Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/URAtt3tLJwI2OACh3rGefvjs4Ok.roa
File: URAtt3tLJwI2OACh3rGefvjs4Ok.roa (raw, json)
Hash identifier: 5a6csmVqyxcKnW3eFbKIzjgVCOgz8T0bJol651nfwSc=
Subject key identifier: 51:10:2D:B7:7B:4B:27:02:36:38:00:A1:DE:B1:9E:7E:F8:EC:E0:E9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AB91C1F206F11A5D3A4D0EE96138A897
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/URAtt3tLJwI2OACh3rGefvjs4Ok.roa
Signing time: Sat 13 Jul 2024 10:09:34 +0000
ROA not before: Sat 13 Jul 2024 10:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:91:c1:f2:06:f1:1a:5d:3a:4d:0e:e9:61:38:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 10:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51102db77b4b2702363800a1deb19e7ef8ece0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:7b:01:a4:58:49:17:dc:fc:30:9b:62:18:
3c:09:42:98:13:d1:ba:fc:39:8b:ed:f5:50:52:b6:
17:13:13:43:8f:8f:57:31:4b:46:4d:88:91:35:05:
42:38:93:c4:c8:f6:0c:d0:7f:ba:ca:c7:8d:5f:fa:
98:bb:61:68:9d:69:61:fb:cb:72:c8:28:84:8d:7b:
d8:71:cc:d4:f9:ad:2e:e9:3d:3c:21:c9:5e:bf:3c:
0d:27:36:1c:31:b8:6d:8e:c3:82:3f:0b:68:16:41:
66:8d:e2:61:70:a5:0a:0d:f4:21:55:e5:6d:38:56:
0b:9e:96:12:48:16:39:7a:02:1e:51:b7:4e:a5:ba:
c4:c5:4f:18:43:25:a0:a5:8e:69:8c:5e:1a:9f:8c:
97:3e:5a:87:e8:e5:88:c0:fa:95:7d:54:5a:2a:0b:
80:26:31:ce:34:9d:69:92:97:d5:ab:d8:9b:37:52:
1a:ee:8f:01:e3:19:5e:9f:17:cd:0f:c7:46:6a:cf:
75:00:92:5a:76:18:3a:53:a8:d5:7a:72:e4:5c:e0:
3f:80:41:7a:52:03:e6:d4:d6:d1:ab:13:df:69:9f:
a5:33:c0:9c:ca:cf:53:0f:a5:04:52:f9:bf:ed:91:
95:53:9e:1e:2c:cb:92:3f:d4:3e:f1:05:46:a0:03:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:2D:B7:7B:4B:27:02:36:38:00:A1:DE:B1:9E:7E:F8:EC:E0:E9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/URAtt3tLJwI2OACh3rGefvjs4Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:b4:93:1b:25:de:0e:2d:3b:8d:5d:05:ea:44:1d:1f:5d:c6:
e3:6c:97:e0:56:e6:ad:02:96:9d:a5:63:7e:5a:e7:c0:1d:58:
4c:29:18:ad:43:b1:b3:4d:ef:46:51:41:6f:6f:aa:90:b8:2b:
a3:7e:4b:55:c8:2b:2e:b4:03:16:cf:29:8c:a2:78:c3:46:45:
78:78:a4:4e:83:1a:fc:37:16:4d:b5:c0:51:ec:e8:ff:b7:79:
ac:b8:02:42:fd:4f:6d:11:46:fb:17:f2:87:6e:fe:22:9a:af:
33:5c:4a:62:6a:5f:bf:e9:7c:7f:68:0b:3a:f6:10:f7:d5:ac:
78:5d:15:5b:75:21:40:9f:17:bc:06:32:4b:ab:1f:aa:cf:0f:
56:5b:50:6b:30:8e:3f:53:22:56:a0:76:82:e0:af:45:33:e0:
f4:70:1b:34:68:80:5d:9d:71:51:33:72:68:f9:4e:95:0d:ab:
3b:ff:79:1b:50:07:b9:ad:e2:af:ee:b0:7e:f3:6d:e6:8a:0d:
be:f3:38:5e:39:07:d6:7b:c4:30:7b:76:eb:da:93:5b:3b:72:
91:7c:4c:b5:bc:51:18:37:4c:e1:a6:67:8a:c0:78:f8:b9:d5:
f8:0b:aa:d0:59:17:5b:36:d5:1c:e1:60:2c:22:72:e5:a7:84:
c5:3f:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:09 2025 by rpki-client