Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gZsvIctg1P1vAryEdIWfS_UckDY.roa
File: gZsvIctg1P1vAryEdIWfS_UckDY.roa (raw, json)
Hash identifier: mBfKv7SfY9R/Yp8OsR+wV8sjrZozMnD71WHGy9KAx6I=
Subject key identifier: 81:9B:2F:21:CB:60:D4:FD:6F:02:BC:84:74:85:9F:4B:F5:1C:90:36
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B496B63CC54A505CA610C3AA6FBF6E6C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gZsvIctg1P1vAryEdIWfS_UckDY.roa
Signing time: Mon 15 Jul 2024 04:11:34 +0000
ROA not before: Mon 15 Jul 2024 04:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b4:96:b6:3c:c5:4a:50:5c:a6:10:c3:aa:6f:bf:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 15 04:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819b2f21cb60d4fd6f02bc8474859f4bf51c9036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:36:46:b8:52:08:ad:92:13:92:b5:16:63:
eb:b0:5f:0d:85:9f:5f:ae:7e:81:81:0f:20:c8:90:
a0:d4:9f:f9:48:1e:e7:e5:a7:c6:19:34:c1:31:55:
a3:3d:cc:24:ef:92:bd:f6:cc:b3:79:1f:21:e2:56:
00:84:3c:d5:80:4b:44:e3:b6:2b:58:d0:7f:a9:6a:
60:b1:e6:f4:9b:38:54:07:f1:25:4c:7d:7d:b8:67:
26:97:a5:79:45:47:a9:05:41:e7:5e:ee:72:d6:7e:
94:34:e2:58:43:ca:77:d8:1e:2b:65:21:73:71:99:
f7:e4:9a:8d:4b:40:10:83:84:fd:b6:d5:71:f8:be:
4c:e4:5b:17:a7:63:9e:10:e5:85:45:39:61:4f:da:
a7:e2:21:49:07:9e:c9:48:c5:2a:f6:2a:47:bc:08:
38:fe:9c:ce:69:34:50:86:10:04:97:a6:64:f2:6b:
91:fd:ce:80:98:1f:5e:73:47:a7:2f:16:18:72:8a:
f8:b6:73:27:fd:be:97:ac:9e:ca:10:51:b7:bf:9c:
f3:78:5c:da:fc:05:05:c2:ee:84:d6:02:c0:b1:49:
58:f1:ad:4b:bd:78:40:99:2f:c1:54:be:03:14:91:
7c:f1:a3:98:8c:9d:aa:19:94:11:f6:2f:b1:ee:ad:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:2F:21:CB:60:D4:FD:6F:02:BC:84:74:85:9F:4B:F5:1C:90:36
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gZsvIctg1P1vAryEdIWfS_UckDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:48:0d:5a:66:e6:2f:78:ee:35:4a:9f:eb:4e:81:b5:4b:c1:
52:60:0c:a4:2b:48:cd:b5:ff:24:bb:9e:a5:c5:e0:af:65:7c:
fd:9c:d1:a6:f4:a6:1a:fd:b4:5b:f0:70:8c:c6:46:60:d2:1a:
47:56:50:23:6b:1a:52:89:ee:ce:6f:20:d0:ff:79:8e:8b:2d:
06:3e:21:9e:d0:44:9a:87:48:d0:59:41:d6:74:14:f4:7d:33:
81:90:23:a7:3b:f8:69:f0:66:2e:be:59:cc:9b:49:02:12:3e:
06:91:24:af:aa:c5:3a:95:be:4e:a9:93:6d:af:7c:67:6e:c0:
fc:9e:48:a3:5a:d5:b6:d0:18:18:09:c5:93:80:c3:5d:c4:13:
9b:0c:57:b6:5c:33:c9:47:42:84:be:8c:7a:5c:2d:ba:aa:96:
cf:44:89:63:4a:26:73:7f:7d:bd:25:1d:70:89:18:f7:ee:49:
d7:19:a8:08:1d:00:ba:a3:81:69:98:3c:01:89:10:99:05:b1:
7c:4e:01:69:3d:b9:7b:02:24:15:c6:36:e5:94:b3:cc:7b:54:
77:94:1f:3d:5f:eb:6c:03:fe:68:55:89:ca:78:d8:5b:cb:9a:
1b:dd:5b:b5:46:2a:53:19:33:37:78:9d:52:08:1c:43:30:fb:
d7:95:d1:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZC0lrY8xUpQXKYQw6pvv25sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzE1MDQxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTliMmYyMWNiNjBkNGZkNmYwMmJjODQ3NDg1OWY0YmY1MWM5MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntk2RrhSCK2SE5K1FmPrsF8NhZ9f
rn6BgQ8gyJCg1J/5SB7n5afGGTTBMVWjPcwk75K99syzeR8h4lYAhDzVgEtE47Yr
WNB/qWpgseb0mzhUB/ElTH19uGcml6V5RUepBUHnXu5y1n6UNOJYQ8p32B4rZSFz
cZn35JqNS0AQg4T9ttVx+L5M5FsXp2OeEOWFRTlhT9qn4iFJB57JSMUq9ipHvAg4
/pzOaTRQhhAEl6Zk8muR/c6AmB9ec0enLxYYcor4tnMn/b6XrJ7KEFG3v5zzeFza
/AUFwu6E1gLAsUlY8a1LvXhAmS/BVL4DFJF88aOYjJ2qGZQR9i+x7q1tswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIGbLyHLYNT9bwK8hHSFn0v1HJA2MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZ1pzdkljdGcxUDF2QXJ5RWRJV2ZTX1Vja0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHJIDVpm5i947jVKn+tO
gbVLwVJgDKQrSM21/yS7nqXF4K9lfP2c0ab0phr9tFvwcIzGRmDSGkdWUCNrGlKJ
7s5vIND/eY6LLQY+IZ7QRJqHSNBZQdZ0FPR9M4GQI6c7+GnwZi6+WcybSQISPgaR
JK+qxTqVvk6pk22vfGduwPyeSKNa1bbQGBgJxZOAw13EE5sMV7ZcM8lHQoS+jHpc
Lbqqls9EiWNKJnN/fb0lHXCJGPfuSdcZqAgdALqjgWmYPAGJEJkFsXxOAWk9uXsC
JBXGNuWUs8x7VHeUHz1f62wD/mhVicp42FvLmhvdW7VGKlMZMzd4nVIIHEMw+9eV
0ds=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:02 2025 by rpki-client