Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uidP6sAVmRTGLSQZYQdHfDK_aEs.roa
File: uidP6sAVmRTGLSQZYQdHfDK_aEs.roa (raw, json)
Hash identifier: vXx9IMAKXja8K8rEMuWm6+euymfVyya2rEv4Gyg6Phc=
Subject key identifier: BA:27:4F:EA:C0:15:99:14:C6:2D:24:19:61:07:47:7C:32:BF:68:4B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A17CE1C3C4E0BF5BA95FFD62018A36DC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uidP6sAVmRTGLSQZYQdHfDK_aEs.roa
Signing time: Thu 11 Jul 2024 11:10:34 +0000
ROA not before: Thu 11 Jul 2024 11:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:7c:e1:c3:c4:e0:bf:5b:a9:5f:fd:62:01:8a:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 11:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba274feac0159914c62d24196107477c32bf684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:5b:83:fe:d2:7f:38:8c:7f:8a:3d:ae:47:
ea:11:15:6f:a3:f9:2c:5e:1d:97:15:4c:e0:d2:c5:
7e:32:9f:e5:7b:ee:68:f1:d2:c2:4a:a9:12:38:f5:
5b:85:21:ed:01:b7:64:96:4e:d4:0a:16:96:9f:d6:
34:97:c0:5b:e9:41:e5:b3:84:09:a3:9b:a1:62:ca:
d9:7e:45:67:ad:b3:d0:c4:91:a9:bb:91:09:ab:95:
e8:59:04:28:4b:e6:5a:77:d4:56:4f:6c:fb:07:43:
81:e9:55:c8:ec:de:5f:c7:4a:42:de:cc:a3:fa:73:
59:4f:1a:d6:60:4b:c3:50:2a:4d:ab:5a:a7:db:1c:
e5:30:e2:d7:87:64:4a:26:67:f2:4e:f4:1f:5d:44:
94:29:fa:9d:35:67:a5:d6:c1:f9:a3:01:3c:d1:cf:
aa:2a:7b:47:97:12:5c:e8:26:a0:16:4c:0f:38:03:
df:de:e9:fd:ed:27:c0:f8:4a:25:a2:0f:08:1e:61:
45:f6:12:02:8c:44:3a:51:c7:12:6b:96:5e:a2:dc:
73:b1:4b:37:d6:ae:cf:83:23:03:c2:6f:c6:93:fb:
9d:89:c6:79:90:a8:05:2e:ad:24:ed:7a:48:20:58:
ac:5b:ac:61:f5:73:ae:2a:69:89:a0:01:49:29:6c:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:4F:EA:C0:15:99:14:C6:2D:24:19:61:07:47:7C:32:BF:68:4B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uidP6sAVmRTGLSQZYQdHfDK_aEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d0:5a:64:4c:a5:aa:0a:16:a1:dc:25:60:95:9a:6f:83:95:
2e:d7:e2:97:e6:be:76:df:43:32:a8:8e:2d:2b:cb:8f:1c:8c:
83:fb:e8:6e:f2:65:56:d5:91:41:7e:c5:cf:32:34:c9:93:7e:
d6:52:44:a7:74:2b:d9:fa:30:37:d9:96:c6:de:0d:e5:7b:9c:
5d:22:cb:5a:7d:f1:25:98:94:31:70:34:79:bc:8b:73:b4:ba:
73:af:68:1d:5e:11:0f:ed:ae:9d:c2:0e:5a:b5:8f:7e:19:93:
cf:35:d4:f1:34:d3:46:f8:13:32:03:77:bb:d7:33:a7:b8:f3:
c4:7f:81:5f:14:5a:fa:b7:ce:10:37:aa:99:b2:d4:2f:a0:46:
2a:72:a2:52:7e:73:c6:11:57:7c:9c:eb:76:7d:c0:2c:3c:ae:
39:4a:15:e7:1b:ec:e3:bd:26:7f:58:6c:97:35:01:8d:1a:49:
0d:df:e9:bd:8f:e3:a4:91:5f:c3:b7:4a:56:b9:39:ab:d9:73:
42:84:17:e9:d2:e5:8b:16:cd:1a:62:3f:21:0e:93:89:33:1c:
1a:ba:ac:47:4e:ad:94:33:cf:35:5f:97:ff:1f:8d:5f:75:4c:
71:bc:40:d8:5b:92:c6:26:65:1c:b3:d3:57:e7:99:44:40:06:
02:58:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:04:50 2025 by rpki-client