Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAxFYfJmyrr8KKKe_nU4L9joyeo.roa
File: iAxFYfJmyrr8KKKe_nU4L9joyeo.roa (raw, json)
Hash identifier: NnKnstWFJZP/1FN9qH5vd4Q0guEL+dpb00+lnpjOy30=
Subject key identifier: 88:0C:45:61:F2:66:CA:BA:FC:28:A2:9E:FE:75:38:2F:D8:E8:C9:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB19858EC44EABADC98CACD08F9A7C9E9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAxFYfJmyrr8KKKe_nU4L9joyeo.roa
Signing time: Sat 25 May 2024 21:11:42 +0000
ROA not before: Sat 25 May 2024 21:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b1:98:58:ec:44:ea:ba:dc:98:ca:cd:08:f9:a7:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 21:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=880c4561f266cabafc28a29efe75382fd8e8c9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:d4:b8:c0:d1:92:0b:03:44:33:19:98:a8:
90:a2:91:d8:7a:41:ef:fd:9d:6c:34:bc:5b:e0:09:
47:fe:1b:19:31:f4:f3:d3:9a:a2:bb:6e:da:83:07:
ff:53:d9:e7:29:e9:ce:8c:fb:cc:d4:46:36:78:f9:
b7:41:22:53:0d:e8:5a:7b:01:40:de:20:5c:68:e7:
fa:00:47:75:88:ae:ea:92:2a:04:03:0b:ed:ab:d8:
0d:45:99:df:52:6a:c2:43:74:c4:81:f0:ab:39:69:
a2:29:61:4d:ea:81:69:0a:85:fc:4d:02:0d:91:f6:
60:b3:3c:36:a9:8f:a7:79:b4:08:0d:fe:d7:9a:5b:
0e:e2:9c:6f:77:d2:32:ce:ab:81:83:fc:5a:cf:8d:
89:9d:37:f4:61:d0:83:4b:08:1e:c5:85:46:4a:d7:
3d:b0:85:00:f8:e4:55:74:4b:0c:39:dd:8a:c7:21:
61:de:c8:94:b5:fe:e8:35:ec:05:c8:c1:cb:15:43:
c3:cb:f4:61:bc:c8:dd:50:e3:d8:3d:65:a0:f9:44:
3a:e6:4d:74:b2:2c:41:f7:3d:70:d3:94:50:af:71:
0f:1c:76:aa:65:d2:2c:1e:0d:a2:ef:40:c4:05:91:
fc:d5:51:9d:de:a4:1c:52:ed:06:90:ed:8a:73:ca:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0C:45:61:F2:66:CA:BA:FC:28:A2:9E:FE:75:38:2F:D8:E8:C9:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAxFYfJmyrr8KKKe_nU4L9joyeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:1f:13:2a:35:34:2e:55:51:49:23:f2:00:8d:46:8c:71:25:
14:f4:82:80:ac:49:51:dd:26:c6:42:b9:72:e0:7f:a3:38:e7:
30:73:aa:df:73:81:b8:65:db:85:4c:7c:93:7e:57:bd:d9:7b:
49:c7:d0:6f:67:18:ba:c8:a0:86:07:56:47:82:0b:93:cb:f7:
ad:9d:ec:69:87:8c:8c:fd:39:ff:cf:e2:ae:5b:95:dd:cc:83:
e8:6f:cb:e2:ce:56:41:4b:ba:62:e3:35:1b:1a:04:99:e8:e9:
00:fa:49:34:7c:ea:ce:95:29:9e:cc:49:ad:b9:95:e2:af:09:
e1:75:da:01:ab:2c:a4:5f:85:54:b7:7e:4b:c2:41:a7:e9:f7:
9d:dc:75:eb:6f:cc:b0:50:fe:ee:d5:56:41:64:83:a6:09:4e:
0d:f6:6d:5e:5d:56:ec:b4:0c:65:d3:6b:2f:d4:b6:39:d8:cd:
d3:b1:5d:18:64:40:69:ca:58:8c:49:81:4f:4e:a6:13:e9:de:
c5:c5:5d:06:bb:ba:b1:c7:54:9e:cf:35:e0:65:90:ef:12:1f:
5d:11:af:a1:3a:68:85:c5:8c:d4:c7:b3:29:8a:e2:50:4a:ec:
0a:3d:cf:e9:67:76:fe:91:80:06:4e:2b:94:f5:19:96:56:99:
40:68:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:10 2025 by rpki-client