Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_iYnXhiiOZK617uw6Ouml4wkp9Q.roa
File: _iYnXhiiOZK617uw6Ouml4wkp9Q.roa (raw, json)
Hash identifier: HcFUJgbLVgA0CYYVh72f3eU/uZZMA6ivqw8OuT9c++w=
Subject key identifier: FE:26:27:5E:18:A2:39:92:BA:D7:BB:B0:E8:EB:A6:97:8C:24:A7:D4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019006F89B3BAE369AF8579EC1AA299B7F14
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_iYnXhiiOZK617uw6Ouml4wkp9Q.roa
Signing time: Tue 11 Jun 2024 11:04:34 +0000
ROA not before: Tue 11 Jun 2024 11:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:6f8:4e1e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:f8:9b:3b:ae:36:9a:f8:57:9e:c1:aa:29:9b:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 11:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe26275e18a23992bad7bbb0e8eba6978c24a7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:b6:da:6b:f5:44:95:3a:83:8c:ae:bb:93:
c7:f1:26:be:ec:14:55:53:e5:14:76:bb:b8:bc:65:
d3:98:51:04:ef:0f:89:09:20:89:24:cc:91:53:37:
2e:78:00:29:32:fb:66:dc:c2:9e:1d:17:84:e7:3c:
00:3d:bf:86:84:43:b0:d4:47:0f:3a:14:4d:f1:52:
78:c4:83:fe:40:c2:70:59:e8:37:f5:49:e7:7c:fd:
b3:72:fb:58:3e:26:14:60:be:1b:26:3f:ee:7c:6d:
7f:87:bd:5b:be:17:46:2e:e1:a4:ea:e2:10:e8:ec:
fc:84:05:f9:0d:a4:db:b6:9c:94:51:65:13:d8:4e:
d8:89:84:98:33:5e:15:0b:d0:2e:bd:6a:f0:00:81:
ad:13:68:a9:94:b4:3b:d9:30:f7:ce:55:ca:53:57:
1d:22:d8:2b:d8:fd:01:80:c3:9b:23:12:08:fb:20:
a9:0b:be:24:19:46:7a:9a:14:da:72:af:9d:a6:ae:
00:45:e7:29:5b:5e:b2:a9:a2:62:8e:b8:59:81:5e:
fb:9b:eb:77:e4:15:62:9f:65:89:8d:26:55:ce:88:
68:96:c1:76:2c:40:ec:0a:5d:12:e2:88:91:e8:f0:
52:d8:7c:33:6b:e8:be:44:e9:30:54:57:1b:40:9f:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:27:5E:18:A2:39:92:BA:D7:BB:B0:E8:EB:A6:97:8C:24:A7:D4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_iYnXhiiOZK617uw6Ouml4wkp9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:d5:c9:e0:03:3b:08:27:56:0a:c6:48:71:eb:ab:37:da:13:
44:50:73:86:49:4d:29:8d:ab:ca:09:ed:b9:1c:d2:65:25:97:
18:fb:ac:36:fc:29:9e:7b:51:3e:94:34:ad:39:55:47:43:9c:
41:cb:b9:94:69:87:bb:a1:b4:f4:44:5e:cb:06:d7:fd:7a:ad:
e7:7b:c8:50:9e:7e:33:57:be:35:35:bc:f9:e9:ab:de:df:2e:
c1:9e:30:2c:a3:fa:bd:99:62:7e:b3:85:ec:81:7a:96:b6:47:
5a:41:0f:f8:77:87:f7:28:ce:da:6b:49:d7:d8:d5:32:2d:c6:
b7:b1:2d:ae:72:9f:01:bf:52:51:65:a4:51:cd:31:e7:0d:1e:
e9:a3:76:5d:a3:e7:19:33:3f:81:04:c4:a2:8b:d4:68:d0:1e:
49:c7:f7:cb:fd:d0:4b:ab:13:3b:64:f8:d1:e7:0d:e6:e1:fc:
a9:7b:f4:3c:d5:aa:4d:19:a0:49:36:bb:1d:fc:ae:b8:c6:42:
b3:3a:3a:8d:b0:4f:e4:df:03:58:e8:86:ad:7b:d6:45:b5:a4:
74:c7:60:2f:b2:f8:29:e6:8a:51:c7:e4:20:97:39:e0:3b:01:
20:08:f7:49:6f:3e:3e:2b:02:8f:2b:6c:65:c4:c7:9c:f3:26:
2f:2f:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:01 2025 by rpki-client