Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RFCt1y84ZBHBoAYtIGS_0EKK0ME.roa
File: RFCt1y84ZBHBoAYtIGS_0EKK0ME.roa (raw, json)
Hash identifier: /qEovP8+pNuxtrMjeHsUY9fhrVthxjL+3k0/+M5YNIc=
Subject key identifier: 44:50:AD:D7:2F:38:64:11:C1:A0:06:2D:20:64:BF:D0:42:8A:D0:C1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190882C894CF00214165F5BA742A8C97B9B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RFCt1y84ZBHBoAYtIGS_0EKK0ME.roa
Signing time: Sat 06 Jul 2024 13:12:18 +0000
ROA not before: Sat 06 Jul 2024 13:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:2c:89:4c:f0:02:14:16:5f:5b:a7:42:a8:c9:7b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 13:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4450add72f386411c1a0062d2064bfd0428ad0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:ba:01:bf:83:a9:b4:7d:51:41:63:3e:63:
79:31:c8:a7:7a:85:96:a7:32:1c:07:20:25:2e:52:
61:f8:48:41:7e:79:88:38:25:f4:91:f7:05:0f:06:
14:8a:60:75:04:7b:4a:d3:fa:0d:0d:67:0e:50:de:
af:21:dd:b1:7f:d7:28:00:81:21:78:1d:24:d3:1e:
b6:8c:51:13:1e:cc:ea:d8:b3:e5:14:d9:5e:4f:4d:
e3:52:bf:f3:ff:5f:14:16:ab:d3:93:18:3c:5a:ea:
dd:b2:c0:6c:23:d9:0c:d4:f6:69:df:6f:07:53:bf:
bb:18:c2:8e:c9:9f:fc:99:b2:c4:73:0d:0a:54:2f:
c0:d3:ad:1a:27:50:c1:bc:ab:5a:23:74:11:ae:24:
a1:f8:5a:5b:64:df:32:1e:8a:eb:0b:98:8b:bf:04:
2f:fb:5e:c8:be:8a:6f:9d:8f:a0:b7:bd:fd:5e:5e:
b6:aa:7c:c0:a7:d5:47:39:30:b9:5e:bc:84:04:ef:
6f:21:18:5f:40:0d:6e:db:e3:d6:45:9f:7f:d3:8e:
00:bb:c9:8a:9f:2b:fa:02:1b:5b:1b:bf:2a:b5:a2:
c6:fe:c3:2c:fc:30:ed:cb:91:7a:33:4a:ef:bc:a2:
6a:87:e7:8a:8a:b9:50:7e:c3:c8:48:6b:c2:cd:94:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:AD:D7:2F:38:64:11:C1:A0:06:2D:20:64:BF:D0:42:8A:D0:C1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RFCt1y84ZBHBoAYtIGS_0EKK0ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:92:c6:ee:d8:54:9b:31:73:9c:e7:99:f2:bc:11:fd:8a:1c:
c6:ad:a2:0d:2b:e8:d6:5b:e6:fa:63:ac:e6:e5:ad:4d:97:b9:
c8:a3:18:37:69:96:6a:ee:9c:e2:30:50:32:be:dd:91:ec:0d:
93:21:09:e7:6a:7b:0a:09:f5:67:50:8c:21:4b:af:3b:49:24:
db:7a:99:0c:5c:dd:b2:76:ff:ac:38:a0:f2:b5:d2:f1:36:0a:
31:9a:37:c0:3d:78:f6:88:3b:c0:58:a3:8c:7a:6c:49:09:0d:
a6:0b:ed:c1:18:c0:e6:c2:33:74:87:73:ff:8f:cf:24:ad:5a:
dd:37:ef:a0:9f:5a:72:8f:f7:4b:a3:ce:0b:92:95:b1:69:69:
b3:c5:ff:dc:20:3a:b6:17:8b:23:49:f1:cc:4b:76:52:51:62:
22:19:b2:be:78:d7:39:1d:da:b3:cb:69:21:35:24:fd:59:03:
f7:be:fe:ae:00:2b:bd:e7:b0:fb:8f:8c:c5:93:20:d4:bf:dd:
2b:49:f2:86:c5:66:7f:a8:cc:9a:02:9d:b4:a5:4f:ab:6f:59:
49:62:70:50:ed:b0:0a:87:e7:a9:db:90:1d:db:06:9d:d6:69:
fd:ea:5a:55:4d:28:d1:97:9a:df:06:7e:3b:13:17:cb:9d:df:
9f:62:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:08 2025 by rpki-client