Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UL7K-sVO_bE-a2xskHNLojntK1U.roa
File: UL7K-sVO_bE-a2xskHNLojntK1U.roa (raw, json)
Hash identifier: 9MNdA5AYMfFlJZG4fxfZZK3ts9eCfdWp1O0newsftm4=
Subject key identifier: 50:BE:CA:FA:C5:4E:FD:B1:3E:6B:6C:6C:90:73:4B:A2:39:ED:2B:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190076CE112BC1E7286B47A7F44EB1BB07D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UL7K-sVO_bE-a2xskHNLojntK1U.roa
Signing time: Tue 11 Jun 2024 13:11:34 +0000
ROA not before: Tue 11 Jun 2024 13:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:6c:e1:12:bc:1e:72:86:b4:7a:7f:44:eb:1b:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 13:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50becafac54efdb13e6b6c6c90734ba239ed2b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:8a:8e:60:c0:3c:f7:a0:07:92:de:60:52:
b8:8a:af:1d:22:25:75:1f:4a:bf:d7:5f:58:74:12:
b0:9a:ab:5e:e7:b9:f2:23:a1:c5:3f:65:f8:1d:e6:
70:e3:db:d8:c6:aa:aa:b1:87:de:0d:51:4d:d4:cd:
23:50:08:a1:83:fd:9e:ec:e1:30:01:f2:0a:25:f3:
d8:b2:38:40:16:8d:bd:de:e3:67:2e:bf:f5:d2:50:
79:11:46:2a:33:7b:88:f0:c9:1e:7a:4a:6d:ef:0e:
f8:f3:b3:d6:16:a7:14:fa:f1:f6:4f:03:55:11:89:
45:a5:00:9b:0a:c5:fb:31:4a:2f:1f:54:16:25:1b:
98:2b:0c:e3:c5:a2:bc:05:83:99:d3:fb:d8:36:76:
93:37:97:1e:fe:48:50:7d:3f:1f:34:80:42:ab:07:
af:bc:86:3a:d1:fa:7e:88:02:00:d1:bf:e3:af:e2:
21:90:6f:aa:4f:d7:ee:99:74:f2:c2:39:0c:d5:e6:
e9:36:5e:22:81:b1:71:f8:c0:40:ae:43:bc:81:af:
f9:ff:ac:29:3b:33:fc:e2:17:b5:3c:14:62:e1:cd:
66:8e:2f:f7:e0:97:17:ca:d5:97:6f:31:fb:2f:75:
71:11:1f:d0:70:85:29:90:8e:3e:90:ad:f3:df:3b:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BE:CA:FA:C5:4E:FD:B1:3E:6B:6C:6C:90:73:4B:A2:39:ED:2B:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UL7K-sVO_bE-a2xskHNLojntK1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:00:fd:0b:53:89:0c:63:21:f3:14:4a:65:65:82:c3:84:d1:
e1:b7:7d:36:ae:29:29:26:e8:93:fe:d7:3e:f4:38:0b:55:be:
34:6d:06:72:21:16:bb:d4:d2:3d:60:16:fd:8c:78:e0:68:aa:
d9:bb:dc:36:f9:16:42:d6:b7:03:78:1c:76:fc:81:eb:38:9b:
96:00:7d:5b:49:dc:27:c0:a9:da:0b:09:d1:37:7b:50:05:0a:
ec:7e:8a:2e:3a:da:ba:1d:0d:24:49:d1:d3:99:1d:0a:b3:ac:
9b:5a:01:6c:f2:b1:07:40:39:1f:96:d9:c3:5c:85:54:15:ab:
39:7a:bf:9d:a1:7a:ee:57:da:f1:2a:b9:f4:70:c2:10:e4:8b:
8e:64:62:10:ef:9c:a9:09:41:82:41:c8:f3:70:c8:86:f3:62:
85:cf:7b:03:a5:e8:7d:5f:71:7f:5b:7c:f0:f7:17:6e:35:8e:
c0:6f:3a:1d:d7:ee:fa:fa:79:69:0f:22:e2:81:8e:3b:a8:19:
1c:af:fe:64:5a:28:62:f5:6d:20:7c:6c:5f:2c:5e:25:97:4d:
c1:2d:ab:02:e4:62:5e:99:da:f8:f1:3d:5a:10:a7:d1:9f:64:
63:81:7e:bd:1b:4b:6b:8c:d7:7f:79:c3:d5:16:c7:57:c6:10:
cc:d5:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:39 2025 by rpki-client