Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YjFJzctxYxgpsoEVRdzY6lKuLZg.roa
File: YjFJzctxYxgpsoEVRdzY6lKuLZg.roa (raw, json)
Hash identifier: HV3XwSMU2smoYmneD8M8WIVGRFeKnRoxltDPusLyGKM=
Subject key identifier: 62:31:49:CD:CB:71:63:18:29:B2:81:15:45:DC:D8:EA:52:AE:2D:98
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019061C1F1AC3146E72DF9AB2909A057756C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YjFJzctxYxgpsoEVRdzY6lKuLZg.roa
Signing time: Sat 29 Jun 2024 02:10:18 +0000
ROA not before: Sat 29 Jun 2024 02:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:c1:f1:ac:31:46:e7:2d:f9:ab:29:09:a0:57:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 29 02:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=623149cdcb71631829b2811545dcd8ea52ae2d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:c6:dc:72:9f:7d:e4:3a:7e:45:74:2a:9e:
20:66:3e:1d:06:23:0b:53:4b:a2:b7:70:ab:cb:b5:
bf:69:c7:39:6a:5a:ca:49:3d:94:d3:37:58:e7:38:
56:1f:39:f2:66:5f:09:ef:5b:bd:d6:72:95:d4:62:
63:bb:ba:70:a3:be:12:ee:6e:99:42:b8:d2:f5:da:
8c:ba:66:b8:5f:f4:6c:31:cc:9d:3f:74:e5:10:bd:
36:2f:21:09:ce:b7:22:95:82:0b:19:cd:04:c5:65:
f5:e3:48:3d:51:c0:a9:75:df:6a:00:91:ce:09:1b:
c3:99:f6:0a:c0:72:0d:c3:79:aa:6c:9c:83:25:65:
70:99:fe:75:12:7e:b1:9d:23:69:54:34:d0:b6:de:
58:35:a1:ca:2b:5e:0a:a4:bb:c3:3c:67:65:09:9d:
25:64:06:de:f0:14:4d:8f:dd:90:78:cb:19:9c:97:
64:30:36:8c:09:70:49:c2:7f:e9:41:16:99:4b:5e:
ff:6a:2a:0c:d2:65:7e:da:74:fd:16:3b:ee:23:e9:
52:c5:37:68:21:6d:56:54:ea:d0:dc:f2:00:d7:93:
49:4d:a8:5f:0d:82:53:1d:b3:31:74:5b:e8:f8:d0:
d8:36:55:d8:54:95:cd:65:39:2e:d9:e2:16:36:fe:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:49:CD:CB:71:63:18:29:B2:81:15:45:DC:D8:EA:52:AE:2D:98
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YjFJzctxYxgpsoEVRdzY6lKuLZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:4e:e8:d8:70:a6:de:20:f3:55:99:9c:3f:a4:06:b2:bd:a4:
86:4b:ff:4f:c7:b0:18:f4:a2:b4:27:ba:ea:50:57:61:5e:a7:
c1:3e:f7:88:c2:4a:67:73:50:d1:1c:8e:cc:64:0e:78:f5:1a:
fe:d2:53:2d:d4:c3:09:90:d4:b4:f6:91:07:15:1e:6b:14:15:
e5:34:f1:63:e9:d6:ae:18:bf:c1:5d:07:ad:b4:43:61:bc:72:
5e:4d:d9:58:16:fc:f0:f1:0f:88:0f:ac:81:73:27:24:df:87:
33:b8:54:6d:05:7a:a9:42:ed:dd:18:ee:b8:cf:cc:bc:66:2c:
2b:31:92:6e:c9:34:fe:0b:6c:a0:29:fb:1a:1e:86:d4:39:34:
63:3e:cf:58:1e:65:a0:a1:ac:1f:b2:1c:bb:4f:9f:2d:b5:5b:
67:a5:07:1b:cc:be:9d:3a:63:19:35:8e:f4:3f:23:17:23:0c:
82:8e:8d:df:75:4e:ce:01:7d:0c:bf:60:0d:7b:37:9f:31:fe:
48:d5:cb:be:07:ac:4c:4e:38:42:c4:d6:42:0d:d1:a2:e1:31:
8a:0b:a3:94:7e:89:06:fc:dd:b5:24:ad:4c:5f:3e:4f:74:ce:
d8:66:a4:96:f0:2a:3e:80:5b:61:2d:37:36:3f:3c:1a:86:71:
4f:4c:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:46 2025 by rpki-client