Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EL1Mv0MQGcp-QEyURpP7eUxd00g.roa
File: EL1Mv0MQGcp-QEyURpP7eUxd00g.roa (raw, json)
Hash identifier: +X0OnjPEifP520aSDi8XmSf5G31IJimtpjRsrwB2YbM=
Subject key identifier: 10:BD:4C:BF:43:10:19:CA:7E:40:4C:94:46:93:FB:79:4C:5D:D3:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909618ECFE19945852A02FBBE0D8A09C5B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EL1Mv0MQGcp-QEyURpP7eUxd00g.roa
Signing time: Tue 09 Jul 2024 06:05:34 +0000
ROA not before: Tue 09 Jul 2024 06:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:9618:23b1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:18:ec:fe:19:94:58:52:a0:2f:bb:e0:d8:a0:9c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 9 06:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10bd4cbf431019ca7e404c944693fb794c5dd348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:2f:9e:44:75:91:ac:93:e5:e0:8c:9d:e4:
d0:cb:67:e1:c8:81:f4:ec:b9:08:d7:79:08:8f:14:
b3:24:50:e7:ec:18:8a:25:fe:cf:97:b3:fa:af:ea:
06:41:07:15:43:ea:d7:f8:7e:08:4a:39:8b:e3:9e:
98:94:72:e1:2b:72:f5:85:03:c1:76:43:1c:ab:7a:
1c:03:0a:4f:18:d9:36:20:a4:c4:51:e7:a0:61:1c:
43:55:8e:1b:d2:91:62:26:80:d1:8d:b6:3f:8d:3b:
02:58:7e:0a:61:3c:f3:0e:64:7c:13:cb:ac:36:ff:
cb:8a:2d:f1:43:cf:19:bd:14:2e:dd:21:be:e1:c3:
63:de:1b:be:e1:c6:3e:e7:13:a7:b1:0e:95:08:43:
60:24:f7:89:e1:59:cd:ae:dd:ea:83:c3:66:2c:34:
df:f6:42:3b:7b:ed:17:fd:11:3c:48:a8:48:91:17:
55:06:38:35:f8:f3:fc:93:e2:92:a7:6b:a7:18:77:
3b:21:11:98:2a:aa:3f:62:a1:49:5e:5a:06:f5:00:
ce:0f:2a:bf:75:44:86:36:0a:6b:2e:5e:9e:b3:76:
82:f6:de:53:80:9c:b0:5d:42:48:a5:30:2d:ae:43:
da:3f:34:85:06:19:37:aa:a7:9a:a6:8f:36:a5:03:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:4C:BF:43:10:19:CA:7E:40:4C:94:46:93:FB:79:4C:5D:D3:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EL1Mv0MQGcp-QEyURpP7eUxd00g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:a2:88:bf:57:cc:5c:3e:4b:c1:f7:8c:bd:51:5c:98:6d:a0:
f4:de:9f:b6:c4:a4:15:22:f2:04:86:bd:2e:58:95:ea:0d:51:
4f:78:fe:cd:61:00:6b:fc:6b:0e:56:c8:56:64:d5:83:f9:92:
92:da:47:52:8f:e8:7e:f1:ba:c5:9b:1b:fe:a2:43:e1:04:8e:
0b:4f:b6:17:a8:1f:10:d1:86:33:25:b6:b5:ea:67:25:dc:78:
6d:1e:ba:39:c7:df:0c:f9:a0:47:e6:00:20:e3:07:ca:5e:07:
f0:35:3e:4f:33:0d:5d:d8:24:5e:59:44:03:3e:c4:8d:4e:db:
fc:1c:40:30:91:6d:6a:b9:c2:36:cf:04:14:07:58:bb:dd:95:
3a:c5:08:4f:10:db:82:47:f8:b1:86:ba:ed:7f:24:53:55:93:
f2:86:6f:6a:53:e2:79:73:a0:c4:ec:e0:fa:30:6a:84:bf:eb:
79:6f:03:43:26:fb:83:7f:f6:2a:c2:26:38:be:ef:e4:64:f6:
18:2f:ee:83:58:a8:1f:a2:56:f1:1a:bf:b2:86:28:ed:20:c3:
f8:d5:cd:04:0d:8f:d5:ae:6b:e4:6a:49:f3:22:b4:9d:de:95:
b9:e3:da:10:ad:fb:13:cd:19:8e:41:a8:ab:c3:10:8c:67:0e:
8d:4a:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:12 2025 by rpki-client