Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Nplta2Q0NJdx427IQMMG0xA9rE.roa
File: 1-Nplta2Q0NJdx427IQMMG0xA9rE.roa (raw, json)
Hash identifier: eTijPni30fLMFH5C9QqaZCdrp8hiTX7+9WnOIlU+l18=
Subject key identifier: F8:DA:65:B5:AD:90:D0:D2:5D:C7:8D:BB:21:03:0C:1B:4C:40:F6:B1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190437B5669F3039DD088EB6526437C9B40
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Nplta2Q0NJdx427IQMMG0xA9rE.roa
Signing time: Sun 23 Jun 2024 05:04:34 +0000
ROA not before: Sun 23 Jun 2024 05:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:437b:261/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:7b:56:69:f3:03:9d:d0:88:eb:65:26:43:7c:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 05:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8da65b5ad90d0d25dc78dbb21030c1b4c40f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:a2:a3:00:46:cf:b8:b8:8b:62:8e:41:90:
5e:a2:3c:8d:6d:8b:12:8e:87:59:9f:d5:bb:02:fa:
10:2f:d9:b0:65:0e:f0:ca:d9:00:ff:e7:ed:fb:68:
ad:fd:ff:a4:0a:52:1c:53:93:02:93:f2:04:8f:27:
9e:ef:6b:4a:d4:86:ba:2f:5b:d4:75:c1:d4:8c:88:
39:04:ef:f5:3b:36:ab:c2:73:eb:98:41:08:08:34:
2f:87:5e:a7:c3:e1:87:68:d3:28:c3:d4:a9:a1:84:
8a:d1:fd:a2:bf:82:bf:0a:69:84:64:79:aa:ac:9e:
d3:d4:50:fb:e3:62:03:c4:5a:ce:6e:2f:83:21:be:
8e:73:66:97:a8:7a:ab:22:e1:62:37:74:67:f5:d3:
83:2f:ad:b4:bf:f6:21:8e:69:5c:75:26:3b:28:1a:
cb:06:14:3d:c5:1e:43:26:02:81:92:b0:81:9c:e5:
07:d4:f1:61:71:18:46:15:bc:b4:87:9f:a3:67:e6:
0d:2b:5a:89:c2:84:a3:74:43:ed:5c:c9:62:8b:23:
ce:5f:6b:87:81:4b:b1:ca:00:5a:e4:47:42:92:9b:
62:ba:c2:7e:39:62:ce:09:45:85:76:69:10:fe:05:
d9:b8:24:f4:15:cc:bb:3b:41:b8:3b:14:1f:f0:da:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DA:65:B5:AD:90:D0:D2:5D:C7:8D:BB:21:03:0C:1B:4C:40:F6:B1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Nplta2Q0NJdx427IQMMG0xA9rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e1:fd:a1:13:2a:51:97:bb:93:4a:67:61:af:b2:7f:8e:82:
d1:01:00:fe:33:4b:6f:6d:a5:4f:d7:8f:b9:90:e0:49:bb:f2:
c9:3e:c6:78:55:7a:65:08:bd:84:23:2f:8e:f0:39:48:ee:e5:
f7:e3:17:7f:36:72:c5:c7:a8:66:5f:88:cf:e0:7f:a6:b6:fe:
e0:c5:c1:6f:1e:25:da:81:d5:25:5b:bb:a1:76:78:44:40:be:
05:3f:2e:3f:44:66:1f:ba:2c:0c:39:64:d0:07:c1:53:5a:d2:
3b:05:71:a0:5e:24:2c:91:a7:1d:e8:d7:cd:fd:49:34:6c:89:
0c:cf:d3:63:e3:2a:a2:1a:40:c0:83:2b:f4:ed:51:05:2e:3e:
92:50:05:dc:77:17:77:0a:14:79:1b:5b:42:b6:ff:bc:a9:78:
5f:bb:2a:5d:70:f0:1d:4d:8f:8c:7b:8e:a3:00:58:51:aa:79:
4a:61:8f:c7:ec:3e:16:a4:18:1b:4b:e8:d0:3c:5d:36:4d:19:
fb:f9:cb:c6:69:7b:2c:02:6b:7c:f0:2b:d5:98:e5:57:97:b3:
5a:f9:87:80:e3:4a:62:12:ed:57:c4:8f:6f:58:b1:c3:b0:14:
87:f0:2c:a4:ef:b2:6d:83:ee:e3:33:73:c5:b1:18:31:53:6e:
09:d8:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:39 2025 by rpki-client