Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZXV9uo3yjZLgrlgOxLNFOS4V5IY.roa
File: ZXV9uo3yjZLgrlgOxLNFOS4V5IY.roa (raw, json)
Hash identifier: q+RoD2KDksB/4BqPknzU3BpKaH3XQrZwlopkmm3mQWw=
Subject key identifier: 65:75:7D:BA:8D:F2:8D:92:E0:AE:58:0E:C4:B3:45:39:2E:15:E4:86
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900811AD7639E4506EE3D0CA64F539A586
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZXV9uo3yjZLgrlgOxLNFOS4V5IY.roa
Signing time: Tue 11 Jun 2024 16:11:34 +0000
ROA not before: Tue 11 Jun 2024 16:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:11:ad:76:39:e4:50:6e:e3:d0:ca:64:f5:39:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 16:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65757dba8df28d92e0ae580ec4b345392e15e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:1f:31:a6:68:9c:7b:aa:c7:6e:f5:7d:d5:
35:ef:14:1b:4e:be:97:95:16:3c:99:22:c0:89:d9:
1a:ed:ec:71:4b:af:cd:7e:50:ad:92:bd:c6:f3:85:
b8:30:9a:54:52:23:31:10:00:fb:8a:b0:51:ba:90:
c4:5d:9d:2d:a5:19:54:c4:ed:c9:8e:ac:44:34:b8:
e2:ab:ee:90:1c:25:e5:a8:41:53:07:8b:77:71:7b:
42:6e:63:0f:6e:97:84:3b:1e:d6:f0:3e:bc:89:19:
a1:f6:cf:1d:61:32:e4:e5:25:69:99:4b:97:a6:97:
7d:38:6c:bd:3a:b5:88:3d:4d:e4:09:d5:02:22:0b:
98:a0:cf:13:d9:69:18:59:5f:05:1f:34:92:c9:7c:
90:43:4f:b7:9e:59:9a:4f:42:2f:29:6f:5a:f4:9f:
30:ca:d6:54:d0:ef:a3:0a:3b:1b:2e:6c:39:0c:75:
8e:8e:b6:7a:bb:f2:a7:b7:9b:de:26:d2:05:9c:d1:
02:fc:af:7d:ab:12:fb:ef:24:7b:0e:8e:14:96:ce:
a8:24:63:27:ca:9c:8f:67:79:e8:68:7d:92:f2:33:
07:00:45:87:75:7c:74:01:79:c0:3d:71:04:8f:e7:
ea:b3:39:36:62:65:69:3b:71:57:12:d0:04:bf:78:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:7D:BA:8D:F2:8D:92:E0:AE:58:0E:C4:B3:45:39:2E:15:E4:86
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZXV9uo3yjZLgrlgOxLNFOS4V5IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:49:db:06:2e:18:7c:7a:6e:a1:b6:8e:e1:c5:12:76:9e:47:
9d:c1:44:8b:dc:bd:1d:4b:31:b7:bc:d3:2c:c6:7d:90:ff:a4:
9a:eb:3f:00:3e:54:cb:a7:88:c5:dd:9f:05:66:c1:fa:6b:3d:
c4:4f:7e:75:61:72:06:9b:04:75:70:6d:94:df:78:fd:e6:d2:
3c:61:e9:22:2c:0b:4f:48:2b:fd:49:d8:f9:6e:0f:18:82:c6:
70:d1:ef:f7:77:ea:92:5d:53:71:ae:ed:db:ef:a2:66:d6:f4:
a0:ee:a5:6f:00:4a:89:30:81:68:61:c6:03:1c:10:d2:2a:32:
74:ad:af:b6:5d:10:4f:1b:45:c5:64:ce:84:e3:21:e4:f0:05:
d4:4d:b4:bf:a7:65:8f:f7:db:50:5b:71:b1:35:d7:2a:95:6c:
b1:bf:99:0f:42:b0:22:ae:72:6b:19:e0:4f:98:21:86:8c:d9:
df:97:e7:65:73:a3:32:36:67:89:34:f1:bc:99:b4:bd:d2:53:
25:6c:25:cc:56:c2:45:cd:27:5d:03:39:c2:bc:9a:c0:90:12:
15:77:eb:3d:04:92:67:e6:0b:80:57:a2:11:71:b2:63:21:59:
c4:29:8d:cd:e3:74:ea:67:bf:13:ef:f4:22:8d:f5:c9:e8:2a:
5b:4c:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:20 2025 by rpki-client