Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bAEddAHof5Y6LFSvjYo0Xu_UEAw.roa
File: bAEddAHof5Y6LFSvjYo0Xu_UEAw.roa (raw, json)
Hash identifier: LhllUwcL5Lk/TPBqZtjdb0WdC/6XW8/wZS/m4jObS3o=
Subject key identifier: 6C:01:1D:74:01:E8:7F:96:3A:2C:54:AF:8D:8A:34:5E:EF:D4:10:0C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD7C90A01EBDF1F388594FCA989A46100
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bAEddAHof5Y6LFSvjYo0Xu_UEAw.roa
Signing time: Sun 02 Jun 2024 07:10:27 +0000
ROA not before: Sun 02 Jun 2024 07:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:c9:0a:01:eb:df:1f:38:85:94:fc:a9:89:a4:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 2 07:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c011d7401e87f963a2c54af8d8a345eefd4100c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:45:99:e8:5f:aa:15:4c:41:a6:56:ad:a3:
8f:77:12:e0:71:a9:c1:72:93:8b:aa:d2:c8:05:63:
bc:22:29:2c:df:dc:74:58:1c:6e:58:7d:81:19:98:
06:66:ca:2e:62:78:ee:77:0f:12:53:27:46:05:af:
c7:0e:03:a7:39:43:a3:e2:7c:cd:9b:0a:e3:b5:2e:
1f:a1:08:ff:83:5f:73:83:83:97:9a:b9:d0:45:b0:
96:0a:38:2c:7d:fd:ea:b8:ce:8f:3e:85:5d:04:db:
e6:b3:8b:3f:fb:3d:26:2d:42:8d:6a:55:6e:3c:27:
aa:93:73:f0:92:60:ae:90:c5:38:1b:c3:46:b8:70:
d9:74:e4:ac:63:e8:20:91:12:bf:59:6f:10:dd:31:
63:95:cd:61:ef:9c:e8:fb:af:4d:64:1e:84:97:90:
56:2c:30:f3:ff:37:32:92:8d:e3:eb:f9:52:3f:8e:
08:03:94:68:88:6c:1a:70:49:50:7b:20:63:11:71:
40:89:75:04:23:61:74:8e:f1:1e:31:dc:d7:91:72:
ef:9e:d1:8e:62:8e:1e:92:6b:cc:85:25:a3:f5:7d:
b5:f6:c9:7b:27:a9:b4:c3:6a:e8:ea:c9:5d:58:3c:
ab:ec:9b:5b:a1:72:f4:84:83:25:72:d4:b0:04:ae:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:1D:74:01:E8:7F:96:3A:2C:54:AF:8D:8A:34:5E:EF:D4:10:0C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bAEddAHof5Y6LFSvjYo0Xu_UEAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:67:ae:a4:1f:46:9a:6d:1b:63:7b:77:eb:5a:c3:90:0e:88:
a1:cb:06:97:b3:0a:4a:2d:c3:57:41:41:56:11:d3:1c:5a:95:
f2:76:40:14:89:41:93:92:f6:58:02:1b:34:3d:3f:8c:73:82:
e5:fa:41:10:c7:cb:31:a4:e6:95:81:33:de:eb:19:a1:c1:be:
9b:8e:d4:a3:3f:f6:e9:18:39:f6:8a:49:a0:d8:4d:78:3e:5d:
ef:8a:35:d8:13:3a:93:3c:7a:21:77:37:43:bb:61:bd:b3:12:
c0:18:f9:56:03:0f:c2:68:97:b2:c5:30:9a:3b:a8:18:3e:5f:
a5:c0:4b:a9:45:e9:6a:b7:12:2f:93:44:9b:a6:41:07:23:12:
8f:35:f5:0b:db:65:e0:b2:7c:52:ec:92:ea:34:2e:50:b6:d9:
05:fa:28:cc:5d:38:21:5b:5e:04:6f:bc:b2:70:43:56:83:c5:
dd:d1:af:68:dc:a3:69:d9:c4:4b:31:a4:1b:79:88:b6:3a:a5:
14:5d:80:ae:d6:c7:7f:82:5b:f0:51:91:16:87:33:67:bd:a8:
f8:9e:ff:eb:34:11:06:67:56:bc:47:9e:45:ca:c7:86:25:60:
1c:76:fe:3d:5c:8e:4c:f0:85:03:22:73:69:22:60:0c:1f:ec:
10:8d:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:33 2025 by rpki-client