Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9Z5weuYboUr3_xOwT5peML95VBk.roa
File: 9Z5weuYboUr3_xOwT5peML95VBk.roa (raw, json)
Hash identifier: o3vVMXJJnUL5QoVG1KZ2zYk5jYiVTRqAJmEXHHtST/Y=
Subject key identifier: F5:9E:70:7A:E6:1B:A1:4A:F7:FF:13:B0:4F:9A:5E:30:BF:79:54:19
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01907D3B05BFAB633A755B0BD241C563FF5E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9Z5weuYboUr3_xOwT5peML95VBk.roa
Signing time: Thu 04 Jul 2024 10:12:18 +0000
ROA not before: Thu 04 Jul 2024 10:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:3b:05:bf:ab:63:3a:75:5b:0b:d2:41:c5:63:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 4 10:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f59e707ae61ba14af7ff13b04f9a5e30bf795419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:52:89:ad:5a:cb:64:28:74:da:23:0d:cf:
93:d2:f6:85:a8:b1:12:56:73:db:af:2a:90:f8:58:
ba:90:21:21:88:46:91:36:ca:12:f8:0a:df:0a:47:
84:ce:6f:af:2c:35:17:d5:bf:37:87:20:4d:50:58:
d5:45:09:4f:a3:34:d5:ba:94:b2:15:6d:45:21:eb:
54:45:50:e9:f8:5b:da:3e:47:e3:af:63:8c:c2:b0:
34:a4:72:23:d2:d3:ea:98:44:52:63:49:38:c6:0f:
d5:51:7a:8a:35:a3:50:e3:d8:14:49:c2:5c:46:8d:
71:d8:9a:cc:82:ee:df:a8:47:0e:4b:75:37:51:aa:
b4:b6:14:58:61:1b:d2:0c:00:2a:83:47:b1:5a:29:
1b:bf:a4:95:7a:ec:7c:bb:36:4b:c8:7c:3a:1a:d6:
a7:1a:78:4a:cd:10:52:7e:98:5e:c3:8e:a9:94:93:
0f:3a:72:a8:55:ea:fc:c9:dc:c0:f8:9b:1d:4d:7e:
b7:e6:ce:dd:95:dd:97:a8:2c:9d:1b:cd:99:3d:c7:
3b:d7:79:e0:b8:02:95:15:36:30:8b:59:3d:2c:f8:
ba:b1:22:9a:1b:77:fb:eb:cf:31:1f:9f:0a:ce:83:
bc:64:07:98:47:5f:96:e3:29:fc:44:9f:b3:17:d1:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:70:7A:E6:1B:A1:4A:F7:FF:13:B0:4F:9A:5E:30:BF:79:54:19
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9Z5weuYboUr3_xOwT5peML95VBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:5e:ce:bd:f1:83:51:fe:67:d8:ef:df:ed:f6:1a:a5:b3:bb:
d9:2d:f9:22:a8:06:67:c6:cf:fb:d6:8c:0d:7d:a5:81:e7:11:
5f:8b:c7:39:83:07:31:02:6e:67:78:89:0e:c7:2d:bb:c4:9d:
4c:74:90:29:8a:08:eb:93:e9:12:df:f0:26:eb:17:8d:08:6e:
02:bd:10:17:f7:47:d4:12:4c:4a:9e:5f:d4:5d:da:5c:00:6f:
77:5e:59:13:ad:58:80:06:c5:96:1e:93:e4:b0:92:2a:e4:4f:
a1:f4:64:2b:be:17:cd:3a:cd:07:1d:c0:39:4d:be:f9:95:8f:
f5:1f:34:1e:2f:b8:cc:59:2d:80:d3:1f:8b:31:d7:dd:23:94:
13:dd:27:d2:33:b9:dd:b0:de:71:3c:66:bb:25:20:5e:2b:b2:
d9:ef:39:1f:88:b4:82:56:29:f2:79:e9:4a:db:b8:16:98:1d:
4b:45:9e:e5:94:96:d6:82:48:0d:c9:ea:da:42:9c:c5:c0:25:
43:bc:75:6d:87:3e:3e:95:7f:22:58:f5:6b:45:df:14:98:8a:
71:f2:ed:50:c5:49:e6:29:a1:71:03:bb:3a:44:7c:d3:e2:54:
21:55:e2:a1:aa:f6:18:ec:31:2c:08:13:9c:75:eb:17:95:f0:
85:d1:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:07 2025 by rpki-client