Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uzFv36aElf94yxWsk1XQpc-Nwg0.roa
File: uzFv36aElf94yxWsk1XQpc-Nwg0.roa (raw, json)
Hash identifier: lqRLnmiLUD1kdU+9+honNKb98pqU0xRvlfOFN02WGB0=
Subject key identifier: BB:31:6F:DF:A6:84:95:FF:78:CB:15:AC:93:55:D0:A5:CF:8D:C2:0D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906BD6D054E4C7874667797552A2BA1EDA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uzFv36aElf94yxWsk1XQpc-Nwg0.roa
Signing time: Mon 01 Jul 2024 01:09:18 +0000
ROA not before: Mon 01 Jul 2024 01:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:d6:d0:54:e4:c7:87:46:67:79:75:52:a2:ba:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 01:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb316fdfa68495ff78cb15ac9355d0a5cf8dc20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:c3:7d:8e:48:24:85:db:b5:58:fd:1a:c1:
3d:88:1b:83:8b:8b:7e:8b:69:54:e0:7d:a5:4d:92:
54:1e:ad:c0:6c:c0:6e:4d:ba:62:3e:44:d4:e2:45:
40:36:0c:92:f3:77:96:a8:33:ab:3e:d6:23:c6:a7:
2e:83:eb:ac:bc:b2:2c:47:16:7f:d9:55:03:2f:20:
48:cd:d2:4e:f7:60:15:c2:c7:c1:77:60:1d:5f:d2:
19:19:c5:ba:e9:c4:ce:0c:dc:0e:73:a0:89:2c:15:
d5:db:50:30:42:74:84:5a:3a:c9:3f:ed:71:92:fd:
84:cf:62:d4:45:48:87:c4:f6:9b:49:68:5a:d1:c5:
00:eb:ce:e7:0d:6a:22:1c:ff:c2:ee:61:68:ba:83:
aa:b4:e2:76:ed:27:19:59:50:35:3b:77:5e:79:fe:
bf:e9:64:7b:54:0a:48:2e:ef:94:4c:25:40:37:c3:
8b:9c:5f:30:45:60:96:f3:16:21:f6:01:7a:5e:28:
aa:d9:7c:5e:7c:ad:1f:1d:5b:ee:ae:11:a8:ec:a2:
58:ef:f9:72:08:77:0d:80:6b:fe:3f:20:3c:c1:52:
19:18:6e:ad:5f:6d:0a:2f:db:ef:e8:52:83:13:2d:
4a:8b:05:d3:4c:3c:64:ba:24:e3:c6:23:22:3d:62:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:6F:DF:A6:84:95:FF:78:CB:15:AC:93:55:D0:A5:CF:8D:C2:0D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uzFv36aElf94yxWsk1XQpc-Nwg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:e3:55:2f:90:e0:9b:a0:88:34:6e:84:90:7b:8a:01:b5:ac:
17:53:cf:4f:f4:29:ff:63:23:b7:e4:e1:67:a7:86:1c:48:36:
7d:05:96:c2:cd:20:9b:0a:e6:a4:27:a7:bb:24:57:6c:fa:45:
51:4a:66:ab:7a:53:ed:ea:d7:19:cb:d6:03:b0:55:d4:99:be:
22:ad:e5:66:41:9d:96:40:08:b9:3b:4a:76:b8:f9:c7:df:bf:
0d:e9:76:11:27:11:06:93:af:3b:b1:db:37:10:e4:dd:23:9f:
bf:b9:25:0c:c2:ea:ff:b2:85:f5:b9:e1:d2:33:dd:79:6a:f0:
46:57:7a:e3:52:0b:eb:99:01:87:15:2d:0f:91:32:84:a4:15:
6d:51:4c:0c:7b:4d:bd:92:af:66:e4:0d:7c:0e:d1:4d:6b:c9:
8e:d8:7c:91:de:85:44:8f:b8:8b:b4:e3:1a:c9:0b:25:61:13:
a2:83:45:4f:81:98:8f:87:08:48:93:2f:b5:3e:af:6a:c9:81:
7f:e0:df:61:b8:6f:d6:ac:f5:c0:17:35:78:e9:62:5f:fc:1d:
d0:e6:61:94:4f:26:d3:b5:69:5d:32:19:ab:91:be:9c:50:19:
ef:b0:28:71:24:88:8a:d4:f3:40:60:68:52:81:cc:0b:1c:58:
ea:1d:fa:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZBr1tBU5MeHRmd5dVKiuh7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzAxMDEwOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjMxNmZkZmE2ODQ5NWZmNzhjYjE1YWM5MzU1ZDBhNWNmOGRjMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx47DfY5IJIXbtVj9GsE9iBuDi4t+
i2lU4H2lTZJUHq3AbMBuTbpiPkTU4kVANgyS83eWqDOrPtYjxqcug+usvLIsRxZ/
2VUDLyBIzdJO92AVwsfBd2AdX9IZGcW66cTODNwOc6CJLBXV21AwQnSEWjrJP+1x
kv2Ez2LURUiHxPabSWha0cUA687nDWoiHP/C7mFouoOqtOJ27ScZWVA1O3deef6/
6WR7VApILu+UTCVAN8OLnF8wRWCW8xYh9gF6Xiiq2XxefK0fHVvurhGo7KJY7/ly
CHcNgGv+PyA8wVIZGG6tX20KL9vv6FKDEy1KiwXTTDxkuiTjxiMiPWLGLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLsxb9+mhJX/eMsVrJNV0KXPjcINMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvdXpGdjM2YUVsZjk0eXhXc2sxWFFwYy1Od2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAALjVS+Q4JugiDRuhJB7
igG1rBdTz0/0Kf9jI7fk4WenhhxINn0FlsLNIJsK5qQnp7skV2z6RVFKZqt6U+3q
1xnL1gOwVdSZviKt5WZBnZZACLk7Sna4+cffvw3pdhEnEQaTrzux2zcQ5N0jn7+5
JQzC6v+yhfW54dIz3Xlq8EZXeuNSC+uZAYcVLQ+RMoSkFW1RTAx7Tb2Sr2bkDXwO
0U1ryY7YfJHehUSPuIu04xrJCyVhE6KDRU+BmI+HCEiTL7U+r2rJgX/g32G4b9as
9cAXNXjpYl/8HdDmYZRPJtO1aV0yGauRvpxQGe+wKHEkiIrU80BgaFKBzAscWOod
+ik=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:29 2025 by rpki-client