Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zORTyTVsAsuSk-fobuXmaJHKwAU.roa
File: zORTyTVsAsuSk-fobuXmaJHKwAU.roa (raw, json)
Hash identifier: tLhA36UIeGrAD+FOrrZfberzfWBwMI/FczRNKGUgUmw=
Subject key identifier: CC:E4:53:C9:35:6C:02:CB:92:93:E7:E8:6E:E5:E6:68:91:CA:C0:05
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909CC54D0483794B90ACB275AB7776EFC0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zORTyTVsAsuSk-fobuXmaJHKwAU.roa
Signing time: Wed 10 Jul 2024 13:11:34 +0000
ROA not before: Wed 10 Jul 2024 13:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:c5:4d:04:83:79:4b:90:ac:b2:75:ab:77:76:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 13:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cce453c9356c02cb9293e7e86ee5e66891cac005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:33:c9:30:cc:e7:e3:9f:92:d3:ec:62:95:
d0:49:68:1a:c8:79:29:77:65:91:18:c8:53:6a:5f:
db:3b:a9:81:8f:26:d1:1c:d2:39:4d:d5:04:92:f3:
c0:8b:da:70:a4:e2:5a:a9:7a:d0:24:52:15:cd:e1:
71:2f:7d:9a:24:fd:08:cb:98:b5:30:63:d3:72:1b:
79:5f:c8:83:9d:57:4e:6f:47:ca:f9:a9:8a:c2:71:
c0:a9:b4:3b:39:4c:9c:e7:ad:34:e5:73:0e:55:f6:
50:ee:93:0f:4f:d6:6b:84:9b:a5:7b:d6:1f:b3:98:
11:9f:bd:46:3c:c4:50:7e:1f:aa:e4:5b:0d:57:a2:
ae:26:8e:9f:9c:2f:99:86:7c:9c:b2:67:15:a7:06:
57:5a:6f:7a:0e:38:18:b6:74:c8:dd:83:6d:e6:b7:
07:af:a7:46:77:37:50:70:3e:35:5a:19:38:14:71:
fc:fc:67:40:bf:5e:52:1e:9d:df:e6:8c:a3:ab:21:
89:66:df:77:dc:27:0e:19:92:10:10:ee:79:8f:2d:
76:27:10:bd:6f:66:17:99:4e:9f:97:47:9e:9f:9b:
ba:41:bd:dc:1c:31:c7:38:7a:d9:12:33:43:dd:8c:
1d:f1:9f:1a:94:5e:56:26:57:2e:4d:46:c4:b2:94:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E4:53:C9:35:6C:02:CB:92:93:E7:E8:6E:E5:E6:68:91:CA:C0:05
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zORTyTVsAsuSk-fobuXmaJHKwAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:43:f1:52:f0:4d:14:25:69:92:b6:7a:2f:25:ab:8c:2f:cb:
1a:e5:43:91:e7:56:ab:f4:cb:cf:d1:38:33:be:64:5e:f5:f0:
ab:54:57:61:56:f5:84:09:29:c5:f9:eb:58:98:f8:0b:f4:f5:
0d:fa:d8:1b:0d:13:4c:a3:3f:37:8c:b3:e8:c7:6d:e1:e1:c0:
b8:75:55:f7:a9:8f:9c:aa:ca:79:1f:fd:45:73:95:89:57:eb:
e4:d8:b1:bc:f9:42:e3:04:9a:97:7c:21:d5:e7:f5:0c:fc:e5:
4c:ff:a6:ea:52:88:70:0c:22:8f:db:6a:1e:6c:48:14:a2:1a:
11:4c:0b:91:a1:42:2a:51:69:43:ab:01:fe:2a:33:64:81:1a:
ea:c2:23:42:d3:6a:ff:6a:91:4c:5f:e7:69:ee:43:9c:b2:19:
8e:e0:f8:6e:94:a1:20:a0:3b:6b:69:d6:3c:b3:3c:79:05:e2:
2a:6c:b8:8d:64:8c:d4:67:30:34:77:c7:2d:37:d6:11:79:6a:
39:32:ce:d0:6a:82:4e:d7:91:f2:45:79:e8:9a:3e:f5:e3:da:
59:38:8c:63:8c:62:5c:1a:eb:05:8a:c8:41:32:54:3e:84:2a:
2b:91:d1:b0:73:db:0d:a5:11:5e:49:8a:24:7d:d3:b3:aa:2b:
4a:f7:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:08 2025 by rpki-client