Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-m-nOor-SctfAYiwdKyK8IUf7hY.roa
File: 1-m-nOor-SctfAYiwdKyK8IUf7hY.roa (raw, json)
Hash identifier: F4CNAshQVkMPPAkTkymv9BlttxjeL4E46JcN1qTFyhc=
Subject key identifier: FA:6F:A7:3A:8A:FE:49:CB:5F:01:88:B0:74:AC:8A:F0:85:1F:EE:16
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190461400C5FDE55A8AC6267ABFC6D1D3BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-m-nOor-SctfAYiwdKyK8IUf7hY.roa
Signing time: Sun 23 Jun 2024 17:10:34 +0000
ROA not before: Sun 23 Jun 2024 17:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:14:00:c5:fd:e5:5a:8a:c6:26:7a:bf:c6:d1:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 17:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa6fa73a8afe49cb5f0188b074ac8af0851fee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:a5:b8:e7:12:ed:28:67:11:15:a8:f7:da:
89:1b:fd:90:c9:82:30:c6:8e:00:18:d1:35:d2:90:
fb:9a:5a:9f:57:71:8c:9f:b6:31:83:9d:e3:e7:26:
06:f0:32:d7:bb:89:f4:3c:cd:1f:75:bd:a7:69:8c:
fe:f5:f7:76:78:61:49:fc:e1:6d:2b:9b:6a:33:71:
0c:55:84:ef:de:a4:10:89:34:5c:be:72:35:39:2c:
39:c6:71:9b:7f:b5:ef:ca:c0:6f:27:18:71:b4:4f:
36:e0:f8:16:02:38:90:16:a4:ca:38:29:c5:46:76:
aa:97:ac:0e:7e:99:b6:87:ca:b0:b7:04:f3:21:54:
58:d0:5f:e9:27:90:c2:f4:fa:b6:79:08:a6:41:68:
f1:16:64:17:95:3a:6f:01:60:9f:37:69:e7:77:4c:
42:a7:31:17:8f:29:0c:15:9e:92:77:6e:b9:2c:35:
51:1c:1a:81:3c:44:fe:e8:1d:bf:80:eb:61:08:f8:
16:7a:04:c4:23:91:14:9d:a7:5e:8c:6b:a6:f3:af:
b6:14:47:e0:f8:2b:94:c9:ad:69:9c:e6:61:7f:37:
9c:90:e0:bd:38:7e:cf:3a:e3:2b:7e:8e:ad:d8:d4:
8e:3f:58:9d:61:d5:22:3f:d9:94:80:af:c5:2d:3e:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:A7:3A:8A:FE:49:CB:5F:01:88:B0:74:AC:8A:F0:85:1F:EE:16
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-m-nOor-SctfAYiwdKyK8IUf7hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:b7:e5:cd:0b:32:15:96:dd:32:aa:4e:bf:28:22:ea:ea:3d:
52:79:b4:e2:78:5e:50:cd:99:33:a8:f8:e9:fe:10:80:66:f7:
7e:e8:b9:52:d4:32:e2:3d:7c:f5:9b:39:81:28:4c:d7:91:ee:
58:bd:be:72:6b:18:0c:c6:8f:52:47:2c:91:ed:22:4b:8d:14:
a4:ab:35:e0:22:af:16:25:31:3e:de:5b:6f:b7:7d:08:02:11:
6a:92:54:15:6a:ca:29:23:08:42:9e:cc:92:5a:d6:32:10:b3:
fc:05:d8:5b:3f:c6:54:07:53:c0:1a:5b:46:56:23:07:1d:cb:
1d:74:97:41:e3:6d:5c:8f:63:95:c1:ec:1a:27:d1:9a:ba:4e:
27:f2:d8:23:2b:c9:7d:5a:59:fd:d8:a5:a6:3f:4d:ff:66:b9:
e8:43:04:88:8d:18:8b:20:f2:27:52:dc:97:af:bd:fb:cf:57:
28:68:2c:ca:05:51:99:8f:1f:d6:bc:47:c1:bd:a4:6d:44:1e:
c4:78:f2:27:ea:f9:a3:63:e1:c3:66:c7:3b:65:a5:ca:e5:73:
81:cf:33:89:f3:7d:8f:85:68:51:a8:4c:91:10:5f:70:53:8e:
fa:86:b0:b5:d4:6a:f4:49:37:30:42:29:d2:90:5c:4d:a5:e6:
33:e4:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:07 2025 by rpki-client