Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8YqCDSXUnBJ-IWBhAnVGEwm0_-0.roa
File: 8YqCDSXUnBJ-IWBhAnVGEwm0_-0.roa (raw, json)
Hash identifier: 07/pbvYKA/F/U0BDRh8xswvDC0pS9jb+du5oyz7VNVU=
Subject key identifier: F1:8A:82:0D:25:D4:9C:12:7E:21:60:61:02:75:46:13:09:B4:FF:ED
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019078EE8FB4167DA70E8400D9DD5E389FE3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8YqCDSXUnBJ-IWBhAnVGEwm0_-0.roa
Signing time: Wed 03 Jul 2024 14:10:18 +0000
ROA not before: Wed 03 Jul 2024 14:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:ee:8f:b4:16:7d:a7:0e:84:00:d9:dd:5e:38:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 3 14:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f18a820d25d49c127e2160610275461309b4ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:8d:f0:58:9c:53:d0:33:2d:ff:7c:1b:d3:
67:ea:b4:bd:98:ca:67:48:08:9b:21:11:e2:f6:03:
85:4a:e5:25:c4:89:f1:c2:77:b8:3d:c0:df:52:24:
41:3d:fa:6f:57:64:e1:34:de:43:78:38:38:01:9a:
df:ee:37:e0:84:b9:9a:7b:9e:70:73:d2:bc:97:86:
19:dc:ca:6f:75:c9:69:44:b7:76:de:5a:c1:7a:0b:
78:05:a0:a7:4b:4d:fc:13:dd:7b:e9:17:0a:a3:04:
bc:16:90:12:66:5a:95:d7:6a:61:6d:b8:f3:93:48:
99:3f:35:15:ff:db:5a:14:c8:7b:2e:27:9e:5d:96:
31:0f:2b:57:02:27:32:24:13:61:a4:25:67:fd:ea:
ca:76:a7:d4:be:e4:b8:69:55:d1:df:bd:bf:22:5e:
6d:2d:42:57:b2:d4:e4:5e:f1:13:e6:19:60:ed:da:
16:df:19:b0:9b:c9:65:d7:f1:94:a7:78:f1:ce:75:
7a:c7:93:af:1a:93:66:67:82:e9:69:5b:ce:63:43:
36:da:c2:a1:ec:cc:a9:b1:03:43:1c:c8:e9:4c:00:
34:de:d3:cc:19:bc:9b:80:d9:07:a2:0f:1e:97:08:
62:9c:19:6a:35:1d:99:de:b2:e1:57:ca:93:76:26:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:82:0D:25:D4:9C:12:7E:21:60:61:02:75:46:13:09:B4:FF:ED
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8YqCDSXUnBJ-IWBhAnVGEwm0_-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:8c:7a:23:fd:02:44:a0:0d:74:c6:98:f7:9e:00:12:15:19:
d1:a0:e4:e8:6d:13:fe:51:71:94:2b:d0:aa:42:a2:84:2f:35:
3f:47:78:3d:24:f7:c1:04:43:76:08:c5:18:68:60:d5:0e:8a:
9a:51:c7:15:d5:88:d2:97:72:e1:96:61:b4:a0:2d:2d:a7:ff:
93:a1:b1:e8:87:09:9f:e7:b1:5c:35:40:13:13:4d:43:13:35:
b9:4a:e8:04:fd:43:0c:43:79:db:78:33:3b:b9:bc:85:0c:b7:
ff:b8:2b:e8:e6:a7:6a:01:37:fd:ac:fa:5c:ed:6b:0b:21:b0:
91:64:13:cf:01:11:23:c3:0a:7b:4d:66:4e:9d:fa:fe:90:1a:
c0:23:57:fd:0b:d2:80:b4:df:05:27:99:26:ef:08:28:13:23:
f4:b9:94:8f:b8:b7:89:b0:e3:94:bb:90:da:65:89:e9:df:c0:
65:83:33:91:e4:da:70:74:91:cb:c9:d4:d1:53:e8:ba:61:b0:
dc:53:e1:6c:13:be:08:9c:d6:79:ad:ec:2f:83:bf:86:34:0c:
1c:5a:71:f6:e1:9d:13:8f:03:a0:0b:db:66:8d:ce:5e:70:49:
0f:d2:e2:dc:3c:59:1e:9a:af:dd:49:5f:27:1a:7a:4b:e5:75:
08:a4:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:01:27 2025 by rpki-client