Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AD7RhhFoHih3duLTXVuXzSzcRHk.roa
File: AD7RhhFoHih3duLTXVuXzSzcRHk.roa (raw, json)
Hash identifier: ZVyC/qL+49yYRoZ2cEBsO3AP1qnZYPFsV41AoiCzIeQ=
Subject key identifier: 00:3E:D1:86:11:68:1E:28:77:76:E2:D3:5D:5B:97:CD:2C:DC:44:79
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908B2CAA7CEDC5EAAB3596B56C142F0D26
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AD7RhhFoHih3duLTXVuXzSzcRHk.roa
Signing time: Sun 07 Jul 2024 03:11:18 +0000
ROA not before: Sun 07 Jul 2024 03:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8b:2c:aa:7c:ed:c5:ea:ab:35:96:b5:6c:14:2f:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 03:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=003ed18611681e287776e2d35d5b97cd2cdc4479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:06:5a:8f:f6:04:26:a7:18:98:a3:19:ac:
48:a0:c1:42:1e:fe:21:f2:89:d1:4a:db:8e:85:42:
5f:66:2a:14:f7:44:49:d4:a1:ef:97:c9:5e:f5:20:
dc:62:cb:0b:19:ea:f5:59:99:58:34:de:ee:a5:9e:
3c:5a:ff:61:28:20:4f:2b:4b:af:69:36:10:25:40:
ed:f2:75:75:05:ee:24:af:cd:6d:a4:0a:e5:c8:7b:
92:fe:cd:6d:26:4b:02:27:90:87:8f:67:fb:e0:4d:
28:96:af:4b:4a:cf:cc:33:8b:1a:10:34:5e:2f:4a:
06:18:70:ad:99:f3:6c:6e:9a:d7:0f:3a:a7:b9:9c:
ee:ee:d9:11:e0:d4:86:cb:8f:9a:f0:4e:b8:78:db:
b1:5d:e0:a4:0b:cd:d9:d9:2b:ba:0b:74:33:13:d1:
d1:32:33:62:e8:8e:95:e4:9d:bf:30:0d:d2:26:f5:
b7:ce:d5:40:86:1d:5c:df:3e:7f:2c:8c:7a:a7:56:
93:10:00:4b:f3:9d:9a:c8:82:35:4b:1f:30:91:86:
18:18:dd:dd:25:3c:8a:17:bd:b2:91:db:f7:10:16:
10:8d:3e:6c:99:8d:05:8d:70:af:81:b1:c8:f2:16:
0e:ef:15:7c:6f:3b:f2:b3:d6:a0:69:b6:b0:35:e2:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:D1:86:11:68:1E:28:77:76:E2:D3:5D:5B:97:CD:2C:DC:44:79
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AD7RhhFoHih3duLTXVuXzSzcRHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:35:58:f4:3d:98:5a:8a:ba:e5:66:b2:7f:85:c7:42:08:d8:
5c:23:03:cd:04:c3:7e:4d:07:a6:77:af:8c:21:ba:62:21:9d:
d9:1c:b7:e4:75:2e:b4:0a:ec:84:2e:4f:8d:8a:7c:05:06:2b:
5b:1f:91:fc:d1:d4:47:a8:db:17:94:fe:ba:20:5b:72:bb:22:
7e:24:7a:d9:f7:e5:fd:03:0f:f1:c7:1c:63:43:18:b0:24:bb:
7d:28:0a:94:1a:ab:f9:4a:f7:bb:02:78:d9:37:53:81:95:79:
12:05:4f:01:83:31:1e:a2:b3:c4:03:3f:9f:09:a1:3a:0b:3d:
1e:85:ea:96:f4:e5:b9:76:cc:54:d6:2b:1a:7e:c1:b8:0f:5e:
0f:70:bb:c2:25:02:a2:69:73:45:56:b1:63:a5:44:93:07:d9:
4d:b6:2b:3b:ca:51:69:2d:4a:a9:0b:28:76:fb:3a:7f:c9:c6:
dc:f5:7f:ee:c2:15:18:82:66:b8:b9:9a:66:95:19:ef:3d:69:
90:6f:3c:cb:12:2a:36:3b:de:49:b3:0c:ea:86:c5:08:76:82:
74:90:0e:94:ee:8a:b0:39:8e:ad:5b:e3:e0:82:9a:dc:6f:e3:
35:7e:51:40:45:ae:15:60:fc:09:05:4f:67:f5:2a:33:d7:1a:
8e:bc:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:46:03 2025 by rpki-client