 Jul 2024 20:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:847f:8535/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:84:80:4a:2d:c1:de:5b:d7:db:42:bf:33:2b:40:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 20:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcd579830dda74a96b808df8bbf5f9d0b158e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:e7:57:ff:c9:d2:35:31:1f:a5:e5:ab:bf:
99:ae:91:f3:d5:50:6d:81:b2:fc:23:c9:02:ea:a2:
eb:66:69:98:89:46:9a:a2:93:61:75:a4:bf:79:cf:
6f:b6:b1:90:b9:42:16:6d:fb:fc:cc:b7:87:6d:36:
81:3f:75:73:ac:c0:e5:a6:be:09:e7:9e:92:37:b0:
6e:1a:1b:74:f7:47:2d:e1:46:12:13:56:c8:7a:20:
34:fb:6e:5d:9d:7d:27:c8:3c:af:d1:60:f3:3d:72:
20:3e:03:15:bd:7d:e8:67:fe:93:5c:7a:d1:7c:21:
e0:f1:39:ac:20:67:7f:eb:4e:a9:c4:55:3d:0d:21:
27:61:a1:68:5f:ee:33:d3:c9:fd:4d:d6:c2:64:18:
f4:d1:cf:7d:7b:0b:f6:b3:68:8f:4c:f9:ab:a9:46:
1e:1b:4b:f1:d6:f9:b5:71:09:d3:e5:a8:62:bf:a6:
c4:35:21:38:1a:b3:fb:3c:c3:21:07:7b:0c:e0:37:
52:b5:08:39:41:9b:d2:95:12:ca:60:0b:1f:f8:bb:
64:5a:4c:4b:76:c8:44:2d:98:33:ed:29:f8:9f:4a:
4b:3f:dd:18:74:7d:2d:5e:cf:94:26:18:d1:f9:31:
1a:4c:21:4a:7a:ef:d0:40:24:e1:30:91:2f:86:cd:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:57:98:30:DD:A7:4A:96:B8:08:DF:8B:BF:5F:9D:0B:15:8E:7F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/781XmDDdp0qWuAjfi79fnQsVjn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:d4:35:48:63:63:dd:47:18:3e:63:47:0f:72:ab:fd:43:06:
6b:4f:45:1f:f6:75:40:9f:bd:0e:ac:ef:7f:72:3f:29:57:fd:
b9:01:99:12:97:29:7b:0d:7f:d8:cf:07:27:ec:fb:33:bd:98:
16:94:c9:38:d7:95:6e:5b:96:f2:13:42:bb:c7:ff:dd:71:95:
9f:80:b9:36:30:62:c4:a5:fe:8e:76:8b:e1:a0:43:0d:f8:b4:
95:76:33:be:2b:74:2e:1e:b3:ce:ae:ac:b8:63:97:68:44:82:
3b:96:67:d4:53:2e:c8:4e:1a:9d:49:b0:a0:d7:05:e7:28:22:
ef:72:5f:9b:03:f0:23:82:14:70:30:58:5c:a7:05:8b:e0:ef:
c9:c6:59:56:c8:5c:a2:16:36:3e:1b:52:02:b0:15:2a:38:52:
93:6c:18:b4:f7:0b:b2:59:42:2b:da:38:fa:f2:b1:51:1a:ef:
5b:58:5c:ae:0a:fa:c1:fd:f5:86:c1:3a:0a:57:84:a8:c9:9e:
b1:fa:52:68:17:ce:8a:ee:ce:74:35:f7:2c:94:00:8b:f7:5d:
c4:a7:95:24:38:33:3a:94:5b:80:92:b5:2b:16:e0:4e:63:8d:
b3:31:79:24:a1:68:54:a8:c9:72:7e:1b:b6:6a:2b:ed:77:12:
43:f3:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:52:36 2025 by rpki-client