Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eEXLuA7IrJRuSYX4TfueZ4dFVck.roa
File: eEXLuA7IrJRuSYX4TfueZ4dFVck.roa (raw, json)
Hash identifier: FNczkDRAR8N+QbjxXbuWQV4M2/euHW3ZDlZQlFanssw=
Subject key identifier: 78:45:CB:B8:0E:C8:AC:94:6E:49:85:F8:4D:FB:9E:67:87:45:55:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190800439836DE40E9A25915DD259EA5757
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eEXLuA7IrJRuSYX4TfueZ4dFVck.roa
Signing time: Thu 04 Jul 2024 23:11:18 +0000
ROA not before: Thu 04 Jul 2024 23:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:80:04:39:83:6d:e4:0e:9a:25:91:5d:d2:59:ea:57:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 4 23:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7845cbb80ec8ac946e4985f84dfb9e67874555c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:eb:75:fb:45:de:68:8e:40:d9:ec:ee:ca:
f3:15:0e:43:2e:a3:2e:ea:e4:40:8a:ec:22:4e:f9:
94:21:92:40:23:7a:ca:e2:4a:0f:80:21:ff:63:dc:
c6:1e:bf:3d:cb:c8:e9:d8:b6:d8:b5:33:79:62:35:
0a:05:fa:f5:a9:14:6e:58:f7:4a:1e:c7:d0:82:4f:
18:08:dd:f4:b5:37:39:52:5e:5d:93:b3:1a:75:2d:
3a:ff:a3:00:f3:2b:2d:1a:a3:61:bf:93:fd:ef:1f:
f5:0b:4a:df:b1:e9:5d:bc:f8:59:54:46:cd:6a:d8:
86:34:2e:af:9c:b6:5a:f3:61:f3:30:b3:48:a8:51:
0a:f1:35:3a:5e:85:3b:29:ec:04:b1:65:4b:a1:c9:
c2:21:c7:8a:58:cb:d5:71:a3:89:11:96:43:48:3a:
10:61:77:8d:9f:3b:4e:45:cc:2f:c4:de:b7:75:9d:
d6:40:96:02:2a:ec:14:99:08:a5:ac:f2:53:d5:65:
a0:65:07:a4:4a:7d:f1:88:bf:46:0a:58:16:17:3e:
73:f5:57:cd:7f:f6:a4:c5:cc:a7:00:34:a6:80:97:
03:43:90:83:82:fc:b3:2b:b5:35:53:4a:44:7f:1d:
b6:e3:8e:20:94:1a:eb:07:9d:a8:78:f6:8d:af:d0:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:CB:B8:0E:C8:AC:94:6E:49:85:F8:4D:FB:9E:67:87:45:55:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eEXLuA7IrJRuSYX4TfueZ4dFVck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:26:92:c5:0c:ef:c0:c6:19:74:25:a4:d7:99:9b:30:4d:01:
05:a9:0a:22:fb:10:8c:37:c3:dd:3b:81:ff:f7:9a:b6:46:ef:
39:53:5c:0f:df:25:32:d5:21:47:ca:05:ab:88:f3:3d:88:f9:
2f:9f:8f:5c:83:06:69:d2:04:0a:13:29:67:24:52:3f:76:b3:
b9:5f:0e:d3:17:d6:a3:7f:e9:4b:2b:50:56:b0:76:b9:d6:db:
2f:53:49:f7:c1:48:44:d0:27:96:85:1a:b1:de:d0:1a:01:07:
a8:06:6e:6d:23:f6:8c:91:88:9f:fb:a2:96:32:0c:0f:d7:bf:
6c:64:c0:bf:c0:64:eb:1a:69:ab:4b:8e:b3:e6:19:07:fb:ba:
f9:d3:95:70:06:ff:eb:66:aa:ff:7a:57:73:4a:bb:44:29:48:
9d:9d:20:07:f6:33:5a:b5:b7:59:b0:19:8f:bb:45:83:ef:f9:
c3:4e:5d:6b:3a:6d:1f:17:a1:e9:0d:c5:08:3a:ff:17:8f:ce:
be:ac:1a:7e:aa:80:2a:f6:d4:13:a3:69:ba:be:77:bb:60:f4:
c7:f3:67:d7:dd:45:cd:ef:79:a5:47:d9:21:b4:a2:99:b4:cd:
61:6b:d0:c4:a3:07:00:95:f0:f9:fb:1f:d2:0f:c7:33:ba:be:
16:f8:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:05 2025 by rpki-client