Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZONl_7icZNGm_PRn3uKJEfjCt8.roa
File: vZONl_7icZNGm_PRn3uKJEfjCt8.roa (raw, json)
Hash identifier: 0gX9bhYyisqAqZmpfjRDIAE/uV72o2P+3GKb/2gJAaw=
Subject key identifier: BD:93:8D:97:FE:E2:71:93:46:9B:F3:D1:9F:7B:8A:24:47:E3:0A:DF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019000C410BA9A7BC5BB73343B7F14B482A2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZONl_7icZNGm_PRn3uKJEfjCt8.roa
Signing time: Mon 10 Jun 2024 06:09:27 +0000
ROA not before: Mon 10 Jun 2024 06:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:c4:10:ba:9a:7b:c5:bb:73:34:3b:7f:14:b4:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 06:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd938d97fee27193469bf3d19f7b8a2447e30adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:59:75:ce:15:fb:13:5c:8e:35:1e:bd:22:
ce:9f:94:a4:ec:c0:6c:a7:0a:2e:00:b3:e4:c9:09:
e5:fb:12:27:af:4b:98:3a:47:3a:3c:71:32:83:bd:
d5:95:15:ca:ce:1e:c7:f6:09:5a:3b:1a:30:17:4e:
a7:e6:e3:8a:80:c6:e0:a4:ae:3c:00:40:75:5c:6b:
b6:77:00:e6:42:9b:14:f4:38:26:85:b4:41:1f:3b:
b2:2d:91:53:d0:1b:73:dc:ff:6a:46:a4:71:4e:b7:
1e:42:e5:28:db:1f:44:f5:c2:8a:d5:84:85:d2:68:
3b:a6:54:fc:5c:7d:99:31:d0:83:3d:05:1b:85:28:
58:1e:31:08:fb:d6:0c:9a:df:3e:10:82:dc:10:58:
d4:9d:ea:5e:d2:f6:35:8e:ac:4e:bc:90:ae:68:a2:
8c:5e:50:15:b3:80:32:37:ca:e0:ad:fa:ca:b5:ea:
b5:cf:bd:9a:88:2f:17:aa:03:5d:f1:5c:a5:22:5f:
a7:a9:3d:dc:ad:f8:56:4f:cf:da:f7:45:34:17:9b:
04:4b:c9:53:42:f7:23:63:70:25:cd:63:e4:72:2b:
d7:0e:09:f5:39:69:02:d9:c6:e4:79:83:0b:9e:cc:
b4:73:cc:5b:a9:c9:ea:23:ba:02:27:80:7a:7d:54:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:8D:97:FE:E2:71:93:46:9B:F3:D1:9F:7B:8A:24:47:E3:0A:DF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZONl_7icZNGm_PRn3uKJEfjCt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:93:e2:83:48:0a:de:cd:5f:72:52:38:0f:3e:61:22:f7:9e:
3a:98:ab:88:f6:db:99:45:ae:5a:35:2a:92:3b:8a:3c:7f:81:
36:ad:97:e7:fa:c4:33:50:fb:fe:a6:e4:91:a2:59:a2:c8:85:
bf:f8:84:0d:78:de:9b:78:0f:f8:48:74:2b:9b:df:07:71:73:
69:4d:00:35:70:c9:d1:dd:db:5f:df:60:83:5b:0f:80:a3:7e:
93:33:6c:6f:f9:d6:a7:ba:52:d3:3d:ac:5b:11:ec:8d:d6:d3:
09:cf:f7:b5:ae:94:6e:15:eb:21:f3:88:73:11:4c:53:c6:e6:
15:c6:71:05:4f:5c:c5:49:d8:25:63:b7:a4:37:ce:b4:c6:26:
c0:3e:91:fe:56:81:d2:a6:9a:0d:a3:a7:58:c9:54:ec:17:8a:
71:69:70:35:25:90:d4:63:24:e8:aa:9b:74:67:d8:1f:df:8d:
27:d8:bf:99:9a:10:78:c7:b2:4c:71:f2:db:cd:8d:a8:10:79:
3d:58:14:af:0a:51:8c:89:96:87:5d:df:e2:0f:c7:e9:ee:8f:
4e:ad:8f:50:26:e7:ed:8a:ad:67:19:43:bd:cc:f0:a6:6c:46:
8c:ad:67:87:fb:1b:8c:df:2c:ed:6d:64:c3:f1:4a:04:ee:7f:
bd:f7:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:40 2025 by rpki-client