Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LpWn6LUh9pOnTZry9iVodBILxaA.roa
File: LpWn6LUh9pOnTZry9iVodBILxaA.roa (raw, json)
Hash identifier: 1ZLe5TJz9rMAIHRGW1Axm1QuFJaZqc3CsJrHJ/kicR4=
Subject key identifier: 2E:95:A7:E8:B5:21:F6:93:A7:4D:9A:F2:F6:25:68:74:12:0B:C5:A0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A77E0D84FA7133263DD093487EF665C3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LpWn6LUh9pOnTZry9iVodBILxaA.roa
Signing time: Fri 12 Jul 2024 15:09:34 +0000
ROA not before: Fri 12 Jul 2024 15:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:7e:0d:84:fa:71:33:26:3d:d0:93:48:7e:f6:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 15:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e95a7e8b521f693a74d9af2f6256874120bc5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:24:32:03:f5:d5:bf:77:6f:18:0d:b7:da:
7b:77:84:da:a5:77:eb:d5:89:40:91:8b:86:62:c9:
8e:8f:0f:cf:df:b5:61:dc:49:0d:0e:ce:e1:1b:d1:
ed:23:cc:6d:df:92:b0:77:7c:a6:eb:61:40:27:d4:
96:b4:cc:81:e1:6a:be:2e:7f:ae:97:9b:32:d1:8e:
1e:ad:f4:61:42:25:5e:09:a6:73:a1:af:46:19:9f:
07:ef:a2:da:85:ca:4f:03:c6:00:cc:18:47:36:19:
9c:8f:0d:f6:f2:c0:70:ea:74:00:0e:ca:63:be:11:
6c:12:94:53:54:80:f9:20:b2:c9:32:3a:02:36:24:
cb:8d:b5:24:ef:4a:36:02:86:6e:4e:52:ef:59:b6:
21:43:1b:c0:a0:f3:83:07:2c:6b:10:11:6f:19:11:
46:60:ef:00:a2:50:aa:70:94:e7:01:ef:3b:09:fb:
59:d7:cc:c3:05:33:6e:76:80:03:9a:31:04:e3:37:
76:58:db:a3:25:b8:b8:30:99:8d:01:a5:37:e9:04:
b0:6f:93:88:e1:9e:8e:6d:9b:11:8d:c3:a9:17:26:
d6:4d:a6:4f:9c:9b:c8:5e:88:b5:b8:ba:76:7b:ae:
fa:85:15:62:21:ec:77:19:38:d8:8e:c2:99:ad:0e:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:A7:E8:B5:21:F6:93:A7:4D:9A:F2:F6:25:68:74:12:0B:C5:A0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LpWn6LUh9pOnTZry9iVodBILxaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:6f:89:a1:4d:3c:21:7c:0c:08:a6:65:5e:78:f5:d9:28:02:
bf:1e:59:c3:2a:6d:0b:37:88:c0:18:6c:c1:0c:4f:7f:83:4c:
38:2d:c6:61:20:43:f8:cb:13:46:4d:e3:d4:51:49:73:af:51:
ab:63:fe:2b:e4:35:f6:a5:12:85:a7:0a:6f:6f:3f:5e:17:e7:
61:22:1e:82:12:25:35:af:91:dc:33:bb:15:c8:9b:f4:ec:d7:
c0:c2:8a:c4:23:f4:10:46:0f:cd:de:e9:2e:38:07:9e:2c:f6:
31:c8:d2:7d:fc:e8:32:e8:3c:12:f2:1d:e9:18:d7:ec:90:ba:
da:6b:6e:e5:36:81:4d:8d:b6:19:d3:4e:b7:6c:fb:6a:e4:72:
56:10:bc:0e:78:8e:97:a1:94:dd:99:b3:7c:4e:8a:82:79:1a:
70:a3:c9:e7:c0:58:99:3a:97:02:ad:04:6a:e5:e9:59:1b:71:
55:2c:83:39:f8:61:00:ba:47:c5:e1:41:28:f9:18:a3:78:1f:
a4:eb:db:49:56:55:9c:6c:e6:b3:25:61:f0:2d:e0:77:73:05:
97:32:69:2b:e4:87:41:36:e0:e7:96:37:d5:fb:6f:b7:ed:83:
4f:9e:85:cf:20:92:e3:4a:9e:e5:83:bd:5f:ad:49:a8:b4:0a:
9b:81:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:26:16 2025 by rpki-client