Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tq5VvjZ4--i3eAAQleHhLINNw44.roa
File: Tq5VvjZ4--i3eAAQleHhLINNw44.roa (raw, json)
Hash identifier: D1t94bMIJk9Zv0PESqJiGk7kz+gk4Xx368HXfv9FJkw=
Subject key identifier: 4E:AE:55:BE:36:78:FB:E8:B7:78:00:10:95:E1:E1:2C:83:4D:C3:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908D51111CF0C503372D6B00D19F78E875
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tq5VvjZ4--i3eAAQleHhLINNw44.roa
Signing time: Sun 07 Jul 2024 13:10:18 +0000
ROA not before: Sun 07 Jul 2024 13:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:51:11:1c:f0:c5:03:37:2d:6b:00:d1:9f:78:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 13:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eae55be3678fbe8b778001095e1e12c834dc38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:4a:ac:aa:82:43:15:eb:9f:e8:1e:7e:a1:
f2:17:5d:30:d0:be:1f:cc:05:6b:26:72:e9:55:47:
87:fb:5e:46:ff:24:8f:5a:39:47:56:7d:34:2a:a5:
db:9b:f5:d0:ce:f0:d7:04:ab:a4:d6:36:79:89:83:
63:0f:5a:cc:d3:42:45:f2:34:15:72:d9:f8:32:c6:
47:21:ab:97:eb:34:2c:a4:c2:91:2c:b5:c1:04:fe:
38:bb:0c:57:40:65:03:1f:4a:9b:05:ae:38:ba:76:
d2:55:19:15:a9:8d:3f:b6:05:78:90:81:fa:74:7d:
92:59:33:92:3a:6a:93:9d:65:f6:a7:65:d9:46:ea:
80:47:df:32:fb:53:27:38:da:08:ae:e7:4d:23:17:
0d:e2:12:18:0d:12:5a:19:9d:b0:41:60:80:2f:f5:
de:00:7e:2c:59:2f:b7:e9:10:3a:bc:63:85:d4:79:
5d:d0:06:48:dd:39:6d:97:79:ea:55:c1:12:b7:1f:
2b:0a:7b:ea:bc:06:22:45:57:93:83:ab:bc:67:af:
7f:97:4d:57:81:b7:3d:d5:00:0d:bf:0b:d1:76:1b:
c2:53:98:31:f5:15:d4:ce:a7:08:c2:48:c1:8e:13:
96:08:2f:ba:23:95:df:d0:84:6c:77:1c:6b:76:f8:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:55:BE:36:78:FB:E8:B7:78:00:10:95:E1:E1:2C:83:4D:C3:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tq5VvjZ4--i3eAAQleHhLINNw44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:31:c4:84:61:54:c2:d8:74:fa:27:3f:b1:26:0b:dc:92:49:
aa:13:b4:fd:bd:c9:15:e0:a3:ec:49:83:93:bb:07:59:8d:55:
82:9d:a8:0e:43:20:6d:98:6d:23:dc:63:bb:06:ea:4e:a8:30:
7c:b7:bb:df:ea:4c:59:a4:d6:0b:07:ba:96:96:6b:c7:9e:28:
d9:55:8a:52:fa:8e:a6:56:58:d9:40:31:ca:d9:45:5e:da:5e:
5c:6d:65:44:3e:ff:80:96:47:fb:72:9c:df:96:22:d4:90:cc:
64:11:96:fb:02:f8:bb:6c:b2:8a:d9:3d:49:1d:94:24:af:5c:
52:4e:75:a6:6f:f2:29:c8:38:0e:28:5e:89:40:26:91:ba:6b:
6d:cf:15:dd:e4:3c:d3:f1:c7:be:2b:19:45:70:e7:c2:8c:b6:
3d:fa:a0:be:01:ed:c2:d2:8c:e8:f0:b5:a8:1e:52:9b:0a:e6:
5c:4f:a0:40:19:5b:b3:3d:55:9e:0b:a6:42:80:77:0b:62:54:
9d:b6:9c:0a:f2:a1:49:71:00:b6:f5:a3:b7:2b:8e:7b:3c:9d:
71:b0:5a:b4:e3:ad:4d:0f:18:65:4b:01:bf:0e:d8:6b:35:85:
98:4f:de:b5:94:16:d7:b8:01:a1:21:2a:78:26:d9:10:e8:f1:
a4:17:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:57 2025 by rpki-client