Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tug9IDwNCZ_I2e9dhy6BIKOSwN8.roa
File: Tug9IDwNCZ_I2e9dhy6BIKOSwN8.roa (raw, json)
Hash identifier: 9mlVA+LAunOn77ytt+MrxJMgPMQeLYFU/neJaSlQjpE=
Subject key identifier: 4E:E8:3D:20:3C:0D:09:9F:C8:D9:EF:5D:87:2E:81:20:A3:92:C0:DF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCB51828D78563B4B7FFC3D60B2CA57C3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tug9IDwNCZ_I2e9dhy6BIKOSwN8.roa
Signing time: Thu 30 May 2024 21:04:27 +0000
ROA not before: Thu 30 May 2024 21:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:cb51:58d2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cb:51:82:8d:78:56:3b:4b:7f:fc:3d:60:b2:ca:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 30 21:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee83d203c0d099fc8d9ef5d872e8120a392c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:c4:b5:e2:c4:eb:af:95:88:18:7b:cf:e6:
e7:14:08:1f:67:be:ab:a4:ea:fd:1e:9e:8a:72:a4:
f2:2c:cb:25:43:01:c0:9f:da:bd:ff:e6:33:13:3a:
97:09:8d:e1:84:4f:20:7e:52:e6:0c:88:61:2f:55:
b1:34:89:79:48:d2:e6:f4:0c:3a:e1:69:25:c3:4b:
dc:fa:f3:d2:71:f6:ba:d5:94:85:d3:aa:3a:05:99:
5c:55:74:41:08:f3:9d:ba:a9:d9:0a:86:29:a4:7f:
ad:24:6d:d4:0e:2f:9f:d0:bb:34:0f:5f:f7:98:5a:
da:5d:b6:4c:ea:df:e4:b1:b6:69:bd:a4:f3:17:90:
38:e6:27:d8:e8:a9:e4:8e:75:35:85:d5:a4:f8:28:
35:1c:8f:7f:7e:3b:b5:ba:4d:ef:16:31:b5:c0:51:
d9:43:08:5a:bf:1e:c5:49:1e:57:38:43:d6:8e:5e:
66:93:f0:10:ee:8f:fd:fd:c2:02:8d:09:6b:c5:5b:
8c:09:21:67:c0:af:9d:91:a3:61:3e:d8:6e:43:05:
eb:53:61:dc:fb:de:34:6c:24:cb:a2:d4:25:c0:d2:
c7:8c:9c:4f:25:1d:61:6e:50:b9:cf:80:89:59:61:
ce:91:51:e9:c6:d6:f4:ef:76:96:00:7e:77:2e:71:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:3D:20:3C:0D:09:9F:C8:D9:EF:5D:87:2E:81:20:A3:92:C0:DF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tug9IDwNCZ_I2e9dhy6BIKOSwN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:96:0e:5e:b8:20:c3:db:49:28:d5:2d:46:60:ac:85:d6:4d:
98:40:cf:a3:8e:4b:f4:59:28:51:a5:56:20:76:a6:d0:71:ba:
eb:19:dd:0a:56:b8:29:75:ed:91:70:d1:67:dc:32:b5:46:9f:
2b:99:5d:16:1c:32:1f:97:ce:8c:50:ed:7e:ef:83:5d:06:70:
f7:f2:c5:74:90:71:1d:7e:5e:cc:3a:97:a1:d7:65:71:fc:37:
41:a1:50:57:42:67:bb:b2:86:cf:39:26:9f:0b:8f:31:c0:71:
dd:ed:49:69:b4:4f:28:ed:b7:07:5d:bb:36:3f:51:ba:a4:e1:
40:21:af:0c:f8:bc:d7:41:e0:b7:e5:e6:22:41:93:43:56:ab:
1c:c6:be:73:6f:82:80:ec:61:52:3e:09:65:86:56:4d:06:9f:
74:65:ea:5e:2d:cb:96:55:5f:8f:f0:80:aa:04:88:2c:b0:d4:
65:3b:c5:1c:28:b1:fc:c2:92:64:1d:8d:73:68:ef:ab:71:94:
eb:e5:1e:a2:c1:c5:d7:ff:f7:7f:3f:5b:44:c5:8b:d1:5d:ab:
dc:d3:63:02:17:ad:2b:34:0a:66:dd:a4:7b:28:43:e4:a9:ea:
e0:e7:30:8e:b6:de:e5:19:32:76:a9:96:89:d1:f9:87:fe:45:
60:22:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:11 2025 by rpki-client