Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/glbkKdjFbuR3bSTxL5bB5qcndKk.roa
File: glbkKdjFbuR3bSTxL5bB5qcndKk.roa (raw, json)
Hash identifier: 3C4wQxP2m++V/JTodacCyLKEok/0r+zChQ+gKFM4nV0=
Subject key identifier: 82:56:E4:29:D8:C5:6E:E4:77:6D:24:F1:2F:96:C1:E6:A7:27:74:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AAB7DB810DFAC03C87C9FEDC412D7987
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/glbkKdjFbuR3bSTxL5bB5qcndKk.roa
Signing time: Sat 13 Jul 2024 06:11:34 +0000
ROA not before: Sat 13 Jul 2024 06:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:b7:db:81:0d:fa:c0:3c:87:c9:fe:dc:41:2d:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 06:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8256e429d8c56ee4776d24f12f96c1e6a72774a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:01:b9:4f:04:01:f3:68:b5:d0:11:6b:03:
ad:07:d8:68:09:2a:36:2f:0d:0e:68:f7:f8:aa:f6:
af:76:5a:5d:77:c2:06:63:70:7a:91:0c:9d:95:2b:
98:0d:82:e5:1d:0c:a1:88:cd:bf:06:d9:c3:66:15:
54:cb:99:b6:e8:db:94:a0:0c:02:ae:c7:5a:bf:8e:
ff:c4:31:5f:f4:18:84:bf:3e:16:61:be:3b:bd:65:
ea:80:4c:fe:a3:4b:8e:ab:42:0b:6b:83:89:9a:25:
dc:32:25:88:6c:b9:92:4a:bc:07:aa:ee:a9:a8:56:
8f:12:9b:81:7c:68:da:84:8e:09:74:49:d8:4e:b4:
92:d7:3d:e6:a7:7a:bb:d2:4b:5b:a6:00:0f:3f:8b:
eb:0d:46:66:ca:c0:1d:27:d7:21:9c:12:9e:08:87:
03:ab:32:bd:70:7e:0b:f8:f0:ce:2a:80:d2:f5:7e:
01:2a:ba:17:83:6b:b0:71:2d:fa:eb:76:27:a4:1b:
69:0c:35:bc:c4:e1:51:fe:a8:a8:be:cd:44:dc:26:
45:42:db:ba:77:80:19:68:92:1d:9b:89:ce:9d:ed:
76:c1:0c:bd:af:cd:d2:bc:34:e4:22:a0:98:e9:0e:
cd:63:97:0b:58:26:c8:e6:4e:94:35:d6:0c:73:da:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:E4:29:D8:C5:6E:E4:77:6D:24:F1:2F:96:C1:E6:A7:27:74:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/glbkKdjFbuR3bSTxL5bB5qcndKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:26:4f:67:8b:83:6a:ae:c0:7b:4c:0e:23:11:91:d4:e8:f0:
e5:8a:4b:29:85:ed:08:fd:58:93:e3:31:22:27:f0:78:7c:62:
d6:e1:2f:f5:39:be:65:d7:0d:bb:70:36:1b:34:93:bc:8b:fa:
7a:c6:5e:e4:50:06:a4:6e:3a:6d:1c:46:73:a8:d0:f5:82:d5:
6a:e8:1e:b1:74:ff:15:8c:3c:e1:0d:7c:b6:29:81:39:ea:32:
bf:11:6b:a9:56:8f:b0:c5:56:e9:17:c5:25:63:4a:3d:1e:0b:
78:5d:a3:f6:0b:d1:f5:9e:03:5d:e8:bc:58:a2:20:2b:7a:99:
59:70:a0:0d:5c:d4:c2:e9:b8:de:70:aa:60:fd:3f:46:cb:7a:
ea:7d:5e:e6:1e:16:89:02:65:8a:ed:7d:d4:5a:39:69:c2:eb:
ef:ac:52:e3:9f:82:58:35:d1:ff:7a:f6:3f:3c:96:e4:8a:e9:
cc:4a:00:37:be:d7:e0:76:33:7e:7d:68:a6:e5:fa:ef:8e:0a:
cc:c1:74:bb:6a:49:2f:b6:5e:2f:83:08:e4:62:fd:a1:c8:8e:
d2:b1:01:c7:75:be:7c:b2:68:c3:f1:da:75:ab:df:9c:75:e8:
d4:3d:b6:5f:2b:99:15:9a:7d:cc:44:8b:4e:d4:03:39:75:a6:
a5:bd:3f:cf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCqt9uBDfrAPIfJ/txBLXmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzEzMDYxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjU2ZTQyOWQ4YzU2ZWU0Nzc2ZDI0ZjEyZjk2YzFlNmE3Mjc3NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdEBuU8EAfNotdARawOtB9hoCSo2
Lw0OaPf4qvavdlpdd8IGY3B6kQydlSuYDYLlHQyhiM2/BtnDZhVUy5m26NuUoAwC
rsdav47/xDFf9BiEvz4WYb47vWXqgEz+o0uOq0ILa4OJmiXcMiWIbLmSSrwHqu6p
qFaPEpuBfGjahI4JdEnYTrSS1z3mp3q70ktbpgAPP4vrDUZmysAdJ9chnBKeCIcD
qzK9cH4L+PDOKoDS9X4BKroXg2uwcS3663YnpBtpDDW8xOFR/qiovs1E3CZFQtu6
d4AZaJIdm4nOne12wQy9r83SvDTkIqCY6Q7NY5cLWCbI5k6UNdYMc9pZdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIJW5CnYxW7kd20k8S+WweanJ3SpMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZ2xia0tkakZidVIzYlNUeEw1YkI1cWNuZEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC8mT2eLg2quwHtMDiMR
kdTo8OWKSymF7Qj9WJPjMSIn8Hh8YtbhL/U5vmXXDbtwNhs0k7yL+nrGXuRQBqRu
Om0cRnOo0PWC1WroHrF0/xWMPOENfLYpgTnqMr8Ra6lWj7DFVukXxSVjSj0eC3hd
o/YL0fWeA13ovFiiICt6mVlwoA1c1MLpuN5wqmD9P0bLeup9XuYeFokCZYrtfdRa
OWnC6++sUuOfglg10f969j88luSK6cxKADe+1+B2M359aKbl+u+OCszBdLtqSS+2
Xi+DCORi/aHIjtKxAcd1vnyyaMPx2nWr35x16NQ9tl8rmRWafcxEi07UAzl1pqW9
P88=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:39:42 2025 by rpki-client