Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i71xlF28AfhllGx_IW0OvhfUm6k.roa
File: i71xlF28AfhllGx_IW0OvhfUm6k.roa (raw, json)
Hash identifier: sIJ6EL3DdjSiR1wNa1A3yR1/wzm2TX/CV+/JiaOPe6o=
Subject key identifier: 8B:BD:71:94:5D:BC:01:F8:65:94:6C:7F:21:6D:0E:BE:17:D4:9B:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEA7501CCF0369BF3BB912B1F0B293C3D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i71xlF28AfhllGx_IW0OvhfUm6k.roa
Signing time: Wed 05 Jun 2024 22:11:27 +0000
ROA not before: Wed 05 Jun 2024 22:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ea:75:01:cc:f0:36:9b:f3:bb:91:2b:1f:0b:29:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 22:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bbd71945dbc01f865946c7f216d0ebe17d49ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:bf:03:2f:eb:0f:20:9c:d9:aa:e4:ae:33:
c3:06:84:b7:2c:16:ec:e5:50:3c:f4:33:b7:35:45:
f8:25:e7:a6:70:71:f3:f5:5f:ab:d3:d2:03:bb:53:
17:d1:7d:0b:51:82:b4:e3:38:dc:77:3c:06:54:bb:
7e:0f:21:80:5b:f1:ea:4b:b0:ed:fa:d7:c4:29:02:
24:7c:4b:f6:0d:ca:03:92:a1:0d:9a:21:c1:8a:68:
c9:bf:8d:b9:40:89:5b:c7:71:7b:2d:e5:11:3e:25:
76:40:31:bb:c3:b9:b6:a5:b6:d8:0d:39:58:d0:f6:
19:8c:e5:1d:ad:c8:6b:9c:a3:2e:21:79:c6:3e:62:
8f:f7:cb:f8:d7:65:30:a1:a4:31:62:d6:e7:96:ae:
ce:ec:5d:5e:39:19:c3:cd:a3:14:8a:63:12:1c:ca:
5b:a8:05:f3:d1:7f:fb:43:d8:ee:a4:1f:db:55:3f:
77:9f:ba:b8:ef:c1:08:29:11:21:8f:ad:6f:ad:c5:
4a:ef:59:a1:78:ed:db:4a:b7:3b:88:49:80:42:7c:
95:23:87:5c:f6:09:38:36:5f:3b:eb:b9:02:3d:0f:
d0:90:73:55:33:0c:4e:60:aa:93:23:cd:e8:61:d9:
ec:89:e5:21:00:74:d1:39:f4:76:f3:dc:24:b3:04:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BD:71:94:5D:BC:01:F8:65:94:6C:7F:21:6D:0E:BE:17:D4:9B:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i71xlF28AfhllGx_IW0OvhfUm6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:6a:6b:a7:68:df:ee:d8:e6:09:1a:67:76:7c:1c:96:a6:f2:
a7:12:88:26:43:75:75:99:b1:0a:32:82:ed:e4:c1:f4:5b:b8:
8c:85:21:a6:f4:75:1f:b4:9e:cf:7c:f5:48:23:cc:0b:42:fe:
21:cd:a2:24:22:ff:6d:29:5d:44:99:ee:db:b5:47:83:4e:4e:
d5:0d:9c:ab:1d:80:47:7a:9d:d8:7f:f4:09:a9:15:03:4d:cb:
24:e5:5c:7f:52:65:b1:fc:8b:e8:30:c3:f3:15:d2:97:a4:a9:
0a:3a:77:81:08:30:f1:5a:65:4b:5b:b8:79:d1:4d:26:95:d8:
37:00:c3:ea:eb:59:0d:a4:86:85:fe:99:91:d7:df:f7:74:87:
43:03:27:4d:0c:24:65:11:09:59:3b:78:0e:1d:b1:16:72:40:
ca:1f:30:86:c8:6d:b5:09:24:7d:71:3e:bd:48:8a:00:3b:4e:
f2:0a:cb:96:cb:ac:cb:98:d2:af:4e:1a:00:79:69:d2:5c:74:
09:55:2f:ac:4f:fe:47:83:78:23:f7:9e:94:dd:74:ae:9a:5c:
4c:c8:23:28:a8:3c:21:af:6a:ff:a4:59:a9:fc:b3:27:f3:f5:
9c:89:65:83:a9:31:7b:89:72:66:45:9b:42:10:73:9d:5f:51:
64:c0:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:26 2025 by rpki-client