Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iSXZ6yHAwtS-3D9Ih6_rpV8J-Sc.roa
File: iSXZ6yHAwtS-3D9Ih6_rpV8J-Sc.roa (raw, json)
Hash identifier: Lhby0Z0NnsXw97HPzH6lmrGE0iunpc6C2cT+l8fWTDU=
Subject key identifier: 89:25:D9:EB:21:C0:C2:D4:BE:DC:3F:48:87:AF:EB:A5:5F:09:F9:27
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190949FBA9758803CFE8216FDA66EB6B443
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iSXZ6yHAwtS-3D9Ih6_rpV8J-Sc.roa
Signing time: Mon 08 Jul 2024 23:13:34 +0000
ROA not before: Mon 08 Jul 2024 23:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:9f:ba:97:58:80:3c:fe:82:16:fd:a6:6e:b6:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 23:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8925d9eb21c0c2d4bedc3f4887afeba55f09f927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:2b:48:f7:1c:ff:bf:83:88:61:f4:b7:9d:
07:95:03:36:3a:ca:ec:78:e7:ca:fa:92:ae:17:32:
31:2a:dc:12:e0:d5:e1:59:e1:c5:bf:b1:6c:81:1d:
33:39:18:d1:c2:4a:c8:c5:68:5d:f1:5a:13:fe:7a:
0c:bc:3c:cc:76:61:33:00:24:d0:e4:42:92:1a:54:
aa:3f:ce:07:40:9e:56:ab:f8:8f:68:fe:3e:84:70:
b5:7f:79:ce:f9:c6:21:13:f8:81:ed:42:ff:0d:a6:
62:2d:60:e4:ce:fb:e0:25:3a:73:d2:51:9e:97:a1:
12:53:ba:74:fb:32:99:8b:41:ca:74:c0:4d:66:68:
e2:0b:23:67:85:b5:33:15:ee:a6:46:c1:7f:f5:84:
e9:6e:5b:c9:df:ec:73:a9:71:1d:c1:f8:38:57:6e:
a5:08:4f:87:2a:41:0a:e3:36:bc:f8:41:c0:e8:34:
4e:7c:8c:d4:04:8e:0a:6e:84:75:46:ae:ad:3c:8c:
4b:7e:9d:6e:23:0c:42:22:7d:2b:9c:50:29:63:d7:
c1:53:82:84:43:d5:8f:f7:74:c0:e0:f6:4c:06:75:
39:17:bc:86:69:e2:42:0b:62:75:56:30:37:83:a2:
f7:98:4b:dd:98:c2:a0:2e:d4:64:be:84:49:23:a5:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:D9:EB:21:C0:C2:D4:BE:DC:3F:48:87:AF:EB:A5:5F:09:F9:27
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iSXZ6yHAwtS-3D9Ih6_rpV8J-Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:cf:12:e9:ea:90:c6:b0:86:8f:6f:6f:86:3b:4b:32:03:0e:
15:3e:4a:84:fa:66:4c:8a:9b:c6:4d:bd:a8:3a:7c:84:0d:25:
53:2e:50:73:ef:42:a4:36:a6:66:36:25:19:ff:7d:31:7b:3d:
67:13:d3:59:d5:03:4c:d5:9a:70:c2:dd:30:69:05:86:80:62:
8f:07:65:ac:da:40:fe:49:dd:67:6c:2b:90:89:a3:78:18:70:
34:69:d4:36:5d:98:08:b3:81:ab:9a:60:66:a2:06:20:ce:f2:
ba:bf:f1:21:33:d4:7d:e5:e1:11:f8:ff:66:49:85:48:c8:f3:
aa:24:9b:5d:f1:9f:dc:ec:63:9b:bd:7e:e9:4a:53:06:e3:ae:
49:46:f4:05:24:e2:42:de:85:ed:fb:bd:c3:06:89:db:f3:88:
d2:d4:91:11:bd:61:90:d4:93:eb:18:96:9d:c5:29:a2:47:7b:
bc:1c:5a:f1:37:0d:b8:b8:d5:29:71:b4:79:cc:1f:4d:e3:db:
73:28:3f:49:e2:3c:10:cf:1a:cd:75:76:8a:77:af:ff:80:b1:
07:24:6b:91:9c:8d:42:86:26:26:19:c6:e0:70:89:23:5f:06:
ed:28:40:82:ad:e2:9b:73:bc:ea:e5:67:51:29:4d:12:bf:d0:
69:60:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:29 2025 by rpki-client