Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atAkZ-SAyUMQu_yx8rYRfIUzxHM.roa
File: atAkZ-SAyUMQu_yx8rYRfIUzxHM.roa (raw, json)
Hash identifier: GptdMf7gGXnHng8n9ewwq9D0lgo1owoiDyzdhXqk5G0=
Subject key identifier: 6A:D0:24:67:E4:80:C9:43:10:BB:FC:B1:F2:B6:11:7C:85:33:C4:73
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFB631C72587B22AB756DCFF210B1F953
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atAkZ-SAyUMQu_yx8rYRfIUzxHM.roa
Signing time: Sun 09 Jun 2024 05:05:27 +0000
ROA not before: Sun 09 Jun 2024 05:05:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:fb62:42f7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fb:63:1c:72:58:7b:22:ab:75:6d:cf:f2:10:b1:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 05:05:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad02467e480c94310bbfcb1f2b6117c8533c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:55:b1:f9:14:00:a2:a9:45:c1:67:1c:ad:
4e:22:44:19:f9:d9:a5:66:c5:24:fd:15:a6:c4:bd:
28:08:07:8c:ac:b4:6a:de:89:d5:80:d8:e5:a4:6f:
b2:44:7d:e1:68:65:7c:de:87:f2:1f:a0:f8:05:0e:
53:9f:47:3a:be:22:85:41:ec:a9:cc:96:dc:36:7b:
b3:4f:d2:00:48:fb:52:f8:46:b5:71:c6:ca:ac:31:
7c:ad:6a:90:07:97:cc:98:18:b5:70:bd:3e:3a:c7:
de:29:cd:f4:47:36:11:25:ec:54:31:d4:eb:2a:02:
44:61:20:b3:d4:95:b3:a9:1d:db:d8:fd:d9:88:bc:
05:8c:81:77:2d:77:da:ad:4a:7e:c6:66:b8:4f:0b:
cb:92:30:eb:c5:c5:41:99:81:b8:4d:93:0b:80:4f:
d6:6d:3b:d5:f4:19:cf:f3:25:8c:54:77:4e:cd:6c:
99:a3:18:f0:9a:6b:ea:5f:60:28:8a:17:ab:32:e2:
1e:69:dc:55:11:9c:0c:16:98:b6:12:55:00:4c:30:
27:d5:99:f0:a4:9e:ad:31:c6:2a:4c:0f:01:66:c6:
9a:2e:81:35:16:43:d9:3a:98:d8:cc:a7:f5:db:ee:
e5:14:cd:0e:30:dd:cc:3e:3b:52:51:89:16:a8:69:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:24:67:E4:80:C9:43:10:BB:FC:B1:F2:B6:11:7C:85:33:C4:73
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atAkZ-SAyUMQu_yx8rYRfIUzxHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c6:1f:b3:61:3c:d4:71:43:3e:04:f3:54:6d:da:c2:08:1b:
01:63:f0:96:20:ab:05:26:ae:1b:03:1a:a3:a9:6b:13:34:6c:
ef:22:96:35:49:7d:fa:f9:55:74:d0:ea:4d:18:ad:73:30:86:
1f:be:05:b7:fd:38:a8:66:de:3d:8b:2f:f6:cf:21:95:cb:13:
a7:92:42:d1:6e:ba:2f:19:c4:1f:23:f9:d2:d2:5e:a2:59:b0:
97:cd:b9:f7:43:d4:28:6a:7a:7d:f8:29:eb:87:c4:44:a1:70:
f1:76:52:c0:00:de:7d:33:7b:4d:2d:e6:99:f6:4c:a4:03:b8:
b8:b7:05:34:03:aa:1f:df:13:a6:b3:21:98:e5:92:64:e7:5e:
57:2b:aa:6e:22:ba:58:3a:03:ae:05:ed:e4:b1:46:af:25:6e:
19:d3:fb:ee:21:ae:c0:27:d1:d7:d1:48:0f:29:96:54:71:cd:
35:4e:ec:83:8e:08:c6:e5:9c:1c:7f:06:95:73:8f:33:b6:66:
aa:1b:6e:17:10:01:da:67:5d:a9:0e:0c:0b:a3:41:44:a5:6b:
74:36:09:69:dd:09:14:ff:e8:3a:ae:10:53:43:5e:d0:9d:a8:
68:81:38:ef:d8:07:bb:f4:4f:82:a5:90:5f:7b:b9:0d:9b:73:
e1:58:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:24:31 2025 by rpki-client