Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aUsYOGje7BcS0pstjDzsjhIUotU.roa
File: aUsYOGje7BcS0pstjDzsjhIUotU.roa (raw, json)
Hash identifier: h3h3k6xUEvZ2QEOLuhJxfdxZa4Aqyu/qVdRFoegMa2k=
Subject key identifier: 69:4B:18:38:68:DE:EC:17:12:D2:9B:2D:8C:3C:EC:8E:12:14:A2:D5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906C0F9496150318B59D66DD8230E48C75
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aUsYOGje7BcS0pstjDzsjhIUotU.roa
Signing time: Mon 01 Jul 2024 02:11:18 +0000
ROA not before: Mon 01 Jul 2024 02:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:0f:94:96:15:03:18:b5:9d:66:dd:82:30:e4:8c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 02:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=694b183868deec1712d29b2d8c3cec8e1214a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:4b:b7:45:59:44:24:25:e7:6e:11:03:d7:
e1:a0:32:5a:52:c7:24:f6:10:73:70:a6:d9:2c:c0:
76:8c:03:7c:11:62:76:68:88:4d:70:65:a7:fb:1a:
d3:1b:63:90:54:a3:54:cd:7a:2f:bc:90:05:f6:59:
d4:05:a9:06:5e:71:e5:85:b4:6d:08:05:c3:5e:0f:
41:d6:a8:0c:09:66:e9:2b:4d:2f:ad:69:04:e4:62:
eb:34:51:5c:7b:91:c0:24:80:22:8c:16:ee:75:f4:
a1:8e:db:28:f7:ab:86:c7:1f:96:82:e8:98:34:4c:
a0:c0:9f:e7:57:e6:7f:57:74:d6:92:6d:a0:bc:e6:
e5:76:8c:7c:8f:c0:bb:ea:82:7d:f0:4c:45:cf:e1:
9e:4d:39:cc:29:13:5a:06:0e:ad:a7:69:90:a6:92:
3c:20:6a:f6:51:9b:89:9d:0f:a0:77:c8:e5:6a:38:
f2:60:da:dc:ad:70:7d:8e:85:4f:f5:f6:e3:18:29:
3e:2d:5f:4f:fd:28:2a:32:85:3c:8f:83:e5:db:09:
d0:a4:93:c1:c6:ae:cb:ec:14:de:a0:bb:8b:ab:9d:
8b:e7:81:5c:bb:14:5f:f1:bb:b9:db:f6:47:71:c1:
5e:fc:ad:d2:54:69:a2:6d:0c:5c:78:b9:88:28:9b:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:18:38:68:DE:EC:17:12:D2:9B:2D:8C:3C:EC:8E:12:14:A2:D5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aUsYOGje7BcS0pstjDzsjhIUotU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0c:f1:b3:8e:95:55:73:09:ac:06:32:88:59:e4:11:38:8e:
1d:28:84:b8:56:36:af:bd:3c:f6:35:40:c4:db:05:87:11:35:
38:2e:3d:0a:fe:2f:c3:f5:41:4e:7a:e4:af:a4:58:4c:32:6f:
72:c7:70:3d:23:5d:00:30:79:87:86:6b:22:cb:53:63:29:bf:
a6:cb:48:b0:0e:fa:7f:c3:98:91:99:43:af:b3:1d:14:a1:39:
22:40:4a:36:08:5e:6c:c2:83:a8:4e:78:7e:a4:7e:67:95:c3:
72:1f:55:91:eb:db:36:1b:85:be:23:42:d3:ee:c6:3b:d5:35:
6f:52:6c:9f:ee:a4:ee:20:87:65:92:e7:cb:a4:49:b9:5c:89:
ac:64:00:c1:ce:8e:d4:fe:da:39:4e:fe:f9:7e:65:f4:c2:3d:
26:48:0f:f6:ef:78:9a:f7:e7:14:aa:f5:d1:7f:d3:6e:f2:70:
6a:f2:d5:cd:71:70:43:78:32:94:b3:6a:2a:db:2a:a3:30:cd:
b6:bd:4c:aa:94:9a:61:6b:77:de:65:83:fc:3d:db:15:f5:f1:
db:04:84:46:5c:48:7f:37:c9:a2:1f:50:ee:1a:1c:78:a3:7a:
d5:19:99:ce:00:c0:85:49:aa:95:2b:04:1f:34:87:ea:87:92:
17:ac:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:16 2025 by rpki-client