Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xy04isW1xRE5_Xi4OaCKnRgW41U.roa
File: Xy04isW1xRE5_Xi4OaCKnRgW41U.roa (raw, json)
Hash identifier: xKS0vGt99Y00WGu5Qr1/a70sy335Y6CS081FSaG7WWU=
Subject key identifier: 5F:2D:38:8A:C5:B5:C5:11:39:FD:78:B8:39:A0:8A:9D:18:16:E3:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B08303334C441F252F561259BD842F8D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xy04isW1xRE5_Xi4OaCKnRgW41U.roa
Signing time: Sun 14 Jul 2024 09:11:34 +0000
ROA not before: Sun 14 Jul 2024 09:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b0:83:03:33:4c:44:1f:25:2f:56:12:59:bd:84:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 14 09:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2d388ac5b5c51139fd78b839a08a9d1816e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:54:b6:b4:3e:c1:6c:56:fa:61:5b:cd:af:
90:74:ba:ba:5a:a9:fe:96:c9:70:48:72:79:0d:17:
65:34:84:16:eb:57:0e:4e:c3:13:87:92:fd:5a:8f:
1c:c0:b8:b0:e3:81:48:01:c0:c4:da:3c:38:dc:1d:
a9:19:df:00:6a:8f:f9:fa:38:51:fa:5e:78:67:d5:
16:bc:e1:68:72:2e:72:2d:48:27:d7:81:71:dd:5c:
00:f8:d8:b6:1e:50:07:c8:ca:76:83:ee:d2:0a:93:
e6:00:e4:7d:79:1f:38:d9:fa:2c:49:b7:b8:a7:9a:
ff:4c:62:e9:49:4f:99:a9:ed:d9:76:10:ce:b3:e9:
1b:4e:a3:85:9c:ad:39:5d:f7:6a:27:b9:49:a7:ce:
ce:a6:d9:5f:c8:ab:27:94:31:46:1d:e2:3e:76:11:
95:23:85:40:7a:05:2f:37:87:9a:60:90:e3:08:ad:
2b:0b:e6:7b:f0:17:3b:5d:af:c9:0e:c9:19:69:a6:
57:97:19:19:06:ce:54:c3:b7:f8:1e:cf:d1:a6:a7:
4d:51:fe:3b:55:c0:d4:13:60:fb:52:9e:42:54:66:
7a:ba:4d:63:be:c3:de:13:61:a8:fa:d9:5c:0e:5a:
39:c4:af:82:ef:8e:55:a6:4c:be:29:d4:06:8b:50:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2D:38:8A:C5:B5:C5:11:39:FD:78:B8:39:A0:8A:9D:18:16:E3:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xy04isW1xRE5_Xi4OaCKnRgW41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e0:43:d4:c9:fa:bd:ef:e8:26:f8:05:10:6f:eb:9f:1c:51:
8e:a7:17:1d:71:78:f6:6c:35:37:e3:2f:21:bf:a7:c1:62:e0:
87:b6:0f:e4:6f:65:29:eb:87:1a:ed:53:d8:2a:b0:e9:59:c3:
2c:70:33:69:b3:8f:cd:4b:78:cc:12:50:ae:82:dc:5c:9c:84:
d4:d5:fb:55:e5:29:57:fb:e2:ac:f4:57:9e:49:3a:d1:c1:19:
f6:48:5c:69:07:bf:53:a6:d4:54:dc:17:09:56:21:a2:f5:21:
09:41:6b:ca:95:25:83:e3:39:6c:40:6f:da:ee:1b:a0:8b:65:
ee:fa:fc:7b:eb:4a:53:3b:b5:16:8d:a8:3a:32:9b:59:4c:e4:
91:95:70:b0:f7:44:e5:2c:5f:12:a0:13:71:dd:87:35:7f:c9:
18:ac:e0:c5:1f:02:70:9f:c9:df:b5:86:a9:6b:9b:aa:04:30:
b3:a3:24:f4:44:40:2e:e2:3d:1c:b3:49:15:25:70:cb:fa:91:
4f:40:d3:60:16:69:a7:79:2d:21:da:38:c2:4a:55:b3:53:c1:
6c:30:83:53:e9:e3:03:60:fb:a9:45:dd:6e:48:49:d7:3f:58:
0f:57:f3:56:a3:83:72:24:31:cc:52:12:52:ba:db:59:c4:87:
18:50:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:58 2025 by rpki-client