Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BakotPHQt0qHglwQ2gtLoyeJHtg.roa
File: BakotPHQt0qHglwQ2gtLoyeJHtg.roa (raw, json)
Hash identifier: EHZoxzHHtRWL0C6HPGJpyzsRHScMK28kq/xG8KOuL2w=
Subject key identifier: 05:A9:28:B4:F1:D0:B7:4A:87:82:5C:10:DA:0B:4B:A3:27:89:1E:D8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190163C14212823393F4048AA6D7FB3D9C8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BakotPHQt0qHglwQ2gtLoyeJHtg.roa
Signing time: Fri 14 Jun 2024 10:12:34 +0000
ROA not before: Fri 14 Jun 2024 10:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:3c:14:21:28:23:39:3f:40:48:aa:6d:7f:b3:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 14 10:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a928b4f1d0b74a87825c10da0b4ba327891ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:d4:bc:18:d2:0c:d7:61:1c:c1:c5:08:98:
bd:33:1c:30:4b:1a:94:53:24:15:c8:43:ff:66:6a:
9a:59:64:f2:c0:c0:cc:fb:fb:14:14:71:14:ac:03:
40:0f:fa:3d:50:14:44:a1:09:b6:77:37:97:43:24:
13:3e:f9:26:ff:2f:36:fe:b4:b9:84:2c:08:9a:44:
86:a6:3e:be:fb:08:ef:02:2d:e6:4d:a1:1e:74:eb:
e1:2e:aa:b3:c0:1c:e8:f8:01:02:de:34:ac:b3:95:
be:9c:ce:e6:62:6d:ae:4c:3c:66:aa:49:e7:ba:84:
33:be:5c:d7:f7:3d:b7:82:04:90:25:84:fd:a2:a1:
86:4b:2f:38:05:eb:58:cd:b7:c7:df:1e:6e:59:70:
93:94:5e:d7:a3:ad:57:95:a6:03:cd:54:fe:b2:a6:
19:9c:e0:ae:c8:06:1e:12:e9:53:c3:ba:2e:20:a6:
de:02:2c:1c:e0:9c:fd:a3:d2:fa:f3:92:ca:bd:0f:
74:c5:08:94:d4:e3:c9:04:e9:63:0f:35:b3:fe:9d:
94:6a:d2:4e:f2:d0:f7:ba:bd:72:39:d8:9b:26:01:
41:85:4d:d4:79:0f:e4:ce:98:d3:4a:a1:52:dc:61:
f5:b5:47:09:38:33:c5:da:e2:f1:ca:8d:30:76:68:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:28:B4:F1:D0:B7:4A:87:82:5C:10:DA:0B:4B:A3:27:89:1E:D8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BakotPHQt0qHglwQ2gtLoyeJHtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:e7:27:1e:ad:c4:4f:2e:bb:e7:7c:00:f3:1d:1b:dd:e8:4e:
0d:1c:4f:50:53:cf:7d:79:97:21:82:ad:c9:40:c8:14:78:a7:
50:15:45:c9:c4:25:df:99:48:b6:e3:52:82:ed:d9:f4:90:4a:
ad:bd:db:c4:b7:52:b5:0c:f1:dd:c1:2f:ce:5d:82:fc:8b:f4:
16:b5:e8:cd:13:53:d4:e9:d8:c8:1f:40:58:14:9d:29:f3:e0:
61:71:20:8b:2e:1d:ef:75:a5:1c:39:df:e4:ee:70:e3:5b:a9:
80:f4:ad:87:d8:6d:e6:33:a4:cc:8d:6f:eb:4f:8e:80:eb:34:
d0:75:20:bd:a3:db:f4:b6:7b:04:96:fa:35:46:03:62:9c:bf:
f8:26:c4:17:e9:34:f4:5e:42:24:0e:3a:70:96:96:d7:ed:64:
f2:1e:a8:58:95:ea:0b:20:6f:5e:12:e6:cc:78:a1:2e:25:ce:
81:ba:c5:eb:d2:4c:d3:e7:79:56:d5:50:8d:3d:60:ac:f0:36:
1e:f4:5d:1d:be:1e:53:95:72:4f:8b:69:0b:5b:7f:2b:9a:26:
57:8c:81:f5:0c:d1:f6:09:9c:77:5c:97:15:66:97:5d:32:0d:
bb:35:55:f8:d6:c0:66:3e:ab:a3:f8:8b:1e:d4:14:22:ba:39:
11:d0:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:22 2025 by rpki-client