Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P_wJzvvbP-jMzHFCva702mJhZNo.roa
File: P_wJzvvbP-jMzHFCva702mJhZNo.roa (raw, json)
Hash identifier: 11YGEpjhgg4cyF5DNUbOUDdgLvTNQVYRZLnVKJnLxhM=
Subject key identifier: 3F:FC:09:CE:FB:DB:3F:E8:CC:CC:71:42:BD:AE:F4:DA:62:61:64:DA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AD141B3234ADF738DC16FA5C49AD364B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P_wJzvvbP-jMzHFCva702mJhZNo.roa
Signing time: Sat 13 Jul 2024 17:11:34 +0000
ROA not before: Sat 13 Jul 2024 17:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ad:14:1b:32:34:ad:f7:38:dc:16:fa:5c:49:ad:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 17:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ffc09cefbdb3fe8cccc7142bdaef4da626164da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:90:1e:d5:b6:08:30:d0:70:f0:06:e1:fd:
0b:40:bd:40:aa:58:19:d7:0c:ee:c7:fc:02:6e:a2:
cb:9e:9e:82:a4:6c:93:38:f3:43:b1:3a:f6:f2:02:
4f:bd:af:79:8c:50:63:51:27:5c:a2:f4:5a:72:5e:
b9:1a:94:75:1f:6e:25:93:9c:1c:aa:a6:51:81:5b:
82:75:e7:e2:4b:2f:9b:20:ba:96:27:89:bd:34:1f:
f7:ff:da:26:9f:55:f6:65:30:c2:fe:53:2b:98:d2:
82:c4:9c:99:9a:54:56:62:91:21:ea:9c:3e:0b:29:
7a:3e:d5:36:76:f7:26:31:09:45:f1:f7:d8:ce:29:
d7:65:d5:f9:09:1e:de:98:de:f9:39:dc:b0:e1:60:
fa:e8:30:21:5b:67:fd:74:6f:43:83:01:e5:74:42:
20:8c:c3:0a:60:d4:a1:33:b7:f8:e0:f5:e7:80:15:
16:23:d9:65:cb:a2:7e:b3:2e:c9:d5:f6:11:d9:f4:
41:9a:c4:93:04:0b:83:00:86:53:47:7b:38:1d:c9:
42:c7:ae:84:aa:95:af:20:c3:d8:8a:52:3c:b2:e4:
ba:70:56:3e:c0:61:e2:dc:ac:90:b5:64:7d:da:51:
92:1b:30:93:c2:84:07:4d:a4:ba:eb:b1:2d:96:fd:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:09:CE:FB:DB:3F:E8:CC:CC:71:42:BD:AE:F4:DA:62:61:64:DA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P_wJzvvbP-jMzHFCva702mJhZNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:ba:dd:97:8b:f5:0e:eb:7c:ec:ef:7d:46:ec:af:e3:df:e9:
dd:89:f5:46:2b:fd:2a:67:ba:05:b9:b0:dc:63:75:c4:45:9b:
96:99:94:12:e6:51:e3:a3:53:95:e0:12:cb:44:50:fb:94:7e:
a3:f8:a6:fe:46:58:d2:74:1c:7e:48:4b:54:02:6a:2f:d1:e0:
ee:2d:61:d1:bf:a8:de:ac:bd:ca:8a:4e:49:bb:f7:73:d1:93:
be:aa:47:1e:1d:6d:f7:de:f1:e3:78:ff:f5:a0:5f:ed:1a:b3:
f7:23:b4:90:65:cc:7d:c8:28:18:6f:73:46:ad:14:fb:b1:de:
ae:5e:7d:c7:a1:7d:89:7f:0c:be:aa:90:12:8a:2a:0b:e2:e7:
e2:66:1c:f0:6e:b2:a0:d8:0e:63:a5:e8:83:59:b0:27:e0:30:
d5:0d:92:2f:08:9a:ee:6e:a6:ef:ed:93:93:37:1c:a1:4b:69:
d7:b5:df:5b:7e:be:de:77:45:3e:c7:f3:6b:58:e8:4b:c5:c7:
b6:4d:29:b5:2a:75:d6:86:b7:0b:04:c5:05:1f:37:10:02:e7:
29:ec:f8:ff:25:7f:5d:de:25:55:02:36:c9:09:a1:73:63:ab:
e9:f3:5a:b7:cc:e1:69:51:96:9c:4c:35:95:f5:2f:f6:55:88:
e0:7f:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:15 2025 by rpki-client