Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hvi6fcHiByFnExnP1Qsp4UVGO2M.roa
File: hvi6fcHiByFnExnP1Qsp4UVGO2M.roa (raw, json)
Hash identifier: 03ece6t5MFaRbTXNspcCglwzuQcut7AZuXNZAY/J6NU=
Subject key identifier: 86:F8:BA:7D:C1:E2:07:21:67:13:19:CF:D5:0B:29:E1:45:46:3B:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019090BB6622D744EC26EBA0EDB908ADE2F8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hvi6fcHiByFnExnP1Qsp4UVGO2M.roa
Signing time: Mon 08 Jul 2024 05:05:18 +0000
ROA not before: Mon 08 Jul 2024 05:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:90bb:e62/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:bb:66:22:d7:44:ec:26:eb:a0:ed:b9:08:ad:e2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 05:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86f8ba7dc1e20721671319cfd50b29e145463b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:c1:f3:42:05:60:f9:17:f0:c0:3f:3f:c9:
01:3d:ea:81:71:88:de:7d:52:b7:09:62:79:6c:53:
92:99:cc:3d:22:be:de:14:55:00:9a:6e:ab:e9:3b:
f1:74:bc:12:03:bf:1b:06:10:bf:64:c9:76:83:49:
1e:d6:56:5e:99:3b:e5:0f:d3:87:46:da:18:62:18:
12:f8:c7:6c:5b:7f:87:c2:85:f9:0f:43:a7:75:0c:
a8:4a:3b:cc:1d:e6:51:3c:36:de:33:68:b8:a5:78:
35:fc:52:15:1c:9e:79:a4:ad:2b:3f:c6:cf:c8:3b:
d0:c0:51:c8:57:6c:07:f5:71:c8:9f:c4:78:0c:b1:
33:be:6e:89:dc:83:e9:8e:74:6a:c9:d8:d0:01:65:
c4:3e:e7:0e:71:f7:31:1b:98:6f:c5:49:d8:15:7e:
02:0a:27:14:2c:26:1f:81:8f:4f:4a:6b:7a:6e:f0:
fc:67:e6:40:4c:ca:d8:8a:a3:92:8b:bb:32:41:a6:
17:66:53:10:5f:78:ce:52:ea:aa:59:fb:4c:3d:f5:
b5:91:6b:64:6c:de:9d:4f:15:02:67:34:02:48:20:
1f:c9:16:68:91:c3:96:36:b0:99:61:31:3d:3c:97:
05:44:41:8b:06:35:d0:05:80:4c:8c:88:64:54:87:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:BA:7D:C1:E2:07:21:67:13:19:CF:D5:0B:29:E1:45:46:3B:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hvi6fcHiByFnExnP1Qsp4UVGO2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:d1:cb:ab:6c:55:bf:09:9e:32:2e:8b:3b:57:cd:50:a5:7b:
68:67:f3:1a:f5:50:6a:7d:15:8b:4d:39:8d:00:55:13:90:98:
7f:d0:d4:3e:d7:5c:10:e4:c5:4c:6f:51:64:03:97:bb:67:f6:
7c:ee:d8:cc:82:37:8f:3c:14:e1:6b:1f:88:c3:40:d6:69:e9:
35:53:74:8e:7c:c9:31:07:e7:67:f0:35:d6:20:28:60:b4:a1:
a4:7c:a2:99:2c:d4:ec:61:93:ee:a0:4a:19:8e:c9:c6:9a:88:
55:64:d0:a4:7e:3c:ef:bf:4c:7c:af:72:ae:9a:08:c1:cc:40:
0d:45:52:35:29:02:17:9a:80:02:8c:74:90:1a:9d:af:32:b0:
ca:9c:27:3e:25:08:03:dd:9e:19:56:5e:eb:0b:36:da:f0:04:
25:e6:20:f9:57:d3:fe:b9:3a:59:a9:23:72:8c:4c:d0:a5:42:
44:71:65:94:18:34:54:bc:76:56:8b:15:4c:8f:e7:e8:af:1b:
32:f9:44:2f:12:83:04:ba:03:94:92:75:36:07:bf:c4:d6:f4:
26:82:ff:c4:f1:09:28:46:96:ae:04:af:c0:b0:94:7d:b2:3e:
29:a0:13:c5:67:38:4f:01:9d:4a:94:a4:8f:25:89:5e:5f:f0:
6c:24:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:00:56 2025 by rpki-client