Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HU7Ofcogjl7rposNU5hoT5YW21o.roa
File: HU7Ofcogjl7rposNU5hoT5YW21o.roa (raw, json)
Hash identifier: 3XUXxaz8XdFc6xfkRMlb2EwoseAVfBf3xDQ7FMJsLZg=
Subject key identifier: 1D:4E:CE:7D:CA:20:8E:5E:EB:A6:8B:0D:53:98:68:4F:96:16:DB:5A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AF7144CDF9283B5B15BD639C9908AB71
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HU7Ofcogjl7rposNU5hoT5YW21o.roa
Signing time: Sun 14 Jul 2024 04:12:34 +0000
ROA not before: Sun 14 Jul 2024 04:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:af:71:44:cd:f9:28:3b:5b:15:bd:63:9c:99:08:ab:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 14 04:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d4ece7dca208e5eeba68b0d5398684f9616db5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:8c:a4:ec:60:29:ed:b7:c0:2c:8f:6a:50:
40:31:3b:a2:ac:33:67:2a:cd:05:ca:bf:77:fa:54:
ca:24:bd:a6:01:00:4a:b7:17:67:46:5c:c5:ec:3f:
56:25:e8:5a:46:0e:ea:60:1f:c0:f2:83:97:cd:b9:
e4:19:44:e7:f3:e8:24:bb:4d:2c:10:78:b5:e9:22:
35:44:08:44:19:ea:d6:f1:dc:6d:02:c7:d6:2c:f5:
b5:31:34:7e:30:a8:e6:e2:2d:35:7a:55:be:43:b7:
4f:16:c5:99:f4:9d:ba:d3:03:2a:7a:c7:62:5e:fd:
b4:af:87:06:c0:cc:d4:3a:5d:60:62:df:6e:d3:65:
c5:fe:cf:40:55:b1:0b:f8:17:54:8e:92:ab:d0:ea:
d1:76:18:cd:ca:e2:02:a9:11:43:6f:d5:c3:7f:7a:
b3:4f:18:f7:a6:51:22:62:da:80:e0:61:1a:4f:fc:
b8:81:3d:9f:aa:34:4a:03:67:63:a0:8b:f0:c3:0f:
61:77:cd:d6:7a:63:46:60:87:75:14:ab:82:39:a4:
88:11:e2:db:27:21:c2:5a:40:0f:12:58:ce:a6:54:
6d:d1:99:b2:8e:8b:4f:8d:be:c1:28:2b:21:ad:72:
ba:6f:d4:30:31:4a:78:ca:1e:a3:31:f1:d1:74:31:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:CE:7D:CA:20:8E:5E:EB:A6:8B:0D:53:98:68:4F:96:16:DB:5A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HU7Ofcogjl7rposNU5hoT5YW21o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c2:96:61:4a:9d:26:fd:c5:31:5e:06:15:ad:83:ce:b3:dd:
b7:6b:d7:f5:a4:60:f0:37:5c:80:79:43:58:23:10:75:45:0d:
03:c3:a5:fb:e8:36:2e:ad:41:04:53:b9:39:8d:0f:e6:c1:64:
78:60:89:af:cf:1d:0b:e5:01:2d:48:57:bd:4b:72:ee:fd:25:
b3:62:1a:a7:b4:7a:9a:94:ff:20:d8:24:63:4a:4d:1d:fd:e3:
ed:84:2d:9b:1d:8a:8d:aa:0d:12:2f:1a:cc:1a:bb:8e:2a:5f:
88:a4:87:0a:56:80:ea:63:06:c5:12:82:6d:41:ee:f8:7d:d6:
e3:ee:a9:4d:2f:ba:fd:07:62:78:ec:61:29:64:40:66:09:78:
99:c8:3f:d3:77:92:7d:38:7c:94:19:11:0b:f2:e6:d0:08:67:
ff:2a:bd:f4:f3:49:19:8f:00:ee:2b:8b:8c:14:7f:19:31:60:
cb:76:6a:40:79:1f:bf:3f:a4:16:1c:c3:76:47:42:04:06:f7:
3a:72:e1:92:db:fa:50:18:93:a5:93:14:e4:62:31:5a:31:c7:
a6:dd:00:b6:ba:39:73:a9:17:2e:53:5c:56:d6:a6:23:4c:6f:
af:c6:56:2b:8f:2c:80:14:5d:07:29:d7:65:e4:06:c5:2b:04:
a9:1f:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:32:42 2025 by rpki-client