Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AZ432isQDPlE5mD5wQkuLLQD-IE.roa
File: AZ432isQDPlE5mD5wQkuLLQD-IE.roa (raw, json)
Hash identifier: sLt7EJ0yiYupcMCDGinx+vMOaS04FKpJNWGq9D7MzSE=
Subject key identifier: 01:9E:37:DA:2B:10:0C:F9:44:E6:60:F9:C1:09:2E:2C:B4:03:F8:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902201FECC9B3776CB0A55B30CFE910726
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AZ432isQDPlE5mD5wQkuLLQD-IE.roa
Signing time: Sun 16 Jun 2024 17:04:34 +0000
ROA not before: Sun 16 Jun 2024 17:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:2201:f1e6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:22:01:fe:cc:9b:37:76:cb:0a:55:b3:0c:fe:91:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 17:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019e37da2b100cf944e660f9c1092e2cb403f881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:75:f7:c7:2c:9d:e6:f6:d2:56:00:b6:2b:
19:d6:98:27:d2:6d:47:03:dc:36:0f:5f:00:86:4d:
e6:20:f5:53:a1:0c:99:1b:ba:c7:7e:1c:af:03:34:
c1:28:88:ac:96:c1:d7:dc:b2:11:af:19:f0:9f:c6:
bf:87:79:dd:61:69:97:2d:15:d4:01:05:27:e6:71:
01:5b:75:16:f6:00:93:2c:73:99:4a:60:31:f5:ab:
2c:ac:2d:78:fa:80:42:41:07:1a:1c:60:fd:d5:34:
23:98:2b:34:cf:43:30:52:b4:28:e7:5f:52:0b:d2:
d4:2d:fa:7f:78:f6:27:ae:6b:58:8d:7c:82:ed:26:
bc:27:98:9c:64:96:95:15:f5:66:ab:2c:8f:20:6d:
9c:2c:0e:53:7b:3e:90:75:f7:6c:60:83:78:c0:65:
71:de:08:ce:2a:82:4c:7b:3e:44:69:67:2b:ca:63:
c5:e3:ee:03:ca:59:34:bd:b7:96:e3:c2:c0:da:b5:
29:f2:27:00:e1:81:ea:6c:49:44:31:1e:fe:c0:ae:
ce:b0:d0:f4:87:4a:78:bd:68:c4:87:c9:3f:6d:06:
58:08:e9:77:74:24:6f:f8:aa:fb:15:3a:8c:56:43:
7d:c1:21:49:bd:aa:6b:5f:00:80:71:f8:f0:71:86:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:37:DA:2B:10:0C:F9:44:E6:60:F9:C1:09:2E:2C:B4:03:F8:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AZ432isQDPlE5mD5wQkuLLQD-IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:31:0f:b0:71:85:31:07:69:82:99:4b:8e:f4:71:99:dd:f5:
23:2b:e5:3a:12:1a:e1:88:ad:0a:93:c7:ad:eb:83:99:ec:9e:
78:70:0e:f7:4b:fc:08:3c:3b:08:64:ca:16:a3:55:ec:15:32:
f0:20:b1:f0:3e:14:6a:29:0f:ea:a7:e4:20:ad:02:f2:e2:40:
75:f7:80:72:2e:2c:56:09:9f:c1:f7:93:4f:61:1b:b6:3f:9f:
ee:61:d3:13:73:39:1c:fb:7f:ba:ea:8a:2a:0b:ef:48:ea:42:
01:9f:bf:7d:82:90:fb:1e:82:45:cd:f0:b8:44:81:6e:3a:49:
6b:67:43:3d:9f:26:76:85:f1:61:2f:bc:e6:8e:99:8d:28:ff:
95:46:09:ba:ca:64:5e:d8:a3:7b:5f:43:d4:70:7b:b6:f3:fa:
da:63:62:93:19:2e:38:5e:5d:e3:d6:43:47:c0:02:9c:30:2d:
de:46:d3:77:94:8a:e2:a8:a1:9b:78:9c:fb:51:a3:46:a0:fd:
9e:7e:12:14:b0:c3:70:ff:ef:ad:7d:4f:9c:82:d8:10:12:70:
3a:19:32:bc:22:94:20:ee:16:f2:5f:d7:42:9b:d0:53:5b:f2:
73:10:92:cc:a6:07:4b:b3:b6:d8:d1:b7:16:7b:07:b4:fb:39:
ab:cb:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:22:07 2025 by rpki-client