Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVF1I6G06p-IYhTDHM53fupDho0.roa
File: yVF1I6G06p-IYhTDHM53fupDho0.roa (raw, json)
Hash identifier: zjdDYfuQQV+emfAwj33K5HoaC3zniaA2YJHoqwXhtwo=
Subject key identifier: C9:51:75:23:A1:B4:EA:9F:88:62:14:C3:1C:CE:77:7E:EA:43:86:8D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEF2BAC3839D89186BAC4D4941DA89557
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVF1I6G06p-IYhTDHM53fupDho0.roa
Signing time: Thu 06 Jun 2024 20:09:27 +0000
ROA not before: Thu 06 Jun 2024 20:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ef:2b:ac:38:39:d8:91:86:ba:c4:d4:94:1d:a8:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 20:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9517523a1b4ea9f886214c31cce777eea43868d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:da:ff:e7:9a:09:f3:0b:7d:14:45:fd:1d:
e3:91:2e:90:5d:2c:ba:e5:ee:4b:99:cc:62:e9:30:
95:af:e7:8c:1b:cb:8f:f9:65:b1:b9:61:a4:e6:52:
75:2e:f3:14:44:43:3b:71:33:92:27:56:2e:d4:13:
bb:48:ce:06:8e:f7:e6:56:d0:7b:3b:58:a7:b2:55:
38:f7:49:86:51:e7:63:3b:d5:25:fb:14:d4:0a:93:
46:af:2f:07:3b:df:f5:54:02:76:fd:3a:1b:37:b7:
8b:b9:61:12:fd:8d:6a:b9:6e:92:b5:ba:29:a0:65:
12:21:7e:87:b6:ef:22:12:18:d3:5e:e7:4e:7c:66:
ff:63:b0:5c:5a:14:4b:b4:57:4a:f8:ee:5e:1a:ca:
73:95:90:f3:94:2a:69:63:8c:4b:65:19:01:80:40:
b2:df:ec:cc:d8:19:6e:87:7e:ad:db:72:02:57:10:
0d:e7:55:ad:58:ec:ee:74:f7:91:99:53:0f:7d:21:
97:23:81:fb:4b:bb:0b:a3:bb:38:e3:29:74:d5:21:
81:42:b4:cf:35:96:45:ef:83:e4:b8:79:bd:c0:47:
a2:1f:d5:cb:35:80:0f:c0:cb:34:78:0a:a8:8b:ad:
39:e0:da:f7:a4:0c:80:10:d4:80:f3:78:7a:ca:1a:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:75:23:A1:B4:EA:9F:88:62:14:C3:1C:CE:77:7E:EA:43:86:8D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVF1I6G06p-IYhTDHM53fupDho0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:81:d2:ec:79:d5:28:7d:5f:d0:68:b2:2c:99:b6:8b:f8:91:
c3:d4:75:7f:be:89:f7:e7:54:4c:0c:e3:d0:a5:22:7d:c1:16:
6b:e7:29:89:78:3c:ff:e7:da:e0:ca:35:af:ac:8e:7d:ef:94:
7c:14:a4:d7:3a:a6:70:0d:a1:4c:bd:61:49:f3:d1:c8:19:a6:
a6:89:61:15:2f:4a:8a:4a:a3:c3:a9:3b:9f:f6:9b:6c:98:ec:
45:30:df:09:0d:3d:30:b5:ed:f5:e4:92:f5:ee:77:5e:d9:37:
82:37:af:e6:ec:75:f0:9b:db:80:c1:3c:fe:73:1c:f3:ed:4a:
de:2e:2f:51:48:40:e3:ee:e9:d5:59:2c:9e:6e:4a:bf:61:ef:
68:ea:0b:c4:f3:95:d5:fc:4d:75:80:33:76:5a:1f:bc:f0:7a:
39:50:4d:9b:23:c5:05:db:15:6f:a3:9d:0b:95:49:0c:9a:b7:
29:e3:1a:6f:b3:51:de:fa:9e:62:d1:a0:e5:da:c4:34:a3:5f:
95:fa:a7:7b:aa:8b:c8:3c:78:aa:fc:40:ec:f9:5f:83:5b:74:
aa:15:23:f9:7b:00:22:11:83:b5:83:0d:47:31:96:7d:8c:68:
20:c3:59:9e:db:13:04:a4:9d:67:60:1c:ea:7b:d1:73:ef:b6:
c5:78:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:11:23 2025 by rpki-client