Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sc6GEi03fh6pesnVmmorxxOye78.roa
File: Sc6GEi03fh6pesnVmmorxxOye78.roa (raw, json)
Hash identifier: Vsyd9mLj99L0TNHkYqxDXiUeanWdcjduC2wjEpxCjnM=
Subject key identifier: 49:CE:86:12:2D:37:7E:1E:A9:7A:C9:D5:9A:6A:2B:C7:13:B2:7B:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190844EDA44D40845599C5C0CF86DAA9EE3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sc6GEi03fh6pesnVmmorxxOye78.roa
Signing time: Fri 05 Jul 2024 19:11:18 +0000
ROA not before: Fri 05 Jul 2024 19:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:84:4e:da:44:d4:08:45:59:9c:5c:0c:f8:6d:aa:9e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 19:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49ce86122d377e1ea97ac9d59a6a2bc713b27bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:a7:41:6b:1d:60:fe:c0:98:09:11:82:ed:
cf:a7:91:b2:ac:6f:8e:e2:db:b3:55:00:52:d2:a3:
bb:34:5f:15:f5:45:d3:47:01:67:0e:e5:ec:31:1c:
7f:23:7e:51:26:64:f7:a8:9e:83:60:c9:2a:62:a8:
0b:71:a0:55:86:4b:4d:ff:f0:1f:12:ec:39:78:f7:
45:7e:06:33:37:86:e2:79:b5:dc:a3:40:6a:86:64:
35:9e:f3:dd:98:52:0e:c3:03:1a:cc:dd:dc:cc:2a:
8c:2d:46:76:39:e2:6e:82:44:61:4e:64:95:c8:d0:
f9:0c:9e:ae:21:43:b3:59:c3:b3:fc:37:70:bb:43:
33:29:05:66:cf:1f:2a:0a:8b:e6:b5:6d:ab:ab:c9:
53:43:9b:db:38:b4:ba:8f:8f:56:b2:e0:8b:76:32:
7b:47:fc:e8:a2:73:df:3d:62:ad:c9:e2:cb:06:fa:
7f:44:ec:59:c9:bb:93:f7:0c:f1:a0:c8:f1:e3:4b:
14:cb:03:f1:65:c8:1f:64:9b:e3:6e:29:6a:dd:7b:
54:82:63:73:09:28:48:49:8f:f4:f3:49:8f:c5:c9:
83:f6:c7:03:c8:13:b5:12:f5:04:eb:84:35:f4:9b:
22:19:21:82:7e:39:66:fb:30:2a:3b:4b:2b:b2:79:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:86:12:2D:37:7E:1E:A9:7A:C9:D5:9A:6A:2B:C7:13:B2:7B:BF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sc6GEi03fh6pesnVmmorxxOye78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:57:9e:ec:6f:7a:33:f8:1c:4f:64:a8:ef:8c:45:76:e9:63:
1d:87:bb:72:37:28:43:d3:88:d8:e9:d2:85:74:b4:6d:54:ef:
7d:94:43:ba:2c:27:81:ec:1a:23:c8:3c:7e:b0:97:cd:bb:18:
32:3e:65:67:47:1b:23:68:de:9e:a4:41:89:99:5a:aa:66:42:
9e:dc:09:92:42:01:43:2d:a6:f8:92:63:3a:23:75:b6:22:5a:
5d:48:de:c3:84:1f:0c:80:40:0d:46:e4:39:93:3e:d3:5f:ce:
b5:c1:f4:5c:37:a3:7b:87:8e:5b:5f:48:4a:2c:4c:97:85:dc:
be:84:f5:0a:ce:50:4a:4a:7c:0d:fb:de:e8:a6:c8:76:56:0d:
9c:d2:0d:2c:a4:84:88:ce:93:e4:11:93:c0:97:58:19:bb:2d:
d3:44:e3:f2:b6:d5:0a:f5:fc:b3:1a:3d:8e:2e:de:29:f0:9c:
ae:0c:a1:2a:15:7b:62:98:12:57:66:c1:7d:54:56:72:c6:06:
e7:cf:bc:ce:04:d0:b1:f3:19:29:1d:d9:5e:11:e3:41:e9:f8:
11:0f:4a:27:3d:09:41:e3:48:80:eb:eb:62:52:f0:82:9a:d0:
8f:69:ca:ce:6d:6e:90:5d:24:b5:f4:02:b4:0c:7d:d2:d4:02:
0c:21:84:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCETtpE1AhFWZxcDPhtqp7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzA1MTkxMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWNlODYxMjJkMzc3ZTFlYTk3YWM5ZDU5YTZhMmJjNzEzYjI3YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhWnQWsdYP7AmAkRgu3Pp5GyrG+O
4tuzVQBS0qO7NF8V9UXTRwFnDuXsMRx/I35RJmT3qJ6DYMkqYqgLcaBVhktN//Af
Euw5ePdFfgYzN4biebXco0BqhmQ1nvPdmFIOwwMazN3czCqMLUZ2OeJugkRhTmSV
yND5DJ6uIUOzWcOz/Ddwu0MzKQVmzx8qCovmtW2rq8lTQ5vbOLS6j49WsuCLdjJ7
R/zoonPfPWKtyeLLBvp/ROxZybuT9wzxoMjx40sUywPxZcgfZJvjbilq3XtUgmNz
CShISY/080mPxcmD9scDyBO1EvUE64Q19JsiGSGCfjlm+zAqO0srsnlWzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEnOhhItN34eqXrJ1ZpqK8cTsnu/MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvU2M2R0VpMDNmaDZwZXNuVm1tb3J4eE95ZTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIhXnuxvejP4HE9kqO+M
RXbpYx2Hu3I3KEPTiNjp0oV0tG1U732UQ7osJ4HsGiPIPH6wl827GDI+ZWdHGyNo
3p6kQYmZWqpmQp7cCZJCAUMtpviSYzojdbYiWl1I3sOEHwyAQA1G5DmTPtNfzrXB
9Fw3o3uHjltfSEosTJeF3L6E9QrOUEpKfA373uimyHZWDZzSDSykhIjOk+QRk8CX
WBm7LdNE4/K21Qr1/LMaPY4u3inwnK4MoSoVe2KYEldmwX1UVnLGBufPvM4E0LHz
GSkd2V4R40Hp+BEPSic9CUHjSIDr62JS8IKa0I9pys5tbpBdJLX0ArQMfdLUAgwh
hHM=
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:23 2025 by rpki-client