Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cbUc_VuWp2ZjTiVNyYYB-iG1ShY.roa
File: cbUc_VuWp2ZjTiVNyYYB-iG1ShY.roa (raw, json)
Hash identifier: wyW1fOosY7H/8qVjNFQByG47K2qMUe4yzFdxovP6qKw=
Subject key identifier: 71:B5:1C:FD:5B:96:A7:66:63:4E:25:4D:C9:86:01:FA:21:B5:4A:16
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB5E2FAC56EE854BD1D5C8B99777C2524
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cbUc_VuWp2ZjTiVNyYYB-iG1ShY.roa
Signing time: Sun 26 May 2024 17:11:42 +0000
ROA not before: Sun 26 May 2024 17:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:e2:fa:c5:6e:e8:54:bd:1d:5c:8b:99:77:7c:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 17:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71b51cfd5b96a766634e254dc98601fa21b54a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:c5:a3:c7:f5:98:81:af:67:41:66:28:da:
fc:5b:46:1a:f6:2a:59:60:ff:0d:cd:61:01:c9:36:
0e:1d:40:89:d2:a8:4c:d1:70:a5:cc:be:78:eb:02:
c1:46:8b:76:47:2a:a5:93:53:ed:00:35:29:29:e5:
62:5a:cd:e4:eb:94:e4:0b:1e:45:cc:eb:a5:35:14:
9e:3e:62:fe:63:aa:74:4d:aa:bb:36:f0:f7:f3:57:
1a:c5:8e:8b:0d:dd:9c:c1:79:94:f8:66:5b:32:1b:
70:9d:a6:e0:ab:b1:f9:30:7c:c8:ca:86:5b:3e:4e:
56:b2:46:af:27:8c:d5:95:17:36:59:0a:5e:2e:01:
e1:d0:61:07:61:9a:10:15:d1:53:36:2b:dd:ac:2e:
38:5c:8f:33:5c:16:fe:08:56:87:e0:a6:e1:8e:91:
8a:ad:48:3a:a6:b3:13:dc:65:9d:d2:bd:97:3f:83:
3c:c3:74:76:35:b5:49:7f:c0:a4:58:f1:66:1a:24:
f0:b6:ae:8d:5e:c3:e4:82:83:41:71:24:9f:70:46:
b4:6b:45:3a:0c:c2:41:04:0e:fe:8a:2f:de:7a:05:
0e:11:02:9a:9d:21:db:3f:1b:d7:8a:6b:6a:0e:17:
43:96:58:8e:f3:5d:49:6e:f4:23:ef:1f:6c:ad:c6:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:1C:FD:5B:96:A7:66:63:4E:25:4D:C9:86:01:FA:21:B5:4A:16
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cbUc_VuWp2ZjTiVNyYYB-iG1ShY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:5c:ae:af:58:52:13:63:91:d5:b9:dc:bd:e6:1b:77:d1:36:
9e:ae:6e:e6:5c:2f:85:af:bc:a8:0e:cb:8b:a7:bd:65:e4:09:
98:4c:a5:55:a5:8f:4d:2b:43:55:11:d1:13:c0:1e:28:8e:d4:
b3:bf:e3:a0:30:0e:e8:7c:bc:43:f9:a7:24:ec:ea:b1:a7:3b:
d0:5f:4c:dc:96:44:a3:94:36:42:f4:a7:c1:1d:ec:13:61:f2:
0b:bf:e5:84:f6:8e:d1:5c:91:88:3b:a2:10:e9:a2:b2:a7:d1:
46:30:c1:1c:97:20:ad:38:f6:a1:1f:1b:d4:03:49:57:71:e8:
33:13:14:7d:22:aa:0b:a7:59:2e:57:fa:a3:8d:88:01:a5:8e:
03:e3:ed:fa:66:71:45:a7:f2:2c:f3:1a:3b:a8:ee:99:42:ab:
ca:ee:42:63:ba:19:17:47:2e:7a:50:c0:a4:be:73:13:cd:d1:
f8:ec:f2:0a:6a:41:bb:dc:8d:94:7f:1c:62:9c:34:44:3d:12:
63:3a:99:30:bd:38:16:e3:9c:0a:81:e4:0f:81:6f:7e:cc:8e:
aa:30:22:a4:c4:fb:bb:6a:43:9c:bf:2d:29:73:6f:99:4b:f9:
51:48:d3:60:1f:74:af:ae:f9:e1:77:97:31:46:2c:fc:18:d4:
7d:e3:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:44 2025 by rpki-client