Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IUqqLwhKECqK9WuhyCLHQsIVNSY.roa
File: IUqqLwhKECqK9WuhyCLHQsIVNSY.roa (raw, json)
Hash identifier: im6o3lZj2I62z1PxUbJO2O2c0+Zmrmge6A+nq2xwso0=
Subject key identifier: 21:4A:AA:2F:08:4A:10:2A:8A:F5:6B:A1:C8:22:C7:42:C2:15:35:26
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902ACE3137F581F6BC24393DE32E0CECC0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IUqqLwhKECqK9WuhyCLHQsIVNSY.roa
Signing time: Tue 18 Jun 2024 10:04:34 +0000
ROA not before: Tue 18 Jun 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:2acd:f795/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:ce:31:37:f5:81:f6:bc:24:39:3d:e3:2e:0c:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 18 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=214aaa2f084a102a8af56ba1c822c742c2153526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:34:c0:01:68:b3:da:92:1d:98:a1:0f:76:
29:69:8c:cf:b9:d7:8c:b8:a5:23:c7:63:fa:e2:16:
74:0e:0f:07:b4:cc:c4:b7:ae:6b:0b:05:ed:ef:54:
ff:b2:20:ab:7c:34:73:8f:eb:b8:e7:7a:33:ab:3d:
42:0a:90:2b:86:52:34:b7:ae:bd:e0:89:77:58:35:
e4:84:96:42:a3:48:2c:dd:6c:bc:49:90:e9:7f:09:
d9:af:72:f6:3b:b1:6d:61:fc:12:db:96:28:93:ba:
e5:a8:0b:44:27:09:c9:0e:a0:c1:68:fd:5f:3d:e1:
d4:38:29:28:2b:49:4a:19:75:70:0a:e7:ec:2f:8e:
04:df:48:c8:94:af:a4:33:b6:01:06:35:5f:43:0d:
cb:22:e9:4c:af:c5:55:01:ea:3b:52:ce:bc:2b:d3:
0e:c9:6c:70:f4:28:fe:47:68:8f:f1:a8:f2:27:75:
03:e2:0f:de:68:0d:d7:53:1e:c8:5e:3c:7f:c3:6e:
42:dc:18:ae:37:3e:ff:82:80:23:25:3f:cf:40:d8:
47:1a:f4:cb:fc:69:30:03:e3:33:f9:38:be:4a:a0:
1f:6b:b3:89:18:7a:0f:00:78:d9:03:b4:6d:72:1c:
87:d0:ba:dc:4e:a5:35:24:d4:35:18:90:37:db:fa:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:AA:2F:08:4A:10:2A:8A:F5:6B:A1:C8:22:C7:42:C2:15:35:26
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IUqqLwhKECqK9WuhyCLHQsIVNSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:94:00:3e:cb:83:50:0c:0d:3e:35:8f:c9:79:40:b4:78:b8:
cc:18:95:3b:cf:39:20:33:0b:52:a1:42:f6:26:bc:d2:bd:fb:
4b:09:0e:4a:cc:01:69:b3:7e:11:d7:4a:16:d5:30:f2:51:a1:
cc:30:a7:f7:bb:b4:b0:d5:14:cc:23:d6:ad:a5:13:e7:3a:3b:
81:2a:70:58:02:44:3a:81:6b:a5:a1:0d:5e:cd:4c:c9:71:c0:
d0:1c:17:5b:c8:b7:97:24:b0:1a:1f:d0:d6:1a:b2:a1:15:b7:
92:9a:84:8b:85:83:4f:8c:96:ac:cf:0a:78:41:45:72:ca:78:
bd:ee:c5:db:b1:bf:0f:31:75:7c:0c:cd:b6:7d:2d:4e:f6:a3:
65:40:c1:fc:d7:ac:2d:43:e6:64:06:88:1d:e4:3b:63:11:5e:
7a:50:fa:e4:50:27:dd:fb:1f:c3:be:e7:25:61:f1:bd:94:2a:
d3:9f:6e:af:57:58:17:f9:44:8b:e8:63:de:4d:7c:33:07:e3:
37:90:ad:64:27:96:64:0c:48:2d:39:6a:8d:fa:48:c6:6f:6b:
41:57:2d:f4:75:05:cb:c3:23:16:59:3f:77:2c:9d:6e:72:22:
d9:8e:5c:69:b6:77:84:74:11:b5:99:c7:ef:d0:f0:e1:95:19:
cc:f2:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:00:06 2025 by rpki-client