Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FugBYHAlaJEXtWI7ABbpOhzpcac.roa
File: FugBYHAlaJEXtWI7ABbpOhzpcac.roa (raw, json)
Hash identifier: 2j/SJvBugOCu+Dr1kY/eYZ0nlOEnYd5J3MwPYPzgx5U=
Subject key identifier: 16:E8:01:60:70:25:68:91:17:B5:62:3B:00:16:E9:3A:1C:E9:71:A7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903D11CA32AE2608567172AB3C0A6F4CA5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FugBYHAlaJEXtWI7ABbpOhzpcac.roa
Signing time: Fri 21 Jun 2024 23:11:34 +0000
ROA not before: Fri 21 Jun 2024 23:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:11:ca:32:ae:26:08:56:71:72:ab:3c:0a:6f:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 23:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e801607025689117b5623b0016e93a1ce971a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:e5:07:66:91:2a:f4:f9:11:b0:f8:05:ad:
54:74:69:3c:17:c6:88:7b:17:c6:3b:ec:8d:b1:ef:
4d:73:84:cf:4d:18:f4:f2:49:74:8e:c7:08:bd:11:
44:d0:0e:58:6f:d8:ba:3f:74:e8:7b:0f:9a:26:dc:
b4:99:c4:a5:4e:c5:d4:a9:cb:f3:96:f1:ff:3a:f1:
9d:69:7d:cf:c1:54:22:6d:a4:4a:a3:5f:f7:21:d1:
76:3f:2f:b3:cd:13:60:ec:8b:76:b6:fa:49:eb:0f:
b3:48:e6:4c:b4:db:03:be:33:ed:c4:ba:e3:d7:09:
e1:c3:49:aa:e1:5a:fa:8c:2f:fa:0c:34:c5:29:5f:
3a:8d:57:16:dd:d8:d8:21:d2:ef:c3:b6:5f:04:b9:
96:ef:3e:23:77:3e:dd:b5:04:f4:4a:50:14:16:8d:
0b:56:22:9b:c2:65:30:34:ad:4e:2c:f5:7d:ae:4a:
7b:07:50:3b:ae:01:2f:e7:64:ba:43:da:db:57:a3:
df:5a:46:71:d8:8e:aa:2a:9f:29:b9:58:b1:fb:fb:
b7:32:da:2a:08:40:f0:67:b8:74:ff:81:3f:3c:03:
9a:30:c8:ce:ac:f3:d1:d3:87:27:ec:17:04:72:9b:
11:52:9f:80:7d:55:90:d9:e1:d4:fe:18:e1:be:53:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:01:60:70:25:68:91:17:B5:62:3B:00:16:E9:3A:1C:E9:71:A7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FugBYHAlaJEXtWI7ABbpOhzpcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:62:5b:11:d2:42:37:cc:f7:7e:e2:39:97:54:6f:6c:e3:ff:
6f:a2:01:2c:00:13:9a:80:9c:1f:93:a0:66:6e:dd:2f:a8:db:
36:f0:5e:fe:8d:aa:cb:64:e5:5a:c6:52:5c:d8:fe:3b:ff:2f:
4d:f6:6a:da:4f:9c:d1:3c:a4:64:02:c7:b1:60:71:ff:80:da:
8c:3e:89:b4:6f:64:2e:85:af:46:1d:65:7f:8d:6a:5c:d1:9d:
53:fa:6e:3d:7d:95:19:a8:d0:9d:46:3f:d1:b5:98:39:29:87:
f6:e1:c0:65:ad:d7:71:34:fc:df:37:b0:82:55:96:a8:a2:ec:
5a:9e:ca:c8:21:88:d8:d0:ab:5e:64:6b:a1:9f:e7:a1:bf:3b:
be:14:30:d5:13:38:9a:49:8d:77:0e:e5:e7:34:35:69:b9:fe:
30:31:f1:2f:26:c3:38:75:24:c0:dc:56:31:95:81:8e:8b:6b:
13:7f:67:2d:a2:66:45:09:a9:56:17:54:e7:e1:e0:02:27:f5:
20:3e:00:a0:5f:cf:c1:66:8d:a7:dd:13:45:f8:88:0c:e3:30:
94:60:0a:69:32:d3:b3:8f:48:c1:11:a9:5e:03:61:bc:00:1a:
72:bc:26:ae:65:97:c7:d3:60:92:c6:7e:ec:65:20:a3:64:cd:
97:e2:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:21 2025 by rpki-client