Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i853u4EGgxzXoHpXFAO5mKPyuOI.roa
File: i853u4EGgxzXoHpXFAO5mKPyuOI.roa (raw, json)
Hash identifier: VgDmyroaBbpcZGT9DdTqVEzLmA6lvp5VGm8S+Czm/1I=
Subject key identifier: 8B:CE:77:BB:81:06:83:1C:D7:A0:7A:57:14:03:B9:98:A3:F2:B8:E2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901CE20B96DC2CF72DB4969ABA661E1136
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i853u4EGgxzXoHpXFAO5mKPyuOI.roa
Signing time: Sat 15 Jun 2024 17:11:34 +0000
ROA not before: Sat 15 Jun 2024 17:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:e2:0b:96:dc:2c:f7:2d:b4:96:9a:ba:66:1e:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 17:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bce77bb8106831cd7a07a571403b998a3f2b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:2e:16:29:60:84:a8:ac:2a:64:22:bd:e5:
83:dc:bd:49:25:b2:81:3d:3d:c6:c8:e7:0f:83:3f:
3c:ed:a5:d7:5f:d1:f1:b5:71:24:d4:f4:8d:b9:47:
65:2d:92:fc:8a:4c:04:c7:26:c1:3a:69:8f:73:e3:
d4:19:cf:c5:77:3c:f1:c5:3d:f9:e0:fc:c4:31:5d:
d2:6b:ed:28:ae:08:14:29:bc:d9:de:9f:7a:1e:6a:
c3:b7:68:11:21:b6:bc:5e:54:ca:c4:8c:a3:59:2d:
f7:c0:31:cb:b0:8c:cf:04:cb:f3:ea:59:0f:7d:00:
43:35:35:47:c5:3a:58:f5:01:2c:b0:13:f2:20:1d:
91:b7:37:cb:e3:ef:08:80:3e:4d:c2:39:a4:0c:51:
c9:dd:c2:2f:d1:49:34:f7:c0:29:8b:26:84:49:9f:
58:2d:65:26:20:28:e5:fe:1f:1f:f4:d6:77:2c:86:
ef:21:8b:a3:74:05:c0:50:39:45:f3:19:d3:86:29:
6e:74:f0:8a:8e:31:0a:a9:95:e7:04:f3:d1:4e:0d:
91:ba:c1:95:08:b0:5a:0e:10:ba:51:b3:b7:45:b7:
17:34:f7:0e:e9:4c:37:66:17:c1:d9:68:67:29:ae:
8d:04:3b:72:f2:6e:97:94:8f:c3:04:06:ff:6f:c5:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:77:BB:81:06:83:1C:D7:A0:7A:57:14:03:B9:98:A3:F2:B8:E2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i853u4EGgxzXoHpXFAO5mKPyuOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:48:c2:a3:6c:20:5f:b1:7a:a9:b1:e1:05:53:59:88:6b:b1:
dc:b2:10:8f:c1:ef:be:34:7c:aa:de:d2:2f:1f:8b:e9:d1:bb:
64:ef:66:c1:e9:56:f7:f6:99:0c:dd:22:33:cb:9e:0b:8e:18:
b4:c5:7d:4d:97:8c:6e:b1:4d:60:f9:8b:61:cf:fa:c3:8d:4c:
53:f8:55:f4:df:d0:98:ef:6f:bb:9f:b6:1d:92:fb:2f:16:09:
ea:53:fc:24:85:f0:b0:cd:e7:f4:47:da:e5:fe:e5:a6:a4:a2:
37:ca:dd:12:f5:ff:dc:75:91:3e:b2:51:04:26:77:5d:e6:7c:
a1:e4:2c:85:8e:b3:4d:d6:11:1b:6a:cd:6c:a0:13:97:5f:ae:
c9:0f:f9:a7:b7:95:25:f1:f6:a2:14:5b:97:c5:ad:37:f6:ff:
fb:1d:4e:df:dc:1f:7f:e1:12:de:49:6f:15:5f:6d:93:9d:bc:
4a:d4:f1:21:b5:18:6c:99:20:23:fa:03:bd:86:15:f7:6c:0d:
ba:07:66:17:df:ae:89:31:c2:82:68:1f:50:b1:2e:1a:98:f8:
98:f5:01:e0:2d:b9:40:a6:8c:e0:42:26:8a:ad:ce:62:b2:95:
c0:4f:62:fe:a5:67:95:84:af:09:99:6a:85:cf:f1:9d:30:54:
5d:c0:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:53:03 2025 by rpki-client