Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrwZWiQ4iTK8g0qq2WYRIaaFzsE.roa
File: FrwZWiQ4iTK8g0qq2WYRIaaFzsE.roa (raw, json)
Hash identifier: LepXmW7DHFRuUYA1NFb47v7Zxz4dtoGc1gmZb4R4MHs=
Subject key identifier: 16:BC:19:5A:24:38:89:32:BC:83:4A:AA:D9:66:11:21:A6:85:CE:C1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AA1225E1B0DC08C31F26CB658ED153C4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrwZWiQ4iTK8g0qq2WYRIaaFzsE.roa
Signing time: Sat 13 Jul 2024 03:10:34 +0000
ROA not before: Sat 13 Jul 2024 03:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:12:25:e1:b0:dc:08:c3:1f:26:cb:65:8e:d1:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 03:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16bc195a24388932bc834aaad9661121a685cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:2d:bc:32:e0:2f:0a:69:fe:c7:91:e7:d0:
7a:e4:b3:08:a7:31:8e:bb:8d:9e:46:42:d0:e2:cb:
a6:9a:81:62:92:21:27:76:74:7c:64:ca:91:d7:bd:
cf:55:92:51:89:ad:0e:e4:6f:c5:b8:c9:57:bc:bc:
e3:94:fe:42:31:f9:88:58:c1:43:5d:b8:f8:f6:1f:
5e:24:f7:c0:45:f7:30:cd:13:f4:6b:d3:04:af:1c:
91:2a:5d:2a:1b:43:75:41:54:dd:16:00:16:be:1a:
70:79:d2:25:ad:e3:e7:ec:a5:07:58:ed:0a:ac:4e:
ea:93:20:d1:a2:df:3c:cc:4c:be:46:51:37:f9:74:
df:70:9c:42:4b:72:76:5b:db:06:33:4a:a7:ce:5d:
dd:4d:08:2e:e2:7a:b3:2b:9c:c0:f0:79:97:38:d4:
77:86:2a:59:1e:60:08:7a:38:77:96:90:97:8c:5c:
32:13:09:7d:d1:44:46:e3:fc:d5:bc:9f:e2:b6:ec:
a5:3a:76:2d:ba:67:91:57:ce:20:93:31:9f:fc:b2:
83:0d:cd:12:d8:b5:88:7d:e8:f0:9b:28:f6:5d:ae:
30:9b:8e:7b:14:4a:e3:82:96:d1:81:d2:0d:28:c3:
32:f7:a1:74:d3:6d:48:de:23:1c:db:8c:18:24:98:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:19:5A:24:38:89:32:BC:83:4A:AA:D9:66:11:21:A6:85:CE:C1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrwZWiQ4iTK8g0qq2WYRIaaFzsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:07:39:5c:87:34:85:29:8a:5b:6f:a7:ee:be:8f:c3:a2:f2:
40:77:8f:28:84:2e:7e:5f:05:ab:1d:97:8e:fc:0f:e0:78:dd:
31:62:a3:ed:74:28:71:2e:cd:66:41:3e:18:bc:19:b9:9a:92:
2b:9c:bd:75:a3:33:b3:45:08:5d:f4:9e:84:64:45:bb:79:c4:
90:32:6f:fb:22:d1:d9:07:6b:e8:f4:41:19:ff:87:1f:06:3a:
23:c6:7c:f8:98:a7:c9:62:d7:40:3a:b1:c2:e5:b0:ee:11:70:
29:8d:f4:7f:a6:b2:68:19:cb:76:55:95:58:08:e3:53:54:fd:
b2:8f:b7:29:18:59:d8:d1:57:9b:43:45:1c:a7:2f:a3:e5:91:
c4:7e:50:7b:ba:81:a8:4d:8c:6a:87:f6:cc:3b:a9:5b:b8:e9:
a3:f5:87:c2:9d:9a:38:75:0a:38:7a:55:06:ae:11:7d:2a:85:
39:1a:4e:74:19:e3:57:0a:05:f1:eb:78:57:f3:ea:95:ce:28:
58:ab:70:09:83:9c:01:00:61:1f:22:54:a7:1d:69:d2:f2:17:
c6:d9:8c:65:46:11:ba:6a:e5:74:2e:68:96:ad:89:21:df:b9:
4f:ca:d4:a8:b9:cc:42:f0:68:95:4e:c7:79:65:96:fd:2b:ab:
d6:7b:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:30:03 2025 by rpki-client