Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xscxWtKPUBEoJ12LRL067AD8dgY.roa
File: xscxWtKPUBEoJ12LRL067AD8dgY.roa (raw, json)
Hash identifier: pxTqlRIduQ673+cPzpnXGrDh1/LwE1m8+vgx93vJTm0=
Subject key identifier: C6:C7:31:5A:D2:8F:50:11:28:27:5D:8B:44:BD:3A:EC:00:FC:76:06
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB6BCDFFA022A544B10D328CF28808EA0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xscxWtKPUBEoJ12LRL067AD8dgY.roa
Signing time: Sun 26 May 2024 21:09:42 +0000
ROA not before: Sun 26 May 2024 21:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:bc:df:fa:02:2a:54:4b:10:d3:28:cf:28:80:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 21:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c7315ad28f501128275d8b44bd3aec00fc7606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:85:eb:9d:14:94:d2:3e:02:82:d9:c8:63:bd:
f8:cf:ed:03:19:db:91:c4:18:86:88:6a:21:ae:9a:
5b:6c:cf:70:20:cb:33:fa:6a:bf:db:16:41:97:7f:
ba:fa:14:52:16:52:57:5d:7a:87:cf:21:da:3b:55:
4e:f9:9b:43:7d:a6:bf:6f:cb:b4:f9:e1:a7:0d:e4:
a5:4b:e3:d8:aa:f0:ac:b2:f3:6e:69:98:e1:27:7a:
cb:44:02:e0:a2:ea:13:7a:2c:12:9a:48:48:7d:e7:
00:25:9d:e1:e6:19:6d:6f:03:67:5e:33:86:90:12:
88:d7:b8:88:ce:60:0e:31:1f:a1:89:4a:24:53:b0:
5a:ff:d0:68:99:88:be:75:f5:b5:8c:b5:3c:44:0f:
5a:28:ce:03:52:1f:02:0a:96:8a:8c:8a:d6:21:1a:
50:10:87:46:fd:d1:08:63:14:43:3e:36:7b:a6:43:
f5:79:c6:26:98:45:85:37:14:7b:cc:2a:d5:b3:e9:
13:7f:cf:48:5e:2c:ff:12:f0:49:27:34:a0:e1:43:
ba:16:8b:58:ed:84:36:3d:e5:ab:20:05:86:9c:4b:
d6:44:85:db:bf:0c:51:23:5a:71:2d:0f:ad:8e:2b:
88:9f:20:a4:4c:03:ca:46:c2:b3:b1:2e:13:d3:6f:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:31:5A:D2:8F:50:11:28:27:5D:8B:44:BD:3A:EC:00:FC:76:06
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xscxWtKPUBEoJ12LRL067AD8dgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:e0:2d:0a:7a:69:82:36:78:b2:27:3f:4b:a8:5a:fc:29:c3:
6a:86:1c:a3:c5:7d:2b:38:c2:2e:0a:35:49:c9:33:a7:3a:48:
29:fe:63:8b:31:bf:2b:4a:83:0d:5b:8b:a9:ec:53:b5:16:a5:
f8:9d:1a:2b:0c:7b:25:bb:85:88:28:73:2c:bb:04:83:af:6e:
09:bd:88:a4:b4:fe:8c:74:28:4b:cd:c1:fe:da:72:1f:05:17:
c0:ac:03:f8:4e:b7:05:b2:b3:e9:df:fd:a1:88:34:ba:e7:db:
5a:cb:de:81:69:15:6c:6d:37:48:80:a3:d9:36:02:95:55:21:
34:f7:f7:6f:94:41:a7:f8:f8:fa:95:44:56:4f:b9:65:af:46:
3b:a0:9a:56:68:e9:3d:4b:5c:81:64:93:39:b4:ae:1a:f8:3c:
ed:7c:da:74:78:50:42:ec:bf:92:66:f1:1d:d4:da:0d:b2:f8:
0f:b2:2e:f8:bc:8d:7f:46:cf:25:c2:be:a7:de:5f:96:ff:f0:
b7:a1:02:1b:e7:ef:52:66:31:9e:61:2b:0d:57:44:54:59:2a:
d9:48:6e:35:17:87:f8:65:06:2c:b6:97:07:65:f1:fa:cc:fa:
73:34:99:5b:83:d5:cd:9b:3b:36:11:bd:53:f8:3a:f3:d3:ef:
2d:03:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:10:10 2025 by rpki-client