Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3CdnD6NFkO6_ShKtlvH6DWC6Cw.roa
File: M3CdnD6NFkO6_ShKtlvH6DWC6Cw.roa (raw, json)
Hash identifier: A/Xz5J9gZnpSz79BKk0MsLpLpXol6LaX2NRXXg0goEY=
Subject key identifier: 33:70:9D:9C:3E:8D:16:43:BA:FD:28:4A:B6:5B:C7:E8:35:82:E8:2C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC10C57B9CCC24E8C778E380F387FB5A1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3CdnD6NFkO6_ShKtlvH6DWC6Cw.roa
Signing time: Tue 28 May 2024 21:12:42 +0000
ROA not before: Tue 28 May 2024 21:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:0c:57:b9:cc:c2:4e:8c:77:8e:38:0f:38:7f:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 28 21:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33709d9c3e8d1643bafd284ab65bc7e83582e82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:69:72:a1:e1:84:39:f9:5f:d3:d2:13:21:
5a:57:dc:88:5d:9b:52:00:74:9e:f7:d2:34:43:53:
d1:5b:c5:42:05:fb:18:8e:d9:9e:8e:0d:02:1b:e2:
30:b6:89:af:78:45:1c:80:fb:e0:41:60:d2:dd:00:
de:55:50:ed:db:d7:da:00:48:52:b2:39:3d:12:9d:
24:59:85:5d:8d:9f:74:92:8c:1c:73:95:05:f5:a8:
7c:ce:7b:cb:2e:e1:a4:2f:e9:6c:5e:b6:96:49:2f:
60:92:fc:54:fb:78:94:88:5f:f0:bb:32:32:95:58:
20:03:65:38:75:d1:82:83:61:bf:27:6a:45:4c:6b:
a4:32:0b:82:ac:b1:d9:2d:50:2d:54:f9:8a:54:9e:
73:a1:fd:b2:5e:da:6f:9d:de:de:95:f8:df:8f:f2:
26:8a:6b:f8:83:4c:3a:3e:46:c8:1c:7d:07:55:10:
5b:78:c0:d7:d0:d4:50:d0:71:4d:ff:9a:9f:86:7e:
c3:08:c0:a7:c9:9a:1d:d3:a1:a2:fb:9f:8f:15:0f:
58:d8:4b:b8:6b:3e:82:09:6b:93:bc:67:49:2a:89:
43:9a:3c:54:51:ff:5f:f3:2d:97:02:4d:d0:30:af:
f2:b0:0e:83:04:04:b3:d0:ea:90:0f:64:41:49:74:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:70:9D:9C:3E:8D:16:43:BA:FD:28:4A:B6:5B:C7:E8:35:82:E8:2C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3CdnD6NFkO6_ShKtlvH6DWC6Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:22:cc:f9:11:93:30:d2:fe:f9:cf:74:14:d7:8b:fb:11:ec:
f0:0a:2e:f5:af:b2:ac:03:38:14:10:13:54:46:31:22:09:b6:
8e:84:f8:b8:f7:ca:0c:b9:fb:27:39:23:ac:63:7a:b4:0b:bc:
6c:08:79:71:50:09:4e:2c:48:3b:5a:1b:4c:c0:01:88:a4:03:
45:a1:4e:e8:e4:3f:ff:f5:97:a6:de:29:bc:fc:92:ea:d2:98:
cd:16:06:7a:b6:c5:23:42:79:34:ac:95:48:27:b3:46:83:e6:
b3:a9:b6:b9:23:f2:96:76:5b:ef:95:1d:16:b9:99:46:8e:eb:
c0:f5:20:1c:57:ae:3d:36:95:ce:f0:28:45:29:98:9c:b6:e6:
74:87:5c:f0:c5:bd:3f:4e:5e:c9:39:dc:76:84:f0:89:ba:dd:
52:8d:ec:c5:06:96:9c:8c:82:16:50:7a:88:0b:23:b2:c4:73:
16:8d:bf:5c:2b:88:d2:d6:48:ff:3b:4d:b5:98:ba:bc:32:e7:
26:49:0d:81:9d:fe:68:88:01:24:0e:d6:af:ed:f0:2c:f4:94:
01:20:4a:4a:ad:26:5a:f4:42:9e:ff:67:92:62:82:24:4b:d0:
95:47:2d:53:c0:93:03:aa:70:0b:9f:71:ce:cc:b6:5b:de:d2:
08:c6:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:38 2025 by rpki-client