Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zZRL_IY2Bjtj-HHujP6lJSlrJ1A.roa
File: zZRL_IY2Bjtj-HHujP6lJSlrJ1A.roa (raw, json)
Hash identifier: 0YsRlUULCaxTW2reC4NhIyHa7BcFJIQOap3/IpSQHzA=
Subject key identifier: CD:94:4B:FC:86:36:06:3B:63:F8:71:EE:8C:FE:A5:25:29:6B:27:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB618FEB27CADA891298E3F0902C6F91C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zZRL_IY2Bjtj-HHujP6lJSlrJ1A.roa
Signing time: Sun 26 May 2024 18:10:42 +0000
ROA not before: Sun 26 May 2024 18:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:18:fe:b2:7c:ad:a8:91:29:8e:3f:09:02:c6:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 18:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd944bfc8636063b63f871ee8cfea525296b2750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:15:2f:81:88:8f:de:1b:3a:bd:c2:af:e4:
95:b9:c1:28:4e:53:b4:fb:4b:87:8d:72:1e:90:46:
a5:64:aa:7b:2b:01:e8:66:c1:6c:87:1e:de:a5:e8:
f4:ef:f5:47:2d:c7:87:eb:78:7e:1f:fa:5e:65:ce:
65:a5:d2:a0:ee:07:9a:03:c5:c8:1d:11:b5:00:10:
7a:94:4c:91:a0:24:44:91:97:29:fb:57:6c:a8:8c:
56:9b:82:46:ca:d3:fd:16:84:45:bb:b0:e1:63:73:
4d:89:65:0a:4e:e9:34:47:4f:be:ce:d0:9e:09:15:
a7:6f:25:8e:ee:ea:e9:e1:0d:9e:b5:c4:b6:ed:ba:
3c:f6:4f:5a:5c:5f:38:d2:10:5b:3a:85:e8:76:50:
de:2d:5e:a5:9b:e1:ec:f9:33:cd:96:b2:2e:07:a0:
42:04:07:e1:4f:9c:24:c9:97:ff:23:c2:1e:5d:28:
26:7d:71:1d:94:56:7c:5e:70:49:bc:7e:22:b8:bb:
b8:4e:03:36:ac:78:12:6d:9a:15:57:9b:e5:dd:19:
68:4b:5c:57:7c:4c:97:a3:26:88:d6:e1:a0:f0:c8:
35:9b:25:e2:f3:34:e6:fe:2e:eb:c4:dd:c9:96:a1:
59:1a:63:0d:eb:10:c2:22:a9:f9:6b:d4:7f:22:f8:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:4B:FC:86:36:06:3B:63:F8:71:EE:8C:FE:A5:25:29:6B:27:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zZRL_IY2Bjtj-HHujP6lJSlrJ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:84:ef:27:f5:fe:05:ab:e1:e4:db:5b:e2:86:16:e9:ef:a2:
90:38:44:10:14:4e:96:06:c7:1f:23:1d:c8:30:6e:a6:e5:75:
29:f5:71:f7:d7:25:8c:5a:49:41:be:5c:11:a8:b9:f2:fd:34:
91:f4:53:f1:72:a7:2b:68:f2:0e:d0:49:88:31:eb:2a:45:45:
64:74:58:db:84:97:83:56:d2:1e:72:44:36:8d:48:3b:5d:c5:
1c:4c:b6:91:d9:b9:50:42:17:ee:c7:fd:ac:4f:b8:f7:35:a6:
b3:13:a6:5c:f1:06:fd:50:b5:61:5a:df:e8:7e:af:2e:f6:29:
b5:6c:75:20:c4:7b:9e:e8:57:71:88:83:29:af:77:d8:48:96:
55:c3:b8:74:1e:1d:d9:bf:ae:01:4b:7d:81:e4:64:75:f3:d0:
41:ce:45:5f:d9:88:6f:66:dd:db:a5:48:bf:9f:12:25:dc:b9:
39:c7:cf:5d:a3:80:4e:25:d5:ad:9d:88:af:23:69:ec:81:bc:
1c:ad:99:87:e0:18:28:44:90:b8:4d:7b:87:c3:0a:93:4b:73:
36:20:8b:0b:c3:e7:09:03:28:6c:30:58:cc:a6:43:8c:dd:27:
71:47:a5:68:c0:7e:98:16:6f:92:80:ef:4a:e6:dc:ca:28:8b:
96:df:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:01 2025 by rpki-client