Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eYBVsyUQCro3xEQ0Uxv0rMt31YA.roa
File: eYBVsyUQCro3xEQ0Uxv0rMt31YA.roa (raw, json)
Hash identifier: 7n/QHSROlMwFvP4gyb5bA06C5CV6Phj4vsFcIFSaB0c=
Subject key identifier: 79:80:55:B3:25:10:0A:BA:37:C4:44:34:53:1B:F4:AC:CB:77:D5:80
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB2054BEE809FD5AA6A3838B6CB519A19
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eYBVsyUQCro3xEQ0Uxv0rMt31YA.roa
Signing time: Sat 25 May 2024 23:10:42 +0000
ROA not before: Sat 25 May 2024 23:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b2:05:4b:ee:80:9f:d5:aa:6a:38:38:b6:cb:51:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 23:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798055b325100aba37c44434531bf4accb77d580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:d5:f2:b2:26:d1:ca:93:02:1d:db:c0:66:
f0:41:9e:86:cf:da:47:36:4f:58:b0:ce:ae:20:ec:
de:d6:78:71:a8:4d:41:20:22:19:9f:71:c5:ae:6f:
cc:0b:14:7f:63:51:9d:17:e5:e1:35:d2:b8:bc:8f:
48:27:40:ea:de:59:95:42:d8:7d:10:5d:51:df:1e:
89:06:b4:0d:e3:9b:72:11:00:f7:6d:62:4a:a0:41:
21:28:c3:da:d2:c3:3e:f7:94:3d:a1:89:a9:42:c6:
25:00:ca:f4:26:3f:96:61:95:79:00:8b:b8:80:72:
84:12:10:3d:e8:39:6d:4f:6c:c8:03:4e:03:f8:70:
c4:08:0d:fc:b6:7c:05:26:11:27:9b:b9:e4:fd:ff:
86:1a:15:5d:d6:68:7f:0a:ed:c7:d0:f4:6e:29:80:
e7:1f:4f:23:aa:4b:72:45:7e:08:a0:e2:77:51:91:
89:40:aa:64:bf:b5:19:85:b8:5f:2d:1a:66:50:49:
83:53:27:42:cb:b0:d2:45:ec:2b:36:51:8e:d9:3a:
41:4e:35:91:01:d2:3e:3f:00:5b:72:76:fe:41:a3:
c9:ea:60:be:0f:60:68:13:4d:93:b8:35:00:36:5d:
9c:6a:72:e7:8e:42:51:20:4c:c1:7a:d8:14:c6:35:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:55:B3:25:10:0A:BA:37:C4:44:34:53:1B:F4:AC:CB:77:D5:80
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eYBVsyUQCro3xEQ0Uxv0rMt31YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:af:b6:fa:bb:f9:07:eb:b6:07:6a:fc:21:f9:9f:0b:ff:ca:
e5:ca:a0:46:ee:8a:de:c3:fa:35:b8:fe:c9:ad:db:e5:e7:93:
97:54:22:50:5a:0e:6b:43:af:52:da:30:69:45:48:40:e4:21:
c2:ac:37:8d:ca:d1:25:4f:b6:77:9d:4e:79:f7:fc:1f:b3:7f:
0a:95:82:14:57:53:4e:e9:aa:b8:e1:26:bc:3d:97:6c:f9:45:
83:d9:f3:43:87:f4:d6:10:c6:db:78:d2:4a:ab:ba:4c:9d:5e:
8f:7a:8e:d8:bb:78:1a:3d:13:e7:70:67:46:93:3d:3a:b0:38:
00:55:5d:18:e5:ef:36:21:83:95:14:6c:0b:58:ca:7b:3a:8b:
41:7c:29:5e:db:9a:55:ab:49:d6:6d:4c:27:e1:42:2b:d6:0e:
df:c2:fc:39:8f:a4:f2:56:c8:ea:4b:b1:1b:43:9a:c3:f4:cd:
8d:dd:c3:0d:73:d0:b1:e2:c1:19:fe:0f:a6:58:0c:ff:70:5a:
25:91:c7:5b:1b:5f:98:10:ee:7e:73:fe:a8:f0:be:c4:26:e4:
8c:a7:00:65:47:90:ed:f6:9a:3c:25:21:3f:8b:fa:80:8a:23:
c6:3b:f7:c7:6e:28:27:d1:ff:40:0e:d9:68:83:1c:1d:08:28:
23:48:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:47 2025 by rpki-client