Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CiCzgO2IJ7NCRiJYtvDlL_RCcNk.roa
File: CiCzgO2IJ7NCRiJYtvDlL_RCcNk.roa (raw, json)
Hash identifier: KFlwDu1Ke3OlsgIUDMskADbN7bSraJbfgvS1vXb/T9Q=
Subject key identifier: 0A:20:B3:80:ED:88:27:B3:42:46:22:58:B6:F0:E5:2F:F4:42:70:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190231BFA75C6266828A186D16B1361A0C3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CiCzgO2IJ7NCRiJYtvDlL_RCcNk.roa
Signing time: Sun 16 Jun 2024 22:12:34 +0000
ROA not before: Sun 16 Jun 2024 22:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:1b:fa:75:c6:26:68:28:a1:86:d1:6b:13:61:a0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 22:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a20b380ed8827b342462258b6f0e52ff44270d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:de:37:39:79:2c:05:8f:36:03:86:79:d9:
9b:1f:48:5a:07:97:af:48:6b:00:0a:0b:d7:be:7a:
62:30:46:84:01:0e:87:67:7c:ed:94:90:9f:d9:62:
d2:07:1a:25:9a:1f:3f:b9:16:ec:95:65:47:44:57:
b4:8c:c0:59:71:9b:08:d2:b8:00:73:0d:a7:e0:47:
18:0f:52:0b:35:8f:29:82:ad:4d:ac:5f:99:b3:f2:
b9:c9:e8:ac:f0:69:1e:e1:86:3d:6a:22:42:84:ad:
f9:20:3b:f0:fa:ff:a5:05:60:ab:d4:fc:f5:ff:be:
72:a4:7e:29:41:0c:45:fc:73:99:97:78:c3:ac:5c:
74:d6:4a:ed:ee:75:c5:72:70:d6:5f:cd:a3:fc:e9:
9e:74:ee:ee:87:fc:ec:a8:9e:dd:a4:d7:62:04:c7:
2d:6c:9e:c0:44:05:09:c4:a8:fc:da:03:6f:0e:c1:
4f:68:75:5e:7c:73:40:36:5f:de:fa:c6:7b:b9:e4:
d7:c0:f2:26:ef:a3:bf:7a:23:b1:e6:5d:db:e5:e2:
39:bf:d1:46:d9:29:fd:52:60:80:7e:73:24:ee:3e:
92:cd:f8:a3:39:47:18:25:83:85:df:c7:49:e4:d5:
e3:81:15:bc:cc:e2:db:d4:ad:67:80:4a:09:e7:7b:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:B3:80:ED:88:27:B3:42:46:22:58:B6:F0:E5:2F:F4:42:70:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CiCzgO2IJ7NCRiJYtvDlL_RCcNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:85:41:74:0c:3b:6c:a5:b7:36:98:0b:9c:13:40:08:3d:3f:
4b:79:43:d8:e2:5c:de:63:0f:c8:44:45:eb:17:b5:21:69:a7:
d4:1d:da:ce:76:96:04:3c:53:75:1f:2d:85:93:43:69:32:db:
0d:9c:54:9f:a3:22:43:5c:3a:41:62:dc:9b:c7:46:52:b6:36:
66:08:c1:6a:2e:29:8e:06:3a:97:f9:34:50:f0:7a:51:6d:7c:
15:62:3a:22:40:97:29:17:16:61:fd:01:ba:c2:4f:45:11:7f:
ca:86:eb:26:c0:e6:4a:37:11:e0:4b:97:ba:76:18:d2:02:37:
80:f9:1d:6b:0f:50:b6:8e:a4:d1:b7:92:1f:2c:8c:e7:4c:23:
19:f8:f1:cc:2d:06:e9:5f:8a:7d:79:8f:a2:a7:c1:f1:79:f0:
86:e4:3d:00:1d:ed:81:c1:9e:9b:de:e5:49:54:d8:9f:43:fe:
4f:98:66:7c:8f:07:d5:1a:74:fa:90:7f:c9:72:e0:01:fd:7f:
0c:5e:51:2d:8e:ac:e6:09:5a:44:ce:87:d2:65:6d:5f:da:c7:
36:7a:0d:01:6d:3d:ee:27:f4:b8:01:7f:f6:d6:58:93:65:5a:
5b:48:e3:d4:a8:1d:92:a2:a0:4f:9b:7c:82:c4:fa:f7:7d:46:
97:05:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:52 2025 by rpki-client