Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8_Wyx6Eh31pkSS8fDfvsAVkqqU.roa
File: u8_Wyx6Eh31pkSS8fDfvsAVkqqU.roa (raw, json)
Hash identifier: P/I7DmcCyLlmwQiJTNoQEAesZ6nFIu9OWKEArY9yfds=
Subject key identifier: BB:CF:D6:CB:1E:84:87:7D:69:91:24:BC:7C:37:EF:B0:05:64:AA:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019024283ABA2D0D629E2821586D244465CC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8_Wyx6Eh31pkSS8fDfvsAVkqqU.roa
Signing time: Mon 17 Jun 2024 03:05:34 +0000
ROA not before: Mon 17 Jun 2024 03:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:2427:5d80/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:24:28:3a:ba:2d:0d:62:9e:28:21:58:6d:24:44:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 17 03:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbcfd6cb1e84877d699124bc7c37efb00564aaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:54:6a:d6:7c:ad:a2:cc:9a:84:c1:3f:90:
cc:72:ca:c3:cf:2e:f7:ec:24:aa:a6:65:5d:94:fa:
07:a0:4e:70:35:28:9a:0d:33:f2:63:5e:05:bd:c2:
70:98:11:bf:a9:21:b9:76:cc:42:14:a2:66:27:f8:
69:0b:89:f1:e5:48:b1:0b:9f:72:63:92:20:7b:59:
d8:81:d7:74:58:27:65:86:74:39:59:4b:e6:ea:04:
07:a0:3c:27:25:1f:1d:db:e6:56:6c:9e:08:85:fa:
6a:96:b6:a2:ce:f5:a3:c0:10:d9:31:f2:7a:4a:a1:
77:b6:55:e9:d7:9b:0b:dd:34:46:10:40:78:01:30:
65:05:c8:f6:a1:fe:70:b6:66:b7:74:eb:5a:89:bf:
6b:21:d1:d0:db:86:56:73:83:c4:04:af:b8:5d:a8:
62:28:61:cc:84:11:67:b8:64:d4:7b:c2:f9:c0:2a:
f2:5f:55:fd:bd:2f:2c:26:6c:47:23:fb:72:c8:13:
89:0a:83:87:3c:9e:8d:40:68:b4:aa:ed:ec:cb:36:
df:ea:14:79:5b:ea:13:7e:a0:a6:42:59:b8:f7:82:
d5:81:4a:c2:07:53:5c:67:89:95:ef:a6:4c:f7:65:
c5:99:10:24:3c:ab:95:a3:83:1a:7f:39:4f:68:c9:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:D6:CB:1E:84:87:7D:69:91:24:BC:7C:37:EF:B0:05:64:AA:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8_Wyx6Eh31pkSS8fDfvsAVkqqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:3f:a3:8d:35:ac:7a:14:c2:01:33:22:6a:91:37:d9:6b:5e:
ab:03:9e:b5:93:6c:db:b9:7c:48:a5:3d:f1:29:a2:1c:3f:c8:
a0:c0:b9:56:7f:1a:62:ef:d6:a4:ad:01:00:d9:36:39:ab:be:
64:0d:b4:4d:67:24:d2:f3:f4:0f:45:f9:e8:97:ff:55:47:fd:
1c:e1:89:1f:73:45:cd:6a:d4:c8:2d:6a:0b:d0:d0:d2:8f:5c:
98:b7:39:6d:f8:b8:dc:b2:e1:6e:de:d9:90:77:d0:7c:79:fc:
86:f4:8c:ca:75:95:a3:78:4d:df:1d:59:c4:66:16:84:d3:7c:
66:cc:55:c0:58:3f:0f:d9:56:5e:9e:52:c0:03:40:07:7a:d2:
ca:d3:97:d5:ad:fe:3e:c1:5b:84:ba:75:e4:75:be:ce:94:dc:
58:fa:6b:7d:c0:9d:a6:e9:39:b1:ae:39:2f:58:be:f4:5b:dd:
a4:7a:07:9e:61:db:1f:57:99:52:a5:e9:44:cc:54:53:4b:0d:
db:a0:14:39:5a:ab:6f:14:e9:4d:ca:54:2b:c8:20:ea:79:2e:
06:11:03:a5:b4:dd:7b:07:0a:67:52:1c:dd:50:84:75:cd:5c:
77:2e:3d:73:d7:90:e2:38:a3:3f:bd:de:99:5e:e3:94:ad:20:
bf:d3:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:32:57 2025 by rpki-client