Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F6-Sy3oivo_HhRdSoDP4Xaqw1nE.roa
File: F6-Sy3oivo_HhRdSoDP4Xaqw1nE.roa (raw, json)
Hash identifier: oD65f0uCIGnnTCg3eySEAwfomxDG+Ewproqg8LkfVCo=
Subject key identifier: 17:AF:92:CB:7A:22:BE:8F:C7:85:17:52:A0:33:F8:5D:AA:B0:D6:71
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908115F6428A2F638B122E9AF1013982D5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F6-Sy3oivo_HhRdSoDP4Xaqw1nE.roa
Signing time: Fri 05 Jul 2024 04:10:18 +0000
ROA not before: Fri 05 Jul 2024 04:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:15:f6:42:8a:2f:63:8b:12:2e:9a:f1:01:39:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 04:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17af92cb7a22be8fc7851752a033f85daab0d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:f4:69:77:0f:c4:f1:42:1f:67:68:64:11:
2a:35:de:04:95:69:12:bd:21:00:e4:6d:14:fa:1a:
a2:03:5b:22:e8:a2:99:ce:8d:73:0d:bc:91:9e:b5:
c5:d9:22:a5:e3:88:f7:fa:92:9c:40:a6:75:51:8d:
c9:83:64:b9:11:24:99:be:43:5c:4b:2b:64:08:39:
d3:4d:24:62:6b:f6:7c:1c:c9:28:83:1d:f5:16:83:
de:a9:84:69:cc:30:c1:7d:8a:7d:ad:1c:f7:ee:6a:
72:a6:61:dd:23:bc:b9:b5:1f:29:23:9c:62:dc:97:
55:8d:24:73:db:1e:7c:63:16:f7:b8:59:d8:1c:26:
9f:96:79:5c:56:3a:d4:63:9b:0a:6b:db:c2:e4:ca:
7b:88:ec:a8:d2:f9:04:cf:56:a9:32:66:d1:b8:3a:
1c:4e:e1:69:1c:81:70:9d:a2:cc:ba:ea:70:5c:db:
ff:df:7c:e3:a8:5a:11:7a:41:a7:d1:dc:d8:fb:62:
c6:b5:aa:b1:e8:0a:91:fc:47:d5:29:25:ad:6a:d1:
c4:1e:fd:8c:c1:fa:ee:58:eb:bd:88:19:a4:bb:f6:
06:bc:d3:43:ae:8f:1f:48:9b:06:b7:80:6e:1e:5c:
18:a2:59:86:27:03:08:c9:bb:d2:50:a6:bf:49:e0:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:92:CB:7A:22:BE:8F:C7:85:17:52:A0:33:F8:5D:AA:B0:D6:71
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F6-Sy3oivo_HhRdSoDP4Xaqw1nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e0:c1:a1:2f:5c:97:4e:65:cc:d2:6b:0b:91:06:fb:0e:67:
dd:11:57:ae:51:d7:83:31:93:80:20:54:ed:52:bd:b5:56:30:
77:ef:53:93:fb:f5:e7:cb:09:1e:25:e3:8b:c0:b1:5c:d8:77:
6c:0e:c5:2e:93:f7:20:25:b8:ea:e5:9f:36:6c:90:42:55:44:
02:cb:d1:a0:c1:ac:b2:41:71:3e:f1:d7:06:0a:7d:6d:e1:41:
f5:f5:46:68:82:68:bf:76:af:d2:f8:74:1d:e8:da:cd:85:bb:
8c:a0:9d:57:04:e4:11:6d:27:ee:c4:0c:57:c9:d8:f8:b0:26:
77:7a:4d:b1:72:fe:7a:fd:94:0a:f3:e4:35:73:66:d7:a5:9b:
ad:cc:9b:a2:89:f6:29:4a:dc:c9:c3:09:61:8f:46:a2:da:eb:
87:e2:89:c3:25:79:f7:e8:6a:81:98:37:9a:78:24:ec:9f:7d:
4a:13:5c:ef:8b:2b:74:b4:68:a2:95:c5:d0:d8:bf:38:01:e3:
82:5c:9f:8d:55:55:a3:34:21:b9:a2:e9:59:88:00:3e:d6:16:
43:05:fd:72:95:c9:7b:61:de:45:19:eb:6d:5f:1e:7d:79:00:
c0:42:8a:b1:29:c5:b4:80:3a:b5:7e:78:79:9c:77:15:2b:8a:
de:f3:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:24 2025 by rpki-client