Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6pab99kOje8kwvLzHc3XunPJCM.roa
File: _6pab99kOje8kwvLzHc3XunPJCM.roa (raw, json)
Hash identifier: J/DjlVW4fEoahpex03Iim7e9ffM3jUimJJ1qXpeySdQ=
Subject key identifier: FF:AA:5A:6F:DF:64:3A:37:BC:93:0B:CB:CC:77:37:5E:E9:CF:24:23
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909429A02BB1B11D421F0C59926882D088
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6pab99kOje8kwvLzHc3XunPJCM.roa
Signing time: Mon 08 Jul 2024 21:04:34 +0000
ROA not before: Mon 08 Jul 2024 21:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:9429:78bb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:29:a0:2b:b1:b1:1d:42:1f:0c:59:92:68:82:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 21:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffaa5a6fdf643a37bc930bcbcc77375ee9cf2423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:0a:36:2e:75:f1:1a:9d:aa:bd:fe:71:76:
8c:4c:35:2e:04:c8:4e:b6:cf:8b:64:61:91:2a:52:
ad:26:12:ec:31:88:7d:7f:cc:9f:2f:05:20:9a:5d:
00:c4:f1:ef:db:47:a9:e5:f1:a0:c0:f8:92:2e:e3:
ff:16:ed:f4:54:13:ff:61:34:25:cb:cc:3a:14:93:
57:1a:6a:66:99:17:79:5a:38:6f:69:fe:66:ca:b9:
b1:2b:af:e3:91:67:b6:97:86:6a:8a:90:09:d4:f7:
e4:48:4e:6a:93:ba:70:d3:07:81:98:64:eb:41:be:
a2:31:10:55:74:73:d6:9b:9e:11:a8:4e:e2:69:af:
6b:04:df:e8:fa:2b:d5:c7:52:86:60:f3:aa:f0:cf:
4e:17:88:34:13:0f:28:a1:1c:f4:f3:5e:9b:e0:ef:
70:a7:aa:61:0d:9d:45:ee:8d:b3:58:67:b3:bd:28:
0b:d3:39:21:fe:83:33:1a:5a:d7:df:79:f9:09:b0:
84:7f:09:ba:14:18:a9:74:9a:bb:9b:d4:95:2c:4c:
1e:c9:bd:c5:6a:b8:71:00:45:82:a4:9f:2f:0c:cf:
47:1e:7d:e3:4c:3a:cc:1f:90:18:86:a2:8a:f7:4d:
2a:38:06:5e:39:37:48:82:dd:7e:fc:c9:b5:43:fa:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:5A:6F:DF:64:3A:37:BC:93:0B:CB:CC:77:37:5E:E9:CF:24:23
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6pab99kOje8kwvLzHc3XunPJCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:16:95:75:8b:1b:03:cb:d8:b3:fb:e6:97:64:cb:03:99:39:
c3:d1:14:b5:52:79:45:71:c8:23:22:6e:05:b2:50:e5:cc:53:
7d:0f:e4:7e:03:da:19:e4:4d:fc:92:a0:91:6e:89:c8:a2:cf:
fc:ef:76:20:e6:f6:e5:e4:24:44:14:a3:2a:b8:14:98:89:79:
74:eb:db:60:6f:35:56:83:bd:f1:55:0f:77:a5:50:90:9e:b7:
81:0b:89:be:fd:78:3a:b4:e1:2b:35:04:59:34:6a:16:48:ba:
c7:5f:30:12:55:7a:95:b3:7a:c6:0a:0c:30:4d:76:61:2b:b0:
31:54:9b:2f:d2:67:f6:a2:d2:dc:c0:7e:66:c0:71:77:3b:02:
5c:22:1b:d0:05:2a:31:ad:a1:f2:7e:35:9d:82:37:e6:f6:d1:
27:d6:78:57:df:72:89:29:ac:fa:6f:0e:25:b8:4d:a5:77:72:
c0:32:6d:5c:c8:f0:2c:ab:68:62:6f:a1:d3:37:1f:13:15:0d:
93:75:44:39:95:60:c4:a7:9e:0c:34:b4:c3:b3:ce:f3:a9:51:
3a:15:f3:1d:17:f2:8e:60:df:4f:e9:76:c0:60:27:87:c7:8e:
8b:a5:9e:1c:9a:3e:1d:d0:36:f9:b2:92:fd:b4:60:90:d3:d6:
26:ce:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:54 2025 by rpki-client