Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGvFrLp7HTk8B-R-DN6imJS0v1w.roa
File: oGvFrLp7HTk8B-R-DN6imJS0v1w.roa (raw, json)
Hash identifier: H9dCGqRHPru908v8H4yjqzOEaGnNrhDoHlF4psqWHcQ=
Subject key identifier: A0:6B:C5:AC:BA:7B:1D:39:3C:07:E4:7E:0C:DE:A2:98:94:B4:BF:5C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019022772E5AA667E281DAA974417C800B83
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGvFrLp7HTk8B-R-DN6imJS0v1w.roa
Signing time: Sun 16 Jun 2024 19:12:34 +0000
ROA not before: Sun 16 Jun 2024 19:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:22:77:2e:5a:a6:67:e2:81:da:a9:74:41:7c:80:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 19:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a06bc5acba7b1d393c07e47e0cdea29894b4bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:29:2b:36:53:73:28:b5:41:5e:6f:06:20:b0:
35:35:e2:70:0f:04:b6:bc:bb:ae:d7:5f:c9:0b:de:
ac:0f:98:a3:f1:3a:2a:86:e7:4a:24:83:a3:3b:46:
d9:86:28:f5:e1:39:9b:9f:66:be:e0:32:73:03:dc:
2d:22:ad:56:ed:5e:ed:5a:2a:6e:9e:ec:c1:87:91:
9e:60:5b:04:74:04:81:a4:c9:33:aa:ed:14:a9:cd:
d0:20:0c:92:4e:de:f0:aa:4b:47:22:f5:0a:ba:d6:
29:40:78:dd:ee:12:e9:1d:27:36:91:71:5e:99:79:
a9:a7:a4:12:fb:c9:89:36:bc:76:7f:ae:d3:24:f5:
ec:be:d1:3a:cb:bc:c7:db:27:9d:85:8f:6b:33:cb:
63:0f:77:0f:10:77:fa:5c:04:2d:c6:dd:d6:4e:18:
84:ec:2c:bf:28:ea:77:a5:7e:00:56:92:ff:90:17:
c2:6d:2d:e2:1f:e2:34:3d:8f:e2:d9:7a:61:5e:39:
18:9a:e8:50:49:3e:e0:1b:2b:19:34:e6:df:bd:ac:
a1:10:97:41:15:de:9d:7e:33:7f:2f:2b:61:fb:31:
ee:9d:35:48:3b:21:bb:48:47:e1:fc:ea:2f:f4:d8:
72:2a:ac:0a:6b:a4:39:1a:06:b0:57:71:09:9c:56:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:C5:AC:BA:7B:1D:39:3C:07:E4:7E:0C:DE:A2:98:94:B4:BF:5C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGvFrLp7HTk8B-R-DN6imJS0v1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:51:4e:bf:5a:34:86:af:7b:ae:12:96:ee:52:f1:db:be:dc:
ac:2d:4f:97:5d:84:88:77:26:2f:64:b8:1a:6e:78:7d:53:94:
0d:42:08:c2:94:b4:63:05:db:f7:7c:19:ce:17:82:e2:25:77:
88:62:c5:6b:03:42:c7:67:14:04:4c:db:fb:4a:0b:d4:1c:88:
31:ff:63:38:0c:dc:11:b8:d9:d7:be:25:12:a9:14:ed:26:b0:
49:4c:03:01:1b:45:95:e3:6b:21:c2:49:76:c8:40:57:17:b2:
6b:0c:f1:05:98:cc:b1:29:c1:00:39:8f:00:c3:6f:fb:cc:e2:
f5:ce:a8:c0:cb:72:87:49:2b:af:b4:ab:36:2a:ad:d2:68:6f:
a9:ca:6f:ac:c1:2c:7a:32:26:89:b6:c9:b5:23:23:78:fa:59:
65:92:aa:aa:11:02:7f:8a:be:ca:d9:f6:d6:ad:38:27:76:a4:
29:b7:6a:2c:83:87:f3:56:3d:b8:4e:49:09:03:38:53:d7:d1:
d4:1a:be:75:8e:8a:b3:ed:13:1c:11:03:c9:70:41:09:8d:cf:
2b:2e:cc:9b:10:b6:48:11:8c:26:1e:88:6b:e0:70:02:71:56:
a7:27:aa:f0:96:d7:ae:3b:55:73:77:ab:2b:ad:26:1b:31:20:
d3:bb:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:07 2025 by rpki-client