Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N6w6vsAwOpepcmVLambysTXusck.roa
File: N6w6vsAwOpepcmVLambysTXusck.roa (raw, json)
Hash identifier: 0mPbDs58Z3CMz1dn5z3fkz0HaFq21p7nC8m6l6qP3ng=
Subject key identifier: 37:AC:3A:BE:C0:30:3A:97:A9:72:65:4B:6A:66:F2:B1:35:EE:B1:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB950F9E5F6F78729052EB3C89B3CE723
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N6w6vsAwOpepcmVLambysTXusck.roa
Signing time: Mon 27 May 2024 09:10:42 +0000
ROA not before: Mon 27 May 2024 09:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:50:f9:e5:f6:f7:87:29:05:2e:b3:c8:9b:3c:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 27 09:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ac3abec0303a97a972654b6a66f2b135eeb1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:e9:ac:a0:0a:86:58:7a:44:3f:e7:8c:91:
c2:95:c3:67:01:c2:5c:d5:39:4e:81:c8:9a:b3:36:
c2:dc:19:b0:ed:f1:36:72:b1:12:b8:84:5c:de:49:
c3:eb:f4:70:38:09:2d:a4:10:fc:8f:cc:86:5e:43:
1f:4f:30:44:8d:88:2b:4d:be:58:5e:ef:bd:16:fc:
e9:0d:42:81:33:68:6a:d3:fe:df:0f:ee:a8:7b:36:
30:e4:f6:10:86:33:ae:eb:d1:eb:54:bd:34:ee:f7:
b1:7e:3b:cb:87:bf:b8:e5:9e:c1:b2:bf:e1:96:20:
54:27:99:22:27:4c:24:bc:6d:6a:48:14:dc:6f:2b:
13:a7:00:76:c9:2a:ea:eb:be:53:5c:bf:df:62:35:
ad:07:bd:0f:c9:e0:89:99:5b:2e:48:0a:7c:a5:46:
ca:43:e4:ab:76:e3:43:98:5d:e0:8d:52:4d:6f:60:
cf:7d:7f:94:4e:66:35:04:7a:06:b9:f9:00:f6:f1:
35:ee:18:fb:0e:96:3a:12:9b:91:95:04:ad:b2:f5:
2e:83:e4:5b:a9:72:54:cb:79:02:a9:fc:08:5a:08:
b7:9a:39:a6:7e:6e:3f:35:27:18:a3:51:9f:c3:7f:
5a:df:87:4d:dd:14:15:9c:4f:b7:e8:da:07:fe:eb:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:3A:BE:C0:30:3A:97:A9:72:65:4B:6A:66:F2:B1:35:EE:B1:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N6w6vsAwOpepcmVLambysTXusck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:2e:c9:c6:e2:89:2d:8a:bd:ca:26:ba:38:53:c7:a4:7c:16:
e7:95:23:f3:79:e9:a0:a9:6f:f4:2a:4b:8f:23:50:07:c6:16:
5a:d3:cd:87:df:b3:80:d2:e8:72:1a:51:19:79:e2:9e:bf:ed:
d8:7e:17:4c:81:68:b9:d6:5f:95:45:0f:06:b0:85:89:fc:ad:
26:72:c8:17:26:33:ee:4f:de:92:75:de:07:e5:aa:2c:56:af:
70:05:50:e9:d9:3f:d1:df:f2:0d:57:fa:4e:51:c3:10:8a:7c:
28:38:32:0f:f7:e5:80:43:26:a2:f4:fc:3e:5f:68:36:88:d1:
4e:19:e6:11:a6:a7:73:0c:22:49:7f:79:0a:6c:2a:1a:88:b4:
fe:91:6d:de:a8:82:0e:ac:51:3a:1c:7f:43:22:66:ac:da:0f:
95:da:1a:3a:6d:8a:ce:57:53:6e:14:cf:62:8e:42:ab:9c:4e:
a3:1c:5c:1e:1c:2f:1f:a5:9a:07:1a:82:ba:41:6a:37:85:77:
80:7a:82:6d:ff:41:ce:99:17:d0:93:9c:89:f6:1e:7d:55:1e:
31:13:f6:88:9e:9c:8a:ed:0b:fb:6d:8b:32:51:a6:e7:a1:d2:
bf:c8:df:f0:f5:68:65:ac:43:02:4c:b2:8b:02:72:36:fb:7d:
17:de:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:20:04 2025 by rpki-client