Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oH6mIokQl0ntNy2cQjOADYb5NUc.roa
File: oH6mIokQl0ntNy2cQjOADYb5NUc.roa (raw, json)
Hash identifier: NSRJSzKvp75IZmRVZjtQEcLPDnJAwgcXG4gthmID3xo=
Subject key identifier: A0:7E:A6:22:89:10:97:49:ED:37:2D:9C:42:33:80:0D:86:F9:35:47
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B4FE2AE280CA26C260E33C8B279D575C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oH6mIokQl0ntNy2cQjOADYb5NUc.roa
Signing time: Mon 15 Jul 2024 06:04:34 +0000
ROA not before: Mon 15 Jul 2024 06:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:b4fe:2019/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b4:fe:2a:e2:80:ca:26:c2:60:e3:3c:8b:27:9d:57:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 15 06:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07ea62289109749ed372d9c4233800d86f93547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:29:7a:33:e4:62:e2:a4:52:4c:e1:aa:72:
f1:80:ec:72:8b:2b:57:41:b5:6e:88:43:46:2d:45:
f1:7d:ca:e6:3e:35:a3:58:3d:81:bc:10:9e:72:a6:
5d:3b:e0:8a:e7:27:62:df:f8:02:c5:4b:2c:81:fb:
b6:bb:18:58:8a:4c:1c:c8:63:ef:ab:e0:a1:98:67:
75:87:81:bd:f0:98:98:12:3c:28:76:c1:42:1e:b3:
3a:a6:1c:41:90:6b:25:b2:63:e6:dc:4c:2e:b0:ae:
70:ad:e5:0c:7b:38:d7:3b:c4:e8:6c:28:dc:bd:da:
14:ee:29:bf:57:8d:09:f7:c0:6d:8f:8e:85:b1:67:
13:10:d1:4f:89:cd:ea:5d:21:e9:c7:27:7d:4d:d4:
17:b6:1f:4c:98:31:1b:f6:f2:9e:5e:e3:1f:03:8e:
e0:34:19:a9:a1:ba:11:8d:e1:84:f1:40:00:e1:3a:
a1:89:38:40:b8:af:03:27:ba:75:c9:6a:e4:3d:5e:
fc:0d:bb:bc:56:d3:cd:8a:a1:d4:a7:6c:60:10:84:
56:2c:25:87:63:30:6e:ff:a9:c9:81:57:3e:d2:5f:
a9:d4:b7:2f:fb:04:16:e7:31:85:c0:03:29:71:cb:
6a:0a:14:71:1e:4a:18:93:fa:69:ee:e3:0c:a2:cb:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:A6:22:89:10:97:49:ED:37:2D:9C:42:33:80:0D:86:F9:35:47
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oH6mIokQl0ntNy2cQjOADYb5NUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:f1:80:2f:48:f8:ae:dc:8f:8e:3a:a5:80:0e:ad:dc:c4:a4:
cf:87:82:57:11:ed:32:bd:03:e0:bc:b9:d1:55:5c:99:bd:50:
d1:f8:b1:74:ff:71:b6:d8:d9:cc:df:9e:42:04:cb:db:ef:15:
6e:61:c7:9b:f8:b1:8f:91:5f:3f:33:e3:75:d8:0b:3a:aa:b6:
16:37:b9:46:26:fc:02:cd:d1:1d:54:2a:f7:d3:45:6b:b1:34:
8b:87:5a:23:a0:e1:b3:7c:c9:8d:c4:4c:fd:89:39:f5:c2:19:
a5:59:2f:de:79:14:a3:1f:63:d6:8b:c7:c1:60:17:03:dd:5a:
76:85:c6:48:5b:cf:e0:97:d6:bd:6b:0e:5a:32:17:36:86:09:
a8:5f:0b:3b:cd:de:66:13:06:18:9c:a6:8c:f7:0e:64:8a:8d:
2c:bb:a9:77:f6:08:a8:94:b5:0a:87:29:76:97:94:19:9a:01:
78:e8:d3:9b:65:ed:b3:9c:ad:8b:13:28:0c:7c:25:b0:89:50:
a1:8c:ed:21:b9:0b:19:8a:c7:d8:d1:ac:16:5a:7b:39:0f:ec:
bd:13:e3:1c:ba:f6:76:96:5e:1a:59:d4:d6:63:91:d8:e8:4c:
36:88:1e:1a:7f:c5:c5:95:2b:d7:a4:80:d8:64:3e:35:1d:39:
41:6f:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:46 2025 by rpki-client