Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezeu4_lDQNJeFacoeAgzpZiCOcY.roa
File: ezeu4_lDQNJeFacoeAgzpZiCOcY.roa (raw, json)
Hash identifier: DdFPGebwzzjUEOQDw5i+coSNs4dwqEk3pNgv9FXkdjY=
Subject key identifier: 7B:37:AE:E3:F9:43:40:D2:5E:15:A7:28:78:08:33:A5:98:82:39:C6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B384F8CCEA93953A819D9179253BC93B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezeu4_lDQNJeFacoeAgzpZiCOcY.roa
Signing time: Sun 14 Jul 2024 23:12:34 +0000
ROA not before: Sun 14 Jul 2024 23:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b3:84:f8:cc:ea:93:95:3a:81:9d:91:79:25:3b:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 14 23:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b37aee3f94340d25e15a728780833a5988239c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:d6:c5:b1:09:f0:96:e7:db:84:ad:72:7d:
f0:84:87:d2:fa:ed:61:fe:10:e0:1d:fa:44:2c:74:
ba:1e:46:19:dc:ef:09:1f:97:68:c8:fa:0a:0c:c5:
b8:9c:d8:84:23:e7:40:88:9c:de:48:b9:87:f4:15:
98:1d:21:e9:a3:d5:6c:6f:f0:d5:23:f7:6c:f4:d3:
e5:fb:35:fa:ba:54:80:07:6f:05:00:e9:1c:0c:79:
70:b7:8f:a3:15:1a:4c:91:c5:75:4d:d1:ad:28:af:
ce:bd:f2:ca:4c:4a:55:89:be:e2:a2:76:9d:4e:c1:
fb:4b:46:0a:a6:1b:08:40:c3:0b:4b:21:63:de:a7:
9b:86:54:2f:dd:71:7b:47:79:58:ab:ea:dc:0c:0d:
97:87:0d:a6:88:b1:4f:a4:69:68:c6:4b:95:88:66:
ab:a9:2b:8e:d3:a2:6f:b9:94:30:a6:24:76:d7:a3:
7c:1b:de:19:1d:60:97:da:c8:34:fa:43:50:29:72:
dc:fa:2a:a0:36:42:f6:21:e8:92:4a:e9:b0:1b:02:
1d:20:34:aa:ad:78:04:3c:f0:84:04:87:ed:09:dd:
13:e1:4c:d8:50:cc:60:30:93:61:be:b1:ff:12:53:
a0:c1:e6:03:4e:da:99:f2:c2:15:5e:d4:24:28:52:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:AE:E3:F9:43:40:D2:5E:15:A7:28:78:08:33:A5:98:82:39:C6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezeu4_lDQNJeFacoeAgzpZiCOcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:11:88:9a:b3:1a:48:23:0f:43:54:22:d2:bd:78:a5:e6:db:
5a:d4:15:9c:51:3e:16:81:5d:ce:27:81:93:e4:fb:28:ee:ee:
99:17:28:d2:06:57:0d:5c:a4:9e:0e:5e:ab:f1:3e:7e:ff:35:
59:b8:77:e6:89:a3:d5:ca:3d:77:58:77:16:2a:09:a1:ea:f8:
3a:61:dc:44:5c:15:d0:41:8c:7d:dc:2d:fb:62:75:a1:55:9d:
bb:24:d0:b4:39:25:24:c7:27:5c:3c:07:15:b2:e7:63:f0:84:
54:b0:42:d0:ad:e0:24:e4:d8:76:dd:68:e4:ad:bf:05:37:a6:
76:6f:97:1d:76:2d:be:ec:5c:49:f2:b6:c9:ce:19:4e:fc:cd:
c9:ec:e8:c2:88:75:8c:f6:db:61:82:13:3a:31:20:ec:2e:a5:
b9:ce:8b:3b:d6:0d:eb:39:0e:b7:17:f5:2b:dd:3a:59:7e:ee:
55:70:60:79:65:60:d2:6a:3c:21:f5:49:34:fc:e9:8d:6f:17:
ae:89:38:e2:49:fb:a0:1c:ea:72:4a:8f:fe:04:8a:ef:35:45:
4d:d6:61:29:b1:85:54:26:03:99:68:ab:0e:8f:96:e7:a6:d4:
17:75:47:cc:36:91:ba:09:00:f6:44:39:b3:35:95:c6:e9:c6:
06:da:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:01:16 2025 by rpki-client