Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cvnXFl5Sfm_6lgtY-aBYEBnQnok.roa
File: cvnXFl5Sfm_6lgtY-aBYEBnQnok.roa (raw, json)
Hash identifier: mRrWDnn1rnpojxhzUdDdmFKzqTeZAxz/4/F5yyEvrFA=
Subject key identifier: 72:F9:D7:16:5E:52:7E:6F:FA:96:0B:58:F9:A0:58:10:19:D0:9E:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190859786E5579F3F3BB7909AD0FDDFC597
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cvnXFl5Sfm_6lgtY-aBYEBnQnok.roa
Signing time: Sat 06 Jul 2024 01:10:18 +0000
ROA not before: Sat 06 Jul 2024 01:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:85:97:86:e5:57:9f:3f:3b:b7:90:9a:d0:fd:df:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 01:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f9d7165e527e6ffa960b58f9a0581019d09e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:fa:a0:a0:42:4b:25:83:6d:eb:69:bc:9b:
5c:55:1e:07:d9:a2:5b:73:11:f7:d4:fb:e2:1f:36:
21:cf:1b:25:fd:87:1d:eb:1c:94:24:8b:b9:c7:21:
19:78:a3:f6:10:6b:a5:04:3b:3a:0c:50:2d:ef:53:
9e:ee:7c:44:7f:43:8e:86:6b:ef:a6:fc:2b:75:a8:
65:9f:d6:55:80:e9:71:cf:34:90:0a:e0:9d:f5:e7:
0a:ca:37:53:d9:0d:ab:45:c8:83:5a:c1:0f:7e:0f:
91:3c:26:bc:84:16:a5:49:46:29:aa:56:62:d0:da:
ca:59:17:a7:10:e2:01:90:ce:10:eb:d4:ac:22:81:
4f:2d:6b:24:25:a2:35:32:d8:dc:67:98:1b:46:44:
ee:5e:58:da:1e:e6:3b:9d:f4:ae:25:e0:8a:93:87:
99:d4:35:f5:f0:e1:52:c8:70:8e:61:9d:e3:9e:29:
4c:5b:c6:42:e7:b1:0c:b9:75:ca:17:fa:1c:58:b6:
0d:e5:22:2b:99:cf:a4:9b:37:29:36:4f:bd:77:9a:
91:de:f4:b6:54:e0:13:f3:a1:d9:5d:52:54:a0:f5:
64:48:3d:9b:ef:12:7c:07:e3:8a:33:62:f9:16:e0:
4a:bb:71:11:90:b8:7a:95:29:38:53:43:3f:cd:4f:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:D7:16:5E:52:7E:6F:FA:96:0B:58:F9:A0:58:10:19:D0:9E:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cvnXFl5Sfm_6lgtY-aBYEBnQnok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:40:21:6c:ff:a9:d8:2d:5e:b9:f8:54:e7:9e:f3:22:72:84:
53:ab:eb:8a:1d:18:a2:72:17:7f:ab:8e:cb:4b:37:52:80:6b:
91:ca:86:c7:63:84:95:c1:0b:51:0c:93:e5:59:85:b3:76:99:
0c:54:c6:e1:dc:1d:f0:ef:e0:65:04:50:e9:93:bd:c9:7d:5e:
76:40:39:0f:8f:3d:6a:b5:76:b4:e7:e6:05:c8:0d:33:9c:96:
93:bf:77:02:fa:67:92:0e:75:82:f4:29:80:24:1c:dd:32:de:
12:00:b6:73:92:8e:9e:22:48:3e:33:6d:40:69:33:d5:a6:9a:
77:91:27:b0:ed:2b:9a:a0:d3:d3:98:0d:f0:10:81:b0:95:ab:
9b:da:14:64:a5:3a:68:2e:bb:2d:90:b6:4c:a6:81:6c:d6:cf:
a3:4c:fa:bb:f4:06:18:b7:e8:7a:38:7f:55:07:30:75:83:52:
a1:d3:72:a6:38:0d:af:f2:f8:e6:54:dd:65:b1:50:8a:8b:48:
16:9e:22:3f:de:6b:fe:76:46:c1:76:01:f2:ff:90:b4:8b:8b:
85:e6:06:66:43:5d:9b:a4:99:6f:dc:31:23:5e:ad:1a:7a:16:
1a:b1:59:6b:fe:90:d7:6d:c3:03:50:a8:c7:23:62:0d:99:51:
42:2e:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:38 2025 by rpki-client