Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vEvEU8zz0ZFOtuikfu18Muooxjo.roa
File: vEvEU8zz0ZFOtuikfu18Muooxjo.roa (raw, json)
Hash identifier: xa/5tHddFhGCpoIn9S5YngfwiysiTybNs45IH1r0H7I=
Subject key identifier: BC:4B:C4:53:CC:F3:D1:91:4E:B6:E8:A4:7E:ED:7C:32:EA:28:C6:3A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A891A04905B6FF0D310329DA8E657DEA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vEvEU8zz0ZFOtuikfu18Muooxjo.roa
Signing time: Fri 12 Jul 2024 20:10:34 +0000
ROA not before: Fri 12 Jul 2024 20:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:91:a0:49:05:b6:ff:0d:31:03:29:da:8e:65:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 20:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4bc453ccf3d1914eb6e8a47eed7c32ea28c63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:19:0b:8d:e7:80:04:c8:7d:55:59:ea:f5:
d2:1c:14:da:5a:c3:81:7b:f2:b7:1f:cd:1b:42:3d:
53:15:42:5b:78:0f:f5:4c:eb:f4:d4:18:16:1e:aa:
a1:ed:22:98:e3:7c:6e:14:bc:99:d3:4f:a6:2b:9a:
9a:c4:ab:ed:ff:c1:7a:6d:f6:b1:78:01:e2:2a:e2:
92:d0:47:13:0e:37:48:21:a2:0c:d8:6c:81:00:7e:
5d:33:f2:61:d6:d7:27:87:a1:2b:a8:0b:5d:ae:91:
0b:94:70:83:b1:17:47:f7:02:d0:fc:8b:4e:b6:a3:
7f:f5:5d:73:cf:d7:8b:9b:91:c7:bd:94:c2:f9:17:
2b:4c:93:f4:43:66:ed:9f:31:c8:46:f7:44:eb:ca:
0f:f8:40:56:59:bb:cc:0b:eb:03:3d:fc:f3:e3:5c:
ee:87:62:b4:16:ee:b3:3c:51:41:64:69:f5:63:79:
76:d0:13:61:cf:7e:84:23:03:6d:ee:86:6e:ea:6f:
28:26:64:32:69:95:1e:43:3d:53:31:f8:81:f0:9c:
f8:f6:86:ad:f7:33:b4:ae:22:25:57:60:b0:5c:d0:
8a:ac:59:d1:5a:39:f6:69:43:b7:62:73:a7:0d:ef:
c2:a9:11:49:87:e6:a5:ad:c4:43:a2:b8:be:e6:92:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:C4:53:CC:F3:D1:91:4E:B6:E8:A4:7E:ED:7C:32:EA:28:C6:3A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vEvEU8zz0ZFOtuikfu18Muooxjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:3a:69:77:6e:b2:64:57:a7:00:1f:29:59:79:f0:b7:df:c0:
7f:5d:83:51:4d:5e:61:0c:b3:69:29:64:00:84:d3:1b:bc:c1:
57:2f:38:54:d0:3f:fe:1a:b0:52:8c:07:c3:b7:41:7d:d0:ff:
b6:d2:eb:b5:0f:fe:b8:89:5b:60:1c:8d:aa:71:84:77:66:ab:
73:60:ec:d6:60:51:8d:b1:09:d7:ce:ef:97:80:6c:8d:7b:c3:
ad:a6:8f:07:8d:7a:bd:f8:cd:0b:a9:93:66:29:34:4c:d2:17:
b8:04:5d:8c:a3:e9:4f:de:8a:ef:6d:fa:2e:a9:c8:85:39:21:
a7:06:b5:d6:3f:c7:1e:47:1f:1d:86:6c:d6:0e:17:1f:6c:53:
68:2a:80:dc:94:c7:13:98:a6:7f:04:ef:6c:bb:4b:fc:8f:1d:
f3:80:14:0f:bf:41:b5:73:c7:c9:23:cc:88:6f:54:7b:c2:f4:
a6:b7:21:51:01:15:3c:0c:92:7e:db:68:0e:2f:ab:2c:25:96:
35:e5:a2:3b:94:16:72:e5:0d:55:1d:e3:46:e1:46:f2:3d:6f:
45:21:cc:a6:82:57:0d:c2:31:a2:6b:85:f2:80:c1:95:3a:60:
d0:b8:e0:36:51:cc:48:35:94:3e:58:3b:ff:45:65:4e:30:a8:
70:a6:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:21 2025 by rpki-client