Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_IQzDho-ULtEfNw2Ge2vmyrcxuw.roa
File: _IQzDho-ULtEfNw2Ge2vmyrcxuw.roa (raw, json)
Hash identifier: YVKEW8wFMd+VWovLo1caXYc57MZ0FlZbDq/swS28u5U=
Subject key identifier: FC:84:33:0E:1A:3E:50:BB:44:7C:DC:36:19:ED:AF:9B:2A:DC:C6:EC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909C8C8992BC1470CF1B8E4500B9350C0A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_IQzDho-ULtEfNw2Ge2vmyrcxuw.roa
Signing time: Wed 10 Jul 2024 12:09:34 +0000
ROA not before: Wed 10 Jul 2024 12:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:8c:89:92:bc:14:70:cf:1b:8e:45:00:b9:35:0c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 12:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc84330e1a3e50bb447cdc3619edaf9b2adcc6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:9d:87:e5:25:d2:a1:92:0e:57:03:c3:e4:
a9:15:0e:89:37:f5:5c:ec:b9:f7:25:34:8f:15:ad:
c8:b4:91:2b:23:2e:bf:04:64:af:56:21:eb:6a:af:
01:7a:ba:65:3b:46:4a:3e:ff:7e:e2:6b:33:d6:71:
ad:30:e9:2c:d0:14:37:a0:14:db:37:2e:11:ec:d4:
04:45:2f:36:ee:89:22:ec:e3:b8:08:52:8d:35:d0:
1f:28:f7:47:07:7f:67:8e:67:5e:dd:77:a0:36:12:
f0:f5:6b:00:1f:03:3f:b9:b6:ee:67:dd:ae:a6:27:
71:4f:a0:e9:81:a4:60:af:94:48:66:4d:fd:9f:de:
56:d8:41:30:c5:d2:ad:bb:fc:7d:55:d6:c7:94:ad:
6c:2e:6f:fb:22:a0:4c:6d:40:69:b7:5e:7e:44:10:
26:54:88:1f:f0:55:fa:a0:45:a8:45:8d:d3:bc:6b:
46:3b:7d:bf:6b:1b:fe:c3:03:a8:fb:ba:fe:58:c3:
1f:e9:fe:ab:7e:50:2b:63:04:13:b5:5e:80:90:37:
4c:57:de:42:66:c2:57:47:46:68:c6:35:2d:94:c9:
a3:51:2e:be:b9:19:20:bc:3f:6b:f4:8c:d7:b4:5c:
39:8b:43:3e:f1:4e:cf:46:38:c5:96:5b:96:18:62:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:84:33:0E:1A:3E:50:BB:44:7C:DC:36:19:ED:AF:9B:2A:DC:C6:EC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_IQzDho-ULtEfNw2Ge2vmyrcxuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:c2:f2:59:ce:7b:fd:7a:bd:67:53:ca:5c:6f:be:2a:87:cd:
8d:56:4f:72:fb:ab:14:0b:de:b9:1c:e6:bd:64:a3:7b:34:98:
73:05:af:5b:da:7c:50:a9:d6:ad:25:52:81:a9:58:52:a8:eb:
dd:5f:07:3e:26:b7:c8:4f:d7:38:b3:c7:b7:95:52:6b:7d:b5:
37:a0:6b:09:72:82:33:54:0a:11:2f:65:fc:c7:27:be:91:cf:
0a:40:e6:11:2c:06:a6:ae:90:06:55:ae:bb:23:4e:42:83:9d:
5d:81:e3:1d:0c:aa:38:89:2f:69:04:f9:db:30:80:fb:50:77:
da:b5:91:cc:a4:a9:fc:4f:63:30:6c:8c:dd:75:a6:81:2b:19:
c2:63:48:65:60:7f:b6:1d:0b:8e:5e:98:e7:2d:3d:2d:65:8d:
5c:f1:06:e5:e7:2f:35:ed:58:bb:2c:59:4c:97:f5:25:df:6b:
e8:59:b8:fe:1f:e1:46:fa:3d:24:6c:16:0f:ad:9d:13:e1:7a:
c2:ee:34:40:b3:e2:c6:90:ff:96:30:6b:31:57:d3:b5:ee:c8:
80:64:eb:6c:95:11:64:dc:44:54:8c:4e:48:6d:cb:c9:0a:45:
1b:9c:0f:cf:bb:a0:aa:96:db:95:92:f6:09:4d:35:29:26:fb:
ec:30:4a:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCcjImSvBRwzxuORQC5NQwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzEwMTIwOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzg0MzMwZTFhM2U1MGJiNDQ3Y2RjMzYxOWVkYWY5YjJhZGNjNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiydh+Ul0qGSDlcDw+SpFQ6JN/Vc
7Ln3JTSPFa3ItJErIy6/BGSvViHraq8BerplO0ZKPv9+4msz1nGtMOks0BQ3oBTb
Ny4R7NQERS827oki7OO4CFKNNdAfKPdHB39njmde3XegNhLw9WsAHwM/ubbuZ92u
pidxT6DpgaRgr5RIZk39n95W2EEwxdKtu/x9VdbHlK1sLm/7IqBMbUBpt15+RBAm
VIgf8FX6oEWoRY3TvGtGO32/axv+wwOo+7r+WMMf6f6rflArYwQTtV6AkDdMV95C
ZsJXR0ZoxjUtlMmjUS6+uRkgvD9r9IzXtFw5i0M+8U7PRjjFlluWGGJUwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPyEMw4aPlC7RHzcNhntr5sq3MbsMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvX0lRekRoby1VTHRFZk53MkdlMnZteXJjeHV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABPC8lnOe/16vWdTylxv
viqHzY1WT3L7qxQL3rkc5r1ko3s0mHMFr1vafFCp1q0lUoGpWFKo691fBz4mt8hP
1zizx7eVUmt9tTegawlygjNUChEvZfzHJ76RzwpA5hEsBqaukAZVrrsjTkKDnV2B
4x0MqjiJL2kE+dswgPtQd9q1kcykqfxPYzBsjN11poErGcJjSGVgf7YdC45emOct
PS1ljVzxBuXnLzXtWLssWUyX9SXfa+hZuP4f4Ub6PSRsFg+tnRPhesLuNECz4saQ
/5YwazFX07XuyIBk62yVEWTcRFSMTkhty8kKRRucD8+7oKqW25WS9glNNSkm++ww
StQ=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:56 2025 by rpki-client