Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DDFcTPN6_cqKDkEYcV4KThywbWc.roa
File: DDFcTPN6_cqKDkEYcV4KThywbWc.roa (raw, json)
Hash identifier: ld6oE7gb97D9X+0KJpKu1JVuNPDlzP346L5WOu2HAg8=
Subject key identifier: 0C:31:5C:4C:F3:7A:FD:CA:8A:0E:41:18:71:5E:0A:4E:1C:B0:6D:67
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019048A72F33DA07CEA058FADAA7B5921806
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DDFcTPN6_cqKDkEYcV4KThywbWc.roa
Signing time: Mon 24 Jun 2024 05:10:34 +0000
ROA not before: Mon 24 Jun 2024 05:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:a7:2f:33:da:07:ce:a0:58:fa:da:a7:b5:92:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 24 05:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c315c4cf37afdca8a0e4118715e0a4e1cb06d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:7f:0a:f3:34:c8:3a:45:54:d2:cf:ad:34:
1e:24:7c:2a:85:47:76:79:90:b5:83:45:ec:bd:22:
14:a3:0f:2c:52:83:c5:fd:a0:cd:d4:89:cf:e3:25:
c6:d2:c9:21:07:46:71:ed:73:09:c2:bf:0c:e1:cc:
7f:bb:ac:0d:87:03:9e:2f:e6:13:51:99:1b:7d:eb:
65:ef:2c:2d:e3:93:33:59:94:91:e4:bf:75:da:04:
04:36:85:bd:a0:bd:21:48:74:48:6f:a9:81:bf:50:
4a:5c:d2:ea:36:4a:b2:db:cb:41:7b:08:be:40:8f:
76:a9:7c:12:71:0a:9c:55:ab:6c:85:25:9f:52:a4:
51:bf:89:90:54:57:d8:13:e5:0b:6a:0d:49:26:5b:
70:b9:1f:fe:8a:ef:71:a5:69:c1:de:a9:22:6a:66:
66:1d:89:72:dd:e9:59:ca:41:46:ad:5a:ed:3e:13:
c6:6c:75:b6:32:ca:d3:c6:8e:2f:f1:1f:49:4f:9d:
af:bc:73:60:9a:f2:8d:85:a6:25:d1:47:d9:5b:d3:
f4:e5:f6:b6:1c:56:bf:0c:58:4d:86:4f:5e:6e:66:
ec:65:1a:7c:f3:e2:b3:4e:47:04:5b:a7:18:2f:b0:
e9:1b:1e:72:47:ce:ff:d9:2f:c3:4d:40:f7:8d:ea:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:5C:4C:F3:7A:FD:CA:8A:0E:41:18:71:5E:0A:4E:1C:B0:6D:67
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DDFcTPN6_cqKDkEYcV4KThywbWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:1f:d3:e0:03:32:20:c1:fd:00:d3:74:d4:cf:5f:96:99:e7:
e6:a5:93:9c:56:de:1b:d6:21:76:8c:62:38:92:6a:98:f7:5a:
37:21:e2:ec:6a:8d:91:29:24:cb:5c:87:ae:1d:0a:1d:17:48:
b4:12:a5:7c:ff:cf:92:16:1a:80:39:b8:fe:ea:6e:53:95:1c:
25:09:00:eb:ef:30:ed:90:e1:62:b4:8b:05:86:e7:56:e9:3a:
14:f7:54:76:b3:7e:77:63:a8:eb:bf:32:1b:be:f8:3b:dd:4f:
d8:3f:06:c3:ed:e7:17:ab:92:53:28:9a:07:42:9c:f8:f5:48:
fd:bd:76:07:8e:56:c1:ea:f4:a7:58:13:e7:0b:10:a5:0b:cc:
73:71:6c:59:84:f0:ed:03:13:a0:88:27:24:80:2a:5e:41:8a:
43:b9:1d:29:7d:11:a9:d4:97:b8:42:9c:e5:a5:00:e8:7d:4c:
99:1c:7d:66:e0:15:a1:62:2d:a8:c6:9d:db:7f:48:89:8f:fb:
53:54:15:2c:37:28:a8:66:e8:87:ca:ac:b3:65:b8:63:0f:f1:
3f:dc:9e:0d:fb:d2:3f:91:37:87:69:42:0b:13:ab:ca:b3:20:
6c:ef:34:62:70:7d:97:66:88:53:65:e6:c6:cb:39:19:bb:98:
7e:1f:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:04:40 2025 by rpki-client