Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa
File: feZlz7OHbEd-AXuEWAqDjapBv4g.roa (raw, json)
Hash identifier: pPdkdg6VDTnn3NA6evhvxvpXjtFpw98obk+CFEJD1iU=
Subject key identifier: 7D:E6:65:CF:B3:87:6C:47:7E:01:7B:84:58:0A:83:8D:AA:41:BF:88
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019000563406A6B03F75776A4845832E9B7D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa
Signing time: Mon 10 Jun 2024 04:09:27 +0000
ROA not before: Mon 10 Jun 2024 04:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:56:34:06:a6:b0:3f:75:77:6a:48:45:83:2e:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 04:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de665cfb3876c477e017b84580a838daa41bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:9f:7e:87:04:a9:74:35:80:5b:49:20:62:
17:e2:8c:5a:42:e1:aa:c1:53:ff:73:dd:54:c4:50:
0f:77:c5:62:c4:c6:97:52:2f:3a:2b:7d:02:97:a4:
f2:2b:bd:08:2c:7b:ef:b3:78:3d:15:45:09:c8:19:
e2:49:ed:0e:68:c9:a7:69:d4:6a:ba:c8:e3:4d:b8:
37:29:f2:88:25:a1:6f:d3:c9:c2:ea:50:b0:ee:d7:
9d:54:87:de:e3:aa:22:81:37:9a:cb:da:cb:58:e2:
39:bf:26:08:0a:a1:d6:69:07:ec:cc:43:82:f7:8e:
df:ff:0d:b2:5f:69:8f:86:cd:e3:10:bd:48:04:e1:
2b:1e:2c:10:2a:c8:fa:cd:4c:19:80:db:e9:c8:be:
5a:d5:47:4f:64:b5:4f:59:86:32:b1:4c:11:95:d1:
cb:42:59:0a:10:51:e3:51:8a:b7:0c:77:c8:ac:c5:
3c:3b:1d:84:3f:6d:ec:2c:75:7a:ed:e6:d5:72:fa:
98:4c:5b:e2:55:03:42:a8:ed:33:fd:fd:6a:6f:96:
44:6e:15:3b:ff:ae:0e:ad:05:8b:30:57:83:80:80:
46:de:3f:f9:1b:aa:b2:48:58:14:7e:bf:62:1d:7d:
fd:e5:be:ad:16:c2:77:12:66:24:e5:82:5a:53:6c:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:65:CF:B3:87:6C:47:7E:01:7B:84:58:0A:83:8D:AA:41:BF:88
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/feZlz7OHbEd-AXuEWAqDjapBv4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:37:2b:5b:0d:ad:05:0d:a4:0c:7b:69:7d:81:84:e7:4c:49:
6d:db:eb:2a:c0:20:aa:3f:24:4b:3b:e9:65:04:fc:f0:31:1f:
e1:43:95:12:53:98:82:f3:bc:36:e3:21:2f:a9:fb:98:df:d1:
d4:f4:07:9c:25:65:73:c8:5b:a2:74:43:de:7c:36:da:60:3a:
e4:45:24:82:ca:33:c0:6f:d3:5c:31:78:83:63:7a:98:34:1a:
34:a3:47:d7:6b:1b:0e:39:e7:92:17:7d:41:e6:49:36:b7:f0:
d3:db:ef:6b:2a:36:1c:42:74:eb:bf:2b:39:42:ee:23:8e:13:
ce:f6:83:d9:52:42:18:af:47:59:3e:76:5f:44:7b:ed:d2:ed:
79:24:86:fc:93:c2:d0:7b:7b:72:28:4d:ef:5d:f8:2b:6a:64:
26:06:5a:12:27:86:0f:26:ea:72:7f:1f:32:33:0c:12:99:7c:
43:e9:20:99:7c:c3:65:9f:76:8c:04:a5:1d:4c:ae:33:72:92:
97:71:ff:bf:30:2f:fb:0c:57:b5:06:0e:51:f3:69:57:11:10:
40:dc:da:68:52:06:ed:54:29:29:c8:37:ec:a3:c0:07:cc:2e:
2b:6a:e2:57:7c:5e:b5:83:e3:1e:e7:6e:ea:83:66:42:fc:1b:
3f:47:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:48 2025 by rpki-client