Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/81vBLDgX-7yOCWj92vyLQpvIixw.roa
File: 81vBLDgX-7yOCWj92vyLQpvIixw.roa (raw, json)
Hash identifier: h31ED03ZcfaVOTm1PdXleK01nVDcPv3swbrgU5OsvhA=
Subject key identifier: F3:5B:C1:2C:38:17:FB:BC:8E:09:68:FD:DA:FC:8B:42:9B:C8:8B:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCF359A1B0E1021A2A541F01F77003F27
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/81vBLDgX-7yOCWj92vyLQpvIixw.roa
Signing time: Fri 31 May 2024 15:12:27 +0000
ROA not before: Fri 31 May 2024 15:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:35:9a:1b:0e:10:21:a2:a5:41:f0:1f:77:00:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 31 15:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35bc12c3817fbbc8e0968fddafc8b429bc88b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:6d:63:df:bc:3d:43:52:35:c9:9e:ad:26:
92:2c:bd:5f:87:1e:f8:a1:2e:25:47:53:79:d2:ba:
67:2a:43:8c:45:06:cc:d9:3a:05:a2:3b:c4:ac:44:
f5:0a:67:2e:d4:2f:0e:f1:40:60:81:50:6a:04:e3:
10:f6:e0:99:00:ac:d0:89:2c:15:46:4b:02:ce:75:
63:86:85:50:d7:00:a5:0b:f2:a5:5d:da:26:28:75:
5c:de:3b:7c:46:8c:41:2b:35:00:75:2d:42:b2:02:
aa:43:3e:84:93:73:a7:cb:bd:c4:ed:51:13:05:69:
ec:43:15:9e:f7:39:be:47:16:2d:30:85:54:70:bf:
45:b8:7c:bb:94:da:73:39:8a:d5:d5:d7:74:5a:4b:
8c:57:1d:cb:59:16:33:00:ab:78:0f:c4:89:87:27:
3c:c8:47:d7:fc:ab:6e:83:f6:81:2d:5f:2e:76:c8:
88:36:f2:4a:9d:d9:fc:cc:96:a5:4b:bf:db:6b:79:
df:ae:b8:00:ab:b0:d7:3c:a5:0b:6f:9f:a6:6c:1c:
61:55:79:2e:d0:4c:58:1b:92:1a:ca:0f:62:28:15:
e9:fc:57:df:9c:f8:61:77:a3:45:67:d1:12:5d:f0:
59:7c:5f:cb:f5:d7:99:80:8b:18:d1:9a:07:66:b3:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:C1:2C:38:17:FB:BC:8E:09:68:FD:DA:FC:8B:42:9B:C8:8B:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/81vBLDgX-7yOCWj92vyLQpvIixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:3e:fd:bd:97:c7:72:7c:ad:c8:67:10:90:0a:80:ce:a2:a5:
89:ad:0b:37:a3:26:5f:45:35:41:ae:f7:96:cd:65:20:aa:e9:
1b:e4:31:85:f1:be:fd:96:2e:51:cc:7b:3c:56:b2:ac:96:52:
8e:2c:90:fc:49:1e:c0:1c:2f:23:4f:e2:b3:4f:12:a5:a8:6a:
a1:2f:d1:15:25:e8:47:77:a5:95:62:56:57:7c:4d:8c:52:e6:
05:bb:bb:16:8d:aa:3f:5d:07:98:75:c1:4b:f2:34:5a:41:a9:
7e:0e:5d:c1:e6:8a:10:08:75:d0:d2:0b:7b:7d:f8:98:08:10:
91:8a:8c:8f:04:5e:d3:d8:bb:32:03:e1:9f:da:62:0e:c1:fb:
05:d1:b0:55:91:26:24:4e:d6:25:d4:8d:3d:17:93:e5:23:5e:
d9:63:15:6d:21:cd:3c:a7:35:42:bd:9f:74:65:52:7f:89:c1:
07:b8:50:34:a9:c6:ba:b4:bf:39:e8:a2:9a:35:9f:e1:29:b8:
81:30:4b:c4:ec:a8:41:50:79:f7:3c:80:8d:48:11:de:d0:77:
37:02:d4:b0:18:d3:fc:89:61:0e:1a:38:d8:70:ff:9f:c7:df:
42:fd:98:cc:88:b1:2f:72:de:d5:0b:03:3e:ec:30:8f:d9:a0:
29:07:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:35:54 2025 by rpki-client