Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LCB29XEtEp0mWY1gXAJ8s4S0zYU.roa
File: LCB29XEtEp0mWY1gXAJ8s4S0zYU.roa (raw, json)
Hash identifier: LvSHvgSafvABVFDeIsVX+OGGAfel5FREBxBdTxj5M1w=
Subject key identifier: 2C:20:76:F5:71:2D:12:9D:26:59:8D:60:5C:02:7C:B3:84:B4:CD:85
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019080395345545066035FC7258734217CA9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LCB29XEtEp0mWY1gXAJ8s4S0zYU.roa
Signing time: Fri 05 Jul 2024 00:09:18 +0000
ROA not before: Fri 05 Jul 2024 00:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:80:39:53:45:54:50:66:03:5f:c7:25:87:34:21:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 00:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2076f5712d129d26598d605c027cb384b4cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:6e:6b:63:67:bf:11:68:85:39:2c:08:6b:
c0:c8:af:a8:26:b6:f5:bc:98:f9:74:35:b4:eb:bf:
20:8c:76:a7:82:df:6b:2d:f6:51:34:53:96:4b:33:
79:b7:9a:20:b2:5a:3e:6b:ef:ca:4e:8d:b9:c5:2e:
52:c7:46:84:e4:a1:fb:40:99:92:10:41:39:b0:94:
74:07:22:a7:57:f9:6f:4e:b8:91:bb:ad:60:df:e5:
7d:04:d9:08:26:9e:11:97:0c:98:74:b5:c7:ea:49:
5a:7f:05:11:28:0c:a2:e1:02:a0:12:44:90:91:31:
ca:78:5f:85:a0:f7:1d:88:60:91:0d:24:d7:85:26:
5b:1f:3a:12:41:28:bb:d6:b9:a6:b1:b4:73:ab:b1:
12:58:82:48:39:e1:05:90:b3:46:fc:45:82:97:08:
19:2b:50:a5:9b:95:ef:35:7a:fb:64:aa:e9:36:e6:
ec:65:d3:1b:a6:bb:17:f8:5a:83:54:9c:6f:be:2e:
8c:18:0f:39:cc:22:a7:45:39:f5:94:d9:55:5a:1a:
42:8a:37:15:bd:b3:c9:c1:7b:05:77:a3:ed:a5:e9:
18:19:7f:e8:38:d7:ad:ba:ef:ec:b5:7e:77:ef:f4:
b8:4a:ed:db:93:1b:18:3d:8b:63:d0:92:39:c9:cc:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:76:F5:71:2D:12:9D:26:59:8D:60:5C:02:7C:B3:84:B4:CD:85
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LCB29XEtEp0mWY1gXAJ8s4S0zYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:45:61:0e:07:26:7d:65:4f:9f:ba:aa:c4:77:25:f2:d0:2b:
2f:82:db:a1:a0:06:2b:87:7b:ed:65:a7:7a:e2:76:a2:8c:5d:
89:f7:23:fd:e3:71:ad:01:69:a3:ae:57:e3:e0:f4:20:ac:08:
61:62:26:2f:75:eb:07:e7:c6:6d:c3:c2:8a:bf:24:9b:4c:fd:
0e:01:4d:52:0c:90:4a:20:a8:40:e9:ed:73:fc:d5:57:83:16:
00:87:38:85:f0:ac:e0:fd:5d:f5:4c:2a:d0:a3:12:e1:da:ca:
3f:e7:7e:1e:d2:19:d2:da:c7:de:bd:f8:35:2d:1d:82:0f:43:
2f:b8:75:af:e1:d4:95:87:8a:82:4f:a6:f7:8d:66:37:3c:dc:
57:0c:65:00:d7:9e:9e:cd:9a:db:f8:d7:54:89:ea:c9:6a:33:
85:96:3b:18:ba:2a:78:eb:b5:fd:fd:d2:59:7d:5a:37:84:01:
d7:5e:e1:2c:16:be:be:86:a6:c8:50:d4:32:9d:95:c1:c3:0e:
e8:6c:b1:c5:a4:df:20:5c:99:54:5c:b0:01:ef:c0:ac:89:50:
14:8a:14:ee:cc:c8:77:f4:70:2d:83:53:27:28:3a:df:d7:d3:
cd:80:77:f2:52:da:12:22:8d:9a:28:b3:d4:ad:d9:9a:a0:0f:
76:50:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:20 2025 by rpki-client