Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8FEah3bKkhx-E1UHYssK4r0IdQ.roa
File: w8FEah3bKkhx-E1UHYssK4r0IdQ.roa (raw, json)
Hash identifier: aTOESW2D+vVgv/JDOGRzBq9l5ESeHVWmYOp+Y2qIr/w=
Subject key identifier: C3:C1:44:6A:1D:DB:2A:48:71:F8:4D:54:1D:8B:2C:2B:8A:F4:21:D4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB42C71D3261EEEDBEA41BC74FD27D258
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8FEah3bKkhx-E1UHYssK4r0IdQ.roa
Signing time: Sun 26 May 2024 09:12:42 +0000
ROA not before: Sun 26 May 2024 09:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:2c:71:d3:26:1e:ee:db:ea:41:bc:74:fd:27:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 09:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3c1446a1ddb2a4871f84d541d8b2c2b8af421d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:b0:90:75:5d:18:24:45:3b:df:4b:52:d6:
01:85:d2:1d:e8:ac:ff:5b:4f:59:71:b5:b4:8c:47:
f1:5b:54:e9:2e:06:cb:87:80:ab:8d:3d:ae:1a:4e:
a6:b3:98:08:80:4e:7f:44:a0:27:24:31:88:9a:c6:
0f:aa:0f:5e:57:a7:ef:ae:47:6c:06:be:1f:b4:2f:
30:2c:89:67:a7:8e:13:d5:ab:04:40:dd:64:64:7d:
3f:71:6d:47:10:e8:76:0f:87:98:51:bc:bf:4e:6f:
4a:f2:3c:d7:ce:2f:a6:ac:0e:aa:36:44:6c:0f:48:
8f:7e:d4:a7:6d:0b:c2:26:bf:d1:98:d1:fa:9d:7b:
a5:57:32:db:43:f7:dc:26:fd:45:97:3e:da:9d:53:
87:cd:98:d5:b8:14:96:ef:54:5f:80:9e:20:44:07:
64:b4:e2:c3:9e:7f:45:ed:65:69:0b:d6:0d:b2:18:
b9:8d:e0:d3:8a:2e:cf:1d:da:72:14:a8:12:cd:c6:
09:fb:a0:f8:20:cb:2b:c9:63:28:69:10:c0:e3:78:
cf:86:cb:2b:49:54:8f:15:c5:6d:a0:3f:80:d0:04:
1d:c7:a6:47:31:07:b3:d8:55:40:29:e6:bb:41:9d:
bb:ef:ac:10:ed:7f:cf:10:5d:23:68:56:4d:00:47:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:44:6A:1D:DB:2A:48:71:F8:4D:54:1D:8B:2C:2B:8A:F4:21:D4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8FEah3bKkhx-E1UHYssK4r0IdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:ed:df:1d:a5:ba:68:aa:db:cf:9d:de:36:02:3f:f8:65:2d:
43:09:3b:97:77:4f:9b:32:d4:0d:bc:87:72:af:35:a4:f2:15:
d5:9c:dc:95:69:61:74:c5:ea:76:35:0f:c6:22:f2:bd:02:23:
35:65:9e:ea:37:6d:8a:1b:81:49:f7:88:67:02:5f:db:03:a7:
5b:13:57:bd:7c:f6:ff:1b:10:17:c7:65:07:c3:5a:98:a4:4f:
51:51:0b:bf:85:97:4e:16:02:aa:12:40:10:8d:37:c5:76:14:
15:86:63:c1:24:bb:29:0b:f5:13:d9:6e:46:ee:60:4b:c4:b1:
67:fc:8a:13:ef:ad:a2:b8:3a:39:17:7f:0a:7e:67:88:0f:6e:
17:4a:7e:6e:5e:01:0b:45:6d:21:26:36:79:58:25:07:9c:ff:
46:e2:ea:f2:55:d3:27:dc:3e:70:f0:9d:d4:6f:7b:ad:b3:7a:
31:ec:7e:ee:b6:12:41:e6:15:14:5b:12:66:77:19:53:07:1b:
78:97:79:f8:b9:95:cf:91:a7:c4:07:97:41:e9:e4:ca:52:01:
c8:4f:71:20:d9:7e:c5:6b:43:05:d2:97:85:86:a7:be:e3:d2:
a8:0d:70:b9:99:c6:e3:77:be:ca:80:83:ef:6a:bc:57:4e:94:
12:c9:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:39 2025 by rpki-client