Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e-kKKJ54aukOAahj59ZH13LqV4w.roa
File: e-kKKJ54aukOAahj59ZH13LqV4w.roa (raw, json)
Hash identifier: BDRMR67IWb42PZq/6GoClwbWBd4JR+jsPVc97thLeGk=
Subject key identifier: 7B:E9:0A:28:9E:78:6A:E9:0E:01:A8:63:E7:D6:47:D7:72:EA:57:8C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909842D21480E9361F04F17B35D0B69583
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e-kKKJ54aukOAahj59ZH13LqV4w.roa
Signing time: Tue 09 Jul 2024 16:10:34 +0000
ROA not before: Tue 09 Jul 2024 16:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:42:d2:14:80:e9:36:1f:04:f1:7b:35:d0:b6:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 9 16:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be90a289e786ae90e01a863e7d647d772ea578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:2f:89:50:0d:f0:e6:06:df:09:a8:a8:9b:
7f:b2:a3:84:dc:ca:3a:f6:ec:69:51:97:a5:c2:cc:
61:2f:00:ce:43:bd:31:18:29:0b:1c:72:70:63:30:
b4:65:e9:e0:05:b3:00:2b:c7:fb:58:77:83:97:e5:
c9:cd:68:6b:83:b5:70:37:b6:fc:09:8d:22:e0:b2:
72:b8:4a:00:4a:90:37:ac:0c:79:53:3d:e1:02:00:
68:47:53:b8:d1:2c:41:c9:3e:f7:58:56:72:59:d0:
af:4d:b3:9e:89:01:29:ad:90:dc:b6:c6:4c:d1:23:
30:6f:3a:b8:dc:84:ac:ad:a3:19:5c:ee:7d:b0:41:
42:60:fc:b2:43:94:c0:16:1c:36:c0:f7:6e:ec:a5:
ae:81:f5:fa:f4:16:83:07:3f:1a:40:70:7a:9b:47:
1b:df:cd:8b:92:aa:53:d3:39:66:fe:25:eb:1b:86:
0d:01:8f:8d:e6:b0:23:86:9e:95:aa:54:b2:8f:df:
50:31:fc:d7:71:e6:5e:fd:73:b8:53:b9:38:fb:f9:
85:b9:3d:c0:96:01:86:56:57:39:3a:9e:f6:ca:01:
87:7f:fb:f0:71:34:f2:a4:ec:de:99:ab:b2:52:6d:
4d:a7:7a:1a:a1:7f:02:c1:dd:f0:67:fc:f0:31:ef:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:0A:28:9E:78:6A:E9:0E:01:A8:63:E7:D6:47:D7:72:EA:57:8C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e-kKKJ54aukOAahj59ZH13LqV4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:5c:3a:6c:f6:52:75:a8:6c:29:6d:78:d4:23:58:d5:19:f0:
cc:c7:e1:b5:96:36:ba:76:e4:cf:0e:c5:eb:d7:39:ff:df:06:
11:30:15:9b:18:91:f4:a6:62:dc:97:95:5a:23:36:8b:7d:35:
1b:bc:a0:08:13:02:35:6e:ef:cb:db:ea:11:55:46:7b:24:02:
2f:4b:90:53:1b:14:8a:83:10:4e:00:09:35:c7:d8:d9:e2:3b:
ca:50:42:be:6a:22:ab:ae:44:78:18:d5:e7:ec:ae:5b:f0:f6:
0c:7a:2b:df:5b:09:1d:81:26:4f:e0:05:c9:62:7e:ee:ba:87:
30:1d:66:91:24:e5:eb:ba:1b:f8:f9:eb:49:e3:f8:82:e4:7a:
ee:51:c3:d0:64:eb:5a:7a:c3:d6:81:ff:7b:f2:c8:de:53:de:
a8:7a:b3:e0:60:1c:66:7c:ff:e9:ec:e0:a5:50:0d:b9:08:67:
04:97:80:de:fe:03:c6:cf:1d:ed:97:fd:55:03:01:ff:ac:e4:
84:e6:6f:75:2f:4c:b0:7e:b0:e1:92:d2:7d:5e:a9:dd:ff:34:
2b:1d:cd:f2:bc:b1:61:12:13:35:78:f0:49:13:f5:5c:61:97:
a3:e4:0d:17:08:29:e3:51:1f:55:58:ac:e4:56:f4:51:42:57:
22:92:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:07 2025 by rpki-client