Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k7L_7Ey_Kxju4ynBQGbKJyb7_m4.roa
File: k7L_7Ey_Kxju4ynBQGbKJyb7_m4.roa (raw, json)
Hash identifier: vzPBuAtlMSbDjrXLvqsvBIuExDK5HoUgeYWbG8L5nTQ=
Subject key identifier: 93:B2:FF:EC:4C:BF:2B:18:EE:E3:29:C1:40:66:CA:27:26:FB:FE:6E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FDFF24534C12A25343D0177B2F5FAFD0D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k7L_7Ey_Kxju4ynBQGbKJyb7_m4.roa
Signing time: Mon 03 Jun 2024 21:12:27 +0000
ROA not before: Mon 03 Jun 2024 21:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:f2:45:34:c1:2a:25:34:3d:01:77:b2:f5:fa:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 3 21:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93b2ffec4cbf2b18eee329c14066ca2726fbfe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:d8:61:48:8d:49:c3:49:a0:96:ab:bc:43:
7b:6a:a1:a6:9d:be:52:b4:cf:42:03:03:21:af:56:
ea:e7:13:31:4f:42:eb:a6:30:d7:0e:cd:9a:94:3b:
6e:aa:07:17:86:32:4e:e1:dc:66:4c:3f:76:c0:ce:
6d:68:e3:75:81:7b:42:c1:c6:19:58:4c:9f:3d:bc:
5a:b9:29:e5:e9:89:12:fc:c4:51:1f:4a:c1:35:db:
88:28:15:84:78:7a:aa:81:1c:32:19:35:95:58:d4:
a4:d3:29:29:8e:50:68:51:c9:4c:19:8d:dc:a0:af:
57:be:87:ea:c9:ca:8e:fa:e5:d7:ed:f3:84:1a:ad:
1d:ce:89:24:c4:8f:9e:54:7c:87:aa:7d:1b:36:b9:
af:23:1a:c0:74:82:8d:1c:ca:1e:37:6a:b7:d9:5b:
06:95:b9:7b:4f:05:7f:9b:8e:44:46:43:7a:97:de:
e9:a0:eb:9e:ca:7d:8f:a2:54:db:e9:3c:1b:f3:49:
16:8b:38:5f:21:51:be:21:e0:b8:d7:1b:66:90:a3:
38:78:1f:a0:36:fa:ce:93:47:82:df:ca:f6:03:f0:
01:8f:be:e4:27:df:b7:5e:97:ab:1c:16:84:86:34:
0c:c0:38:80:85:84:55:ed:88:24:ae:9e:36:37:0b:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:FF:EC:4C:BF:2B:18:EE:E3:29:C1:40:66:CA:27:26:FB:FE:6E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k7L_7Ey_Kxju4ynBQGbKJyb7_m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:1f:67:e4:4a:9f:5b:ec:63:70:3a:e7:e6:67:d5:1e:97:f6:
b7:f4:14:7a:93:58:9d:27:8c:d6:d2:f1:37:15:44:09:75:11:
5e:e7:51:22:dd:b5:46:17:59:31:db:d7:cc:bd:ae:c3:c4:65:
66:d8:de:ee:a5:5d:df:55:51:81:5a:dd:fe:b0:1e:c4:ee:5a:
e4:14:56:d1:23:6a:46:2a:e2:4e:a3:b7:bb:94:06:cb:66:76:
f5:92:ff:94:de:70:50:cf:82:c1:d4:ef:9d:a4:dc:c5:b1:ed:
60:5e:06:a3:32:e6:2e:62:bd:b7:0d:8f:28:ac:1c:39:0f:85:
5d:47:6a:bf:d3:e4:50:0e:e4:6d:5f:d5:1c:93:ee:85:65:83:
08:49:d3:7a:e8:42:41:a7:de:ca:3b:08:e1:cf:86:7c:bc:e6:
47:16:24:27:c9:a3:03:91:12:39:71:79:04:eb:41:9f:44:20:
a6:9e:4a:39:a6:c9:54:b2:3f:29:0d:b5:c4:ad:6b:a9:95:d8:
1e:11:d7:f8:e5:95:6a:37:ff:aa:fe:11:84:b1:ff:13:0c:03:
f9:4a:62:d5:dc:05:e0:c8:e7:8e:eb:b9:8b:8f:32:66:51:ff:
0d:cc:64:c1:27:0f:8e:04:6b:f8:75:fa:5b:37:57:73:04:61:
0d:f2:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:47:17 2025 by rpki-client