Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AhwZXbMkKortnAMJchq3TAzC9z8.roa
File: AhwZXbMkKortnAMJchq3TAzC9z8.roa (raw, json)
Hash identifier: bOHIcdi6b5LvAoVR6B1EAt+U6pVSu9tgvqt61ESbPLw=
Subject key identifier: 02:1C:19:5D:B3:24:2A:8A:ED:9C:03:09:72:1A:B7:4C:0C:C2:F7:3F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901A18D8F409DD78B9D912463B87F5D747
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AhwZXbMkKortnAMJchq3TAzC9z8.roa
Signing time: Sat 15 Jun 2024 04:12:34 +0000
ROA not before: Sat 15 Jun 2024 04:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:18:d8:f4:09:dd:78:b9:d9:12:46:3b:87:f5:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 04:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=021c195db3242a8aed9c0309721ab74c0cc2f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:90:5e:27:e6:5d:ce:fa:a1:a4:c0:8c:c4:
73:f6:c6:5d:cf:76:1a:dc:b2:74:a9:5b:4f:56:1b:
38:07:74:48:4c:25:ec:2e:cb:37:80:a0:11:29:46:
8a:1c:df:7a:03:a8:43:89:f7:4e:27:d0:b0:fc:39:
c5:46:5f:c6:4d:f8:22:24:a8:75:38:4a:02:fd:27:
dd:de:94:62:3e:03:4e:50:44:fd:66:71:50:a2:94:
28:d3:58:0a:74:b2:b2:ee:6f:2f:4e:69:1b:34:e5:
52:e8:40:3b:a8:d5:fc:ed:7b:91:6b:d3:4d:53:60:
6f:22:b3:86:49:41:0b:e9:de:38:af:12:e8:1e:97:
f4:92:18:02:d2:e4:1d:91:d8:bf:e8:12:df:3d:94:
2c:12:32:2d:d0:23:05:95:c3:74:e2:bb:0f:36:44:
fa:a7:a0:de:05:96:e9:93:60:ac:57:9f:0f:f4:2a:
39:9a:21:1c:74:7f:bd:de:f8:1e:0a:7e:de:7b:77:
f8:92:ce:da:08:0a:36:c8:39:8c:a1:5d:78:7d:8e:
03:7e:33:5d:d9:03:40:74:b7:27:aa:7f:1f:06:6d:
30:70:16:43:2c:ea:9c:98:c7:61:c6:8f:ad:c2:8d:
2f:6d:a4:63:20:cc:88:e7:ff:6c:46:1f:a5:03:52:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:19:5D:B3:24:2A:8A:ED:9C:03:09:72:1A:B7:4C:0C:C2:F7:3F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AhwZXbMkKortnAMJchq3TAzC9z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:cc:ae:50:0d:1f:35:ab:af:aa:a8:e6:da:29:a5:f2:9d:da:
e5:45:67:1b:53:32:47:c4:b0:35:9d:8a:54:81:d0:d9:08:42:
5e:ee:57:36:3f:03:bd:6a:dd:b5:14:9b:ac:14:1c:8d:aa:26:
13:93:ff:59:54:fe:b8:0c:97:2a:d7:9d:85:88:0d:12:71:32:
1e:98:67:24:26:3f:59:14:01:93:22:49:b4:d2:bd:25:37:f1:
66:c3:43:50:d5:b1:67:50:d9:26:94:f7:bc:59:c7:28:08:61:
49:9f:53:32:15:b2:b4:b9:05:57:42:ea:fb:61:67:8d:e6:3d:
08:36:9b:ef:e1:c3:b9:da:2d:34:44:3a:4d:9e:36:f3:0f:67:
07:cc:92:40:fd:15:35:96:ec:80:36:f6:8e:5c:59:fb:7e:97:
ae:42:8d:e0:00:2d:0a:99:bc:cd:d0:a2:23:e8:94:a7:c0:1c:
51:c4:7a:2b:50:6c:be:d4:1c:0a:b5:e8:45:f3:5a:14:9e:24:
47:a4:af:0d:44:2b:fb:e3:e7:af:73:bc:c4:9c:b7:8f:b2:19:
5e:73:4f:50:ac:2b:ab:1a:05:34:8c:5f:4b:b0:2f:34:cd:ba:
95:a7:29:ce:1b:52:85:4e:17:39:73:d6:92:1a:d7:16:cc:78:
53:b0:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:08 2025 by rpki-client