Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lMvcVQBWNX-KQqcbqBSkfmIHeo4.roa
File: lMvcVQBWNX-KQqcbqBSkfmIHeo4.roa (raw, json)
Hash identifier: gizQlXvTW3C8FupKtL/9d7O1V6F31WNPDOUW9uFp8cc=
Subject key identifier: 94:CB:DC:55:00:56:35:7F:8A:42:A7:1B:A8:14:A4:7E:62:07:7A:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908A191784352593E490F4BF11885F9A79
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lMvcVQBWNX-KQqcbqBSkfmIHeo4.roa
Signing time: Sat 06 Jul 2024 22:10:18 +0000
ROA not before: Sat 06 Jul 2024 22:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8a:19:17:84:35:25:93:e4:90:f4:bf:11:88:5f:9a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 22:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94cbdc550056357f8a42a71ba814a47e62077a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:7f:0c:d2:89:50:71:9e:27:5e:90:ba:59:
c2:79:fd:bd:88:81:65:8a:1e:06:8e:d2:d3:91:90:
45:a6:8e:3b:60:09:49:8c:bf:33:ad:04:52:40:c1:
07:4e:4b:48:c5:5e:ea:1b:2b:94:6f:3e:28:69:52:
33:bf:23:7e:2e:25:a8:8c:13:0b:2e:ad:7a:29:1c:
6c:af:7a:54:a2:bc:a6:61:fd:79:e0:5d:fd:57:10:
ae:5e:8d:83:36:e4:4d:a1:81:6b:bf:c6:d6:65:40:
8d:c8:6d:30:76:f0:38:98:93:d9:23:aa:e1:8b:2d:
d7:48:45:c3:cb:22:64:d7:47:02:19:b1:c0:32:96:
c4:e3:a3:be:4c:fc:09:0f:fa:cc:67:6a:6d:85:16:
ec:06:89:1c:d5:62:94:ad:d8:20:f1:1c:f1:07:2d:
c9:f6:ed:d3:87:a3:17:c6:d7:bd:72:1b:a0:4f:ad:
01:84:0f:c9:5a:45:8d:d7:30:e8:2d:7f:88:30:3e:
40:28:32:db:b1:15:eb:a9:7c:c6:9b:23:fc:bf:a8:
4e:db:4a:9a:18:bd:be:f6:74:e6:9f:5d:e3:3f:d1:
c6:fa:44:5d:81:23:52:55:06:65:f4:06:d6:9c:7d:
76:96:26:2b:02:ef:ee:29:01:dc:80:84:88:7a:53:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:DC:55:00:56:35:7F:8A:42:A7:1B:A8:14:A4:7E:62:07:7A:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lMvcVQBWNX-KQqcbqBSkfmIHeo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:8d:b6:3e:7a:a9:51:0e:21:b4:77:4f:46:43:8c:c4:36:b4:
f4:a4:ba:65:df:3f:e4:98:f6:50:47:7d:22:f1:d7:d2:66:c4:
06:41:a3:d4:7b:d2:b1:23:40:15:52:f1:5f:82:54:cd:ac:bd:
8e:dc:c5:eb:82:b1:28:50:56:68:1a:94:a9:be:ef:fc:03:5f:
a7:d8:4c:d8:05:62:49:79:e9:55:3c:07:3d:68:7a:fb:40:78:
3d:9a:a5:a4:5e:70:f5:23:ff:5e:da:a0:b9:c6:7d:c2:11:00:
23:d9:81:b4:ae:94:26:ea:70:3e:55:9e:da:ee:4e:a8:92:34:
b9:3f:be:05:82:80:15:e1:8f:a6:e1:43:1f:eb:d6:a4:01:8b:
0a:42:8c:83:8e:1c:ef:0b:4b:3d:d7:69:3b:47:68:2b:4a:09:
e1:b9:9a:1b:9e:c8:5e:39:55:9e:70:6d:e1:0d:fb:87:98:71:
c9:e8:af:1b:16:65:b3:7f:a7:d6:83:b9:7b:12:83:b5:de:15:
1b:c1:75:b2:e8:a3:f1:8d:64:f9:b2:86:1e:55:71:5b:bd:d6:
b8:f7:ee:e5:eb:48:37:9d:9c:77:aa:bd:c7:f0:8e:41:5a:e5:
bb:79:1f:83:c5:20:ce:82:f6:88:67:a0:73:e4:fe:cf:3e:d2:
a6:39:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:06 2025 by rpki-client