Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbeT96I0n6R-jh6uFL5_Kr8qNBE.roa
File: LbeT96I0n6R-jh6uFL5_Kr8qNBE.roa (raw, json)
Hash identifier: bUPtf08zrzmy3Pe715ebF5oCB3k+XxzANs1ErhN3BoY=
Subject key identifier: 2D:B7:93:F7:A2:34:9F:A4:7E:8E:1E:AE:14:BE:7F:2A:BF:2A:34:11
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FAFA38DE1610A2C517743C79F8EEF3777
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbeT96I0n6R-jh6uFL5_Kr8qNBE.roa
Signing time: Sat 25 May 2024 12:04:42 +0000
ROA not before: Sat 25 May 2024 12:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:afa3:439f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:a3:8d:e1:61:0a:2c:51:77:43:c7:9f:8e:ef:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 12:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2db793f7a2349fa47e8e1eae14be7f2abf2a3411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:19:6c:2b:f9:07:29:0b:bb:f9:f1:26:18:
a3:8b:c9:8f:cb:e8:2a:66:ea:5c:e9:f9:c1:45:91:
76:5a:30:2c:b7:c2:fb:47:35:4d:0d:14:c5:8f:fe:
9a:52:f4:7b:ff:2a:25:1e:c7:a0:eb:42:3d:e4:bb:
a2:42:80:69:b8:7f:66:b7:9a:59:d8:42:fb:44:20:
ba:5e:1d:99:02:cc:a3:16:c6:60:60:59:e7:1c:8b:
19:99:ef:c3:aa:8f:a7:cf:64:7d:c2:67:c3:5e:d5:
d2:ac:58:11:de:22:38:23:01:d8:f5:7d:bb:65:6b:
af:b8:f8:eb:74:d9:ca:ae:4e:90:01:b8:c3:85:aa:
02:0c:d8:0f:b1:26:dd:6a:9b:e8:81:77:14:4e:ed:
76:a9:6a:cf:d8:9c:36:0a:3d:9c:68:5c:5b:60:5f:
20:85:e4:d7:92:c9:c4:d4:c8:df:5e:a9:ff:7d:93:
5b:9d:3d:d0:cc:0e:62:07:df:a3:e8:e2:27:47:f5:
5f:5c:51:26:7d:61:fe:8f:f1:a0:d3:5e:2f:ff:60:
b8:35:5c:2d:52:fa:ff:8e:09:96:ed:37:62:c2:28:
ce:97:b3:0a:1b:74:77:3a:4c:54:89:cd:b1:6e:60:
46:c3:9f:b8:70:b5:85:e2:ce:6d:95:ea:50:f7:c7:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:93:F7:A2:34:9F:A4:7E:8E:1E:AE:14:BE:7F:2A:BF:2A:34:11
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbeT96I0n6R-jh6uFL5_Kr8qNBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:f2:b3:f3:b6:aa:5c:86:37:3d:ef:d1:b7:54:ca:21:6d:40:
bf:79:13:90:e4:35:20:38:37:4e:83:29:bd:c3:c2:30:da:87:
27:ef:02:59:ef:43:26:26:b6:2a:f7:2c:05:9f:47:26:a2:4e:
54:25:eb:85:3a:52:18:51:14:66:ea:3b:94:34:3c:f9:69:80:
1f:2f:3b:af:b1:69:c4:d9:e1:42:b3:08:b9:62:e9:89:53:28:
69:80:82:16:06:8c:30:aa:f5:a1:de:97:fa:23:1d:ec:47:07:
b9:1f:b0:ac:93:1f:d9:9c:bd:9d:f8:34:63:3d:f9:8e:26:9f:
c0:30:0a:da:7c:da:b9:9e:f6:e7:63:d9:33:74:0a:7d:6c:60:
73:b1:5d:52:df:24:ed:0d:55:ba:73:c6:1f:f2:44:1b:3f:4d:
1b:df:fd:b2:c7:97:7b:ba:95:f5:13:9c:2b:a2:49:f8:29:39:
12:15:23:95:9c:fe:18:f9:f0:fc:16:5f:03:dc:71:a1:cd:d3:
39:d8:53:1f:d5:3a:52:22:c5:d7:60:20:e5:09:25:cb:3c:75:
5d:bc:3c:56:cb:ee:5c:3a:1e:b3:aa:ad:e4:7a:a3:77:17:a4:
d1:28:0f:ee:3d:14:e2:33:ed:b4:0f:59:77:72:87:1b:87:b4:
fe:53:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:21 2025 by rpki-client