Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4A89Z8TWHIrVucv9fxdCxMf228.roa
File: y4A89Z8TWHIrVucv9fxdCxMf228.roa (raw, json)
Hash identifier: ha0sJtfxqXYFz2CFdD/aeDGsQ2QjrDdi1YtvIUXKwnk=
Subject key identifier: CB:80:3C:F5:9F:13:58:72:2B:56:E7:2F:F5:FC:5D:0B:13:1F:DB:6F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FDED849632DEA06FA692C3EF24CC3A23D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4A89Z8TWHIrVucv9fxdCxMf228.roa
Signing time: Mon 03 Jun 2024 16:04:27 +0000
ROA not before: Mon 03 Jun 2024 16:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:ded8:2884/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:d8:49:63:2d:ea:06:fa:69:2c:3e:f2:4c:c3:a2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 3 16:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb803cf59f1358722b56e72ff5fc5d0b131fdb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:c4:ef:ed:ff:9f:18:17:77:4c:55:33:58:
9c:59:e2:90:86:75:ef:11:c0:5e:ba:b6:a4:c4:ab:
36:fb:a6:35:a7:84:3a:9e:dc:51:7c:e0:33:7d:7e:
e4:bc:81:a4:3c:72:5a:bd:61:e5:6c:de:08:3f:d6:
8f:39:27:9e:4a:f5:9a:99:26:eb:17:a0:d6:d4:35:
08:33:6b:6e:4a:32:89:1e:0a:62:c3:78:27:36:f1:
a6:52:28:91:e1:24:75:fc:a6:d5:3d:c3:a9:e5:e6:
cb:ae:10:d5:c4:33:80:10:99:91:38:76:82:6f:d4:
f0:c8:b9:5a:02:32:ac:8b:71:cd:c1:a4:72:9b:e0:
23:61:34:dd:f8:33:7c:d5:fa:41:ce:52:27:7a:2c:
df:a2:a6:a8:54:c4:f3:42:55:e7:ad:4a:ba:e9:1c:
a6:9d:ab:5e:c6:1b:8a:81:d9:df:9c:3c:bc:d8:51:
2c:80:e1:1a:a7:30:cc:f1:ab:a1:e5:66:13:25:23:
5c:22:07:de:26:1e:7c:89:1a:ad:1d:bd:0f:3b:eb:
3f:d5:0d:8c:fd:65:9b:4d:e2:77:c9:0d:13:61:31:
3c:ef:6c:3f:b4:3a:8e:1b:83:6b:1d:d3:38:7f:5a:
07:f1:b9:0e:43:ca:7a:b5:7b:00:63:34:97:83:51:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:3C:F5:9F:13:58:72:2B:56:E7:2F:F5:FC:5D:0B:13:1F:DB:6F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4A89Z8TWHIrVucv9fxdCxMf228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:bb:a2:1d:6e:46:61:72:7d:29:b1:22:39:f7:30:bc:41:02:
ae:c9:7d:f5:de:35:c6:ba:a0:5d:16:0c:7d:bd:da:10:78:a8:
ab:96:64:ad:61:5b:f1:48:74:9a:c4:20:1c:de:ee:8b:05:af:
31:51:c1:82:08:48:1e:14:f1:ac:64:1d:bd:95:85:9a:4c:68:
c4:92:fa:f0:6a:8f:fc:c2:b9:f0:35:01:86:13:a5:e4:7a:1f:
db:23:60:46:26:b6:36:98:0b:f6:15:2a:47:ce:23:25:04:99:
71:d8:da:f1:2a:e0:f6:cc:45:06:0b:c6:54:e3:41:b3:3c:a9:
24:50:21:49:cf:72:76:46:67:de:d4:4c:01:34:ac:c9:89:f4:
07:e0:a8:e4:c2:c8:db:31:72:bb:ba:d7:a0:f1:0d:87:53:b7:
77:09:7f:fc:ef:f1:cc:fa:a5:48:c0:b6:df:69:5b:40:06:6b:
e4:88:27:69:6e:61:9f:13:b2:00:48:05:5d:74:b8:dd:d7:5c:
54:1f:a8:14:04:a8:32:6f:67:0f:2b:ac:aa:98:8f:2c:a1:6a:
0b:62:a9:1b:a4:d8:7d:43:55:95:d3:0c:be:40:22:e0:5f:ba:
df:57:6a:6e:7b:fb:bb:27:69:9e:71:93:9a:4b:99:e5:12:9a:
56:8d:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:20:01 2025 by rpki-client