Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RkDwDUoS9Pu1kSyChNutXbsns14.roa
File: RkDwDUoS9Pu1kSyChNutXbsns14.roa (raw, json)
Hash identifier: TikIpY0ncJQ6RLVwvstYpBwRvJylXWlrleT3X76dLeU=
Subject key identifier: 46:40:F0:0D:4A:12:F4:FB:B5:91:2C:82:84:DB:AD:5D:BB:27:B3:5E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01905D71D1280BA0ED5CE27CE0915928436D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RkDwDUoS9Pu1kSyChNutXbsns14.roa
Signing time: Fri 28 Jun 2024 06:04:18 +0000
ROA not before: Fri 28 Jun 2024 06:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:5d71:c349/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:71:d1:28:0b:a0:ed:5c:e2:7c:e0:91:59:28:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 28 06:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4640f00d4a12f4fbb5912c8284dbad5dbb27b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:59:d7:ab:25:49:01:18:62:da:6c:8b:06:
6d:30:f4:15:6b:64:16:b4:3e:b3:6f:85:2c:55:f2:
31:30:8e:bf:e2:a5:b5:7a:7d:59:12:9f:cf:0f:f2:
23:a4:87:0b:78:42:f5:0b:19:2a:e1:22:92:dd:b3:
6a:8e:a4:d0:ed:6b:e5:87:15:99:28:fa:ce:31:3b:
5e:2f:76:1f:c2:d0:5b:cd:98:14:d3:e1:a2:31:0e:
ef:35:52:9f:76:e4:0b:c9:64:42:1d:21:7d:51:21:
c8:f3:a6:bd:b9:cb:30:91:62:7d:03:1c:94:fb:f1:
84:b4:f1:24:59:2b:a8:e3:03:4e:1c:52:32:50:e6:
db:f4:8b:47:ec:08:e9:f9:ae:69:22:2c:86:d8:93:
79:b8:39:6e:cf:e7:c4:08:56:a9:15:01:44:9b:f9:
e6:50:64:cb:95:ac:bb:1e:41:25:42:21:b5:11:85:
00:af:88:62:11:29:13:3a:cb:5d:8d:49:7f:16:1e:
bf:08:bb:45:02:9a:9e:6e:29:9b:60:31:d7:3f:69:
5d:0b:75:e4:d9:01:69:ae:e4:08:0d:bc:ed:99:e4:
5d:f1:51:b5:85:04:5c:9d:59:05:8c:42:c9:e7:16:
9a:47:31:8c:17:b9:81:1d:02:f3:7f:ea:e6:ce:8a:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:F0:0D:4A:12:F4:FB:B5:91:2C:82:84:DB:AD:5D:BB:27:B3:5E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RkDwDUoS9Pu1kSyChNutXbsns14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:83:63:2c:ed:5d:74:d7:f6:71:8e:e3:15:5b:bd:ac:d7:97:
0a:87:07:f2:aa:c6:61:a1:4e:a6:f4:c0:04:be:ce:60:60:15:
5c:8e:99:a1:38:9a:d1:af:5b:08:59:24:8f:81:1e:0b:89:6c:
1d:17:9c:73:a9:8e:67:35:72:55:15:9a:dc:6c:00:29:1e:fe:
2b:29:42:15:fd:eb:5f:4e:a3:d7:b6:d0:54:bd:ad:c1:13:e7:
a2:d6:19:9f:8f:af:43:41:a3:66:1d:b8:c3:98:7a:e7:ad:78:
ee:62:ae:63:03:8f:71:35:fc:7d:b9:dd:b2:28:76:99:cf:68:
ac:6f:b8:52:9d:e6:42:c5:50:77:f7:37:f0:ea:f1:ee:68:1a:
42:27:ba:9f:60:fc:42:74:cd:fb:7b:76:62:06:47:12:c2:38:
0e:f4:54:06:87:22:35:b0:69:e7:b1:b5:d4:e1:47:6d:eb:e2:
ea:a0:87:c9:f1:cc:67:9d:19:04:41:bb:c4:1c:dc:2b:db:74:
8d:4f:c7:43:1b:86:70:f4:42:87:ea:57:23:16:29:bb:30:2a:
26:6b:54:11:04:c3:37:c2:c9:9e:70:a4:92:48:6d:97:a1:6f:
f6:53:06:1d:f8:32:39:70:28:67:0e:36:8f:5d:d3:c7:f2:cd:
18:d1:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:21 2025 by rpki-client