Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OXZwYfYFjuPWILvx-68BWY1LE-U.roa
File: OXZwYfYFjuPWILvx-68BWY1LE-U.roa (raw, json)
Hash identifier: ESKyYu67aVDvkUpjl/kkMC0bSUbDv192Peh/x1BTK1o=
Subject key identifier: 39:76:70:61:F6:05:8E:E3:D6:20:BB:F1:FB:AF:01:59:8D:4B:13:E5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B2ACE6E1E562536D08BA4B0CC5993C1F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OXZwYfYFjuPWILvx-68BWY1LE-U.roa
Signing time: Sun 14 Jul 2024 19:16:34 +0000
ROA not before: Sun 14 Jul 2024 19:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b2:ac:e6:e1:e5:62:53:6d:08:ba:4b:0c:c5:99:3c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 14 19:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39767061f6058ee3d620bbf1fbaf01598d4b13e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:21:be:c0:a2:2f:1b:a6:16:0f:e0:91:ac:
c8:81:80:34:73:d1:95:54:b7:91:b3:31:da:08:7e:
82:29:f7:ad:2e:3a:e6:32:15:d4:2a:91:cb:39:fd:
b4:5a:eb:b3:12:6b:5a:13:3b:e8:d9:3a:0c:79:dc:
fa:44:40:a5:a3:0b:e9:19:4d:f3:29:1d:d3:c2:1c:
6a:9a:4f:b0:cd:c3:df:12:1c:15:1b:4b:9b:6e:46:
20:5e:9f:af:57:12:d9:16:52:68:c2:b2:08:04:27:
73:a5:0c:b6:d8:81:8f:64:5a:6c:02:19:62:e1:66:
2d:aa:ab:f0:e6:f5:1a:1e:f0:d6:55:79:0c:e8:ee:
1c:b1:2d:b7:f3:29:be:c6:ab:50:d8:35:5a:f2:30:
6c:bb:ea:bf:71:b9:4c:09:fe:fe:1b:9d:1d:7b:4d:
7c:aa:58:05:6b:23:c1:ba:98:b4:7a:9e:0c:6e:cc:
bb:eb:5b:1d:d1:f4:6b:1a:19:06:f1:60:97:46:e3:
14:e4:9e:79:62:65:db:81:83:ee:f6:25:13:20:ed:
10:e7:d0:52:54:27:bc:cc:cc:c4:f3:8c:66:c0:bd:
81:b6:8a:0d:77:15:ca:e7:6d:30:eb:6f:e2:c2:96:
44:c7:95:3b:65:dc:f9:ec:d1:b2:94:bc:5b:ef:57:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:70:61:F6:05:8E:E3:D6:20:BB:F1:FB:AF:01:59:8D:4B:13:E5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OXZwYfYFjuPWILvx-68BWY1LE-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:9b:93:74:4f:f9:1d:4e:b2:d2:e9:41:ef:d0:62:b4:bb:2d:
01:94:9e:2a:5c:52:60:7d:57:a3:6f:5f:64:49:bf:4b:df:83:
57:b0:fc:31:c2:ee:2d:0c:d4:4d:ea:0d:1b:61:31:d0:03:1b:
d5:be:a1:c9:6d:40:92:13:9d:73:71:2a:3a:2d:c5:9c:68:36:
22:64:c5:76:a4:ee:ea:fb:4c:6e:8e:be:b4:fa:6b:4c:b0:77:
9b:8f:66:34:dd:07:4c:38:1c:bb:35:ad:57:c4:9d:a4:1a:71:
bc:35:82:1e:9f:b4:c3:7e:1b:2e:63:08:04:4d:d5:31:2e:29:
c2:60:f1:05:f8:37:90:34:af:97:dd:45:5c:e6:05:a8:98:cc:
05:cc:1f:4d:55:ec:65:d1:f9:27:7e:37:37:bd:a6:09:3f:b3:
66:0a:9c:c5:98:65:6a:fd:fa:24:01:bd:7f:0e:52:a3:61:47:
1e:ac:8a:cb:e6:62:3f:ed:13:1e:9d:e9:95:57:b1:dc:36:68:
96:22:09:ca:b6:66:ef:56:c4:0d:27:8f:b7:8f:56:5f:3d:1e:
58:4f:fd:95:0f:04:90:a9:46:49:58:23:e6:92:d7:12:72:94:
22:f4:d8:ec:17:64:b5:50:0c:7b:b2:7c:01:35:21:de:bb:19:
20:a6:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:47 2025 by rpki-client