Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/t5lssWKJT1GsZ6D3NINAKPqMUhc.roa
File: t5lssWKJT1GsZ6D3NINAKPqMUhc.roa (raw, json)
Hash identifier: R2YsFuqqHx1+JOkPGS2MqqVgJ8J7ttBMmwQSMPYFI7w=
Subject key identifier: B7:99:6C:B1:62:89:4F:51:AC:67:A0:F7:34:83:40:28:FA:8C:52:17
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B8DF846637994D422F1BAEA9EE8B7034
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/t5lssWKJT1GsZ6D3NINAKPqMUhc.roa
Signing time: Tue 16 Jul 2024 00:09:34 +0000
ROA not before: Tue 16 Jul 2024 00:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:df:84:66:37:99:4d:42:2f:1b:ae:a9:ee:8b:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 16 00:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7996cb162894f51ac67a0f734834028fa8c5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:84:be:05:1b:7a:aa:ca:04:f4:c6:f8:20:73:
7c:2e:df:2d:8d:03:17:20:c1:b6:64:a0:d1:28:67:
b4:d1:4e:cd:1d:e2:a2:4a:08:8c:bf:91:3c:04:65:
67:81:3e:5b:a4:0d:3f:59:47:30:7a:ab:b3:a5:2f:
2f:c2:d7:bc:c8:c4:ef:d5:20:7e:b1:c0:72:ce:3c:
b5:99:6d:20:4c:95:a2:a9:5d:0e:69:c8:d9:77:17:
6f:d0:5e:03:08:f5:cc:a8:4a:44:73:da:2f:37:dc:
16:95:d4:69:4d:de:11:c6:b6:c7:2c:46:0f:3b:4e:
1e:b1:bb:4e:58:4e:ff:1e:fa:97:79:55:19:36:0e:
0c:9a:70:07:72:5a:3d:ad:ce:c5:be:e6:00:57:24:
5d:eb:1e:2c:ab:bc:f6:df:e2:3e:02:9d:c6:c8:e5:
0e:3c:4f:1a:6b:fd:00:3d:2d:20:67:1d:ce:df:68:
32:5d:76:c2:a4:ca:0f:ac:3f:59:b5:7b:f6:20:1d:
ec:91:e3:03:84:30:de:bb:8c:89:dc:7d:cd:40:d9:
c8:c8:55:cb:84:af:65:84:19:ef:53:33:50:02:ae:
23:83:14:4a:e9:5a:f5:0b:e2:7a:95:a2:44:64:4d:
30:86:10:cd:40:87:cc:14:9b:d0:fc:35:34:50:42:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:6C:B1:62:89:4F:51:AC:67:A0:F7:34:83:40:28:FA:8C:52:17
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/t5lssWKJT1GsZ6D3NINAKPqMUhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:a1:38:85:0a:f1:8f:79:2a:57:4a:66:7f:42:d7:0f:b8:63:
bb:e7:5d:36:f5:b5:45:c4:f4:4a:e1:a8:bf:00:57:fa:91:0d:
74:0d:2f:28:44:43:ec:c4:cb:3a:fe:18:18:c7:f1:0f:56:18:
4d:ef:88:b0:05:58:27:03:9f:67:8e:e6:25:60:29:e5:25:ca:
a6:d1:ac:72:68:46:72:07:0c:62:ff:38:2c:25:9c:f7:b4:64:
ea:50:a0:31:34:30:82:88:17:34:44:5e:27:c3:08:1a:90:6e:
fb:ed:68:b6:27:57:d8:a9:2b:40:6c:15:f3:e8:a2:35:e3:5e:
7f:49:06:bb:b9:06:fb:21:53:b9:a6:31:d0:33:c6:ff:1d:9d:
7c:8d:88:08:df:bc:55:d8:83:80:ed:b6:ad:18:47:a1:6b:ea:
70:d7:94:b7:e5:01:ed:67:12:e5:2b:af:73:72:aa:da:2b:72:
64:53:a1:77:6f:17:f0:39:d8:dd:90:83:e4:0a:76:80:c5:7e:
30:e0:35:f2:91:bc:a2:d5:fe:20:ab:5b:b2:a0:43:17:10:9c:
09:dc:f4:06:2f:64:d4:65:7c:7d:4a:b2:42:b1:cb:61:6e:67:
5b:00:65:c0:46:f7:44:7d:66:d0:63:e2:a3:ab:7e:89:9e:86:
1a:7d:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:41 2025 by rpki-client