Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NKAsu_D6ILxt9AkP0qL_7vunTdY.roa
File: NKAsu_D6ILxt9AkP0qL_7vunTdY.roa (raw, json)
Hash identifier: qEwD3IMPPsOZ2bDBqUNkhR9if0JqI0CGo7iy820n0aA=
Subject key identifier: 34:A0:2C:BB:F0:FA:20:BC:6D:F4:09:0F:D2:A2:FF:EE:FB:A7:4D:D6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909BE993375379BEF4FFE782C81C08DD1D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NKAsu_D6ILxt9AkP0qL_7vunTdY.roa
Signing time: Wed 10 Jul 2024 09:11:34 +0000
ROA not before: Wed 10 Jul 2024 09:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:e9:93:37:53:79:be:f4:ff:e7:82:c8:1c:08:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 09:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34a02cbbf0fa20bc6df4090fd2a2ffeefba74dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:a4:fd:43:30:51:f6:7f:b3:de:c6:25:74:
dc:0c:7c:8a:51:cd:17:67:69:42:21:f8:55:50:f1:
b0:c8:33:81:c1:ca:fc:9f:b1:bf:88:7b:93:01:1b:
cf:e9:e2:a8:e8:4f:09:32:ca:6a:f8:f3:0c:05:ec:
51:d2:72:c1:ab:23:c5:b6:55:73:c5:c3:9e:5d:8b:
5d:f8:b4:35:84:53:3e:c3:11:d1:18:6f:71:62:c0:
5d:2a:76:ad:dc:a6:9b:58:29:cb:25:25:67:a6:1c:
79:81:91:8d:2d:e9:cd:74:aa:22:8b:d8:e7:c0:7e:
fb:9e:a0:a5:c7:8c:07:37:bd:98:2e:f9:76:44:7d:
29:b6:26:f8:83:3a:e0:00:ab:01:aa:a1:a3:11:64:
00:1d:05:16:37:f6:e5:72:9f:f6:64:61:11:93:b3:
65:c4:bc:f1:64:dd:48:ad:00:8c:d5:71:f3:76:70:
63:19:87:c2:17:c4:70:49:0c:85:de:4c:23:b0:16:
3c:61:02:6e:f4:15:c8:a1:b7:8d:b6:7d:7d:c8:ea:
b2:6e:4f:af:3a:54:87:a4:92:89:7b:3b:44:05:e0:
9c:2d:28:f1:8e:00:ce:f2:41:0f:40:10:9f:b7:a5:
ee:2a:93:d2:5e:da:cf:c1:95:2c:3b:f8:2d:85:af:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:2C:BB:F0:FA:20:BC:6D:F4:09:0F:D2:A2:FF:EE:FB:A7:4D:D6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NKAsu_D6ILxt9AkP0qL_7vunTdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:a7:85:b8:54:8e:0b:9c:8b:25:20:5f:79:ea:3c:26:45:15:
41:d7:f7:ab:13:f4:4a:e7:91:3c:d5:16:b5:30:d8:04:df:a5:
7a:4c:78:67:b9:6e:0e:ff:50:24:37:bc:d8:c3:08:5f:d2:c5:
7c:1c:36:ec:5b:65:78:7b:33:c8:d6:83:cf:76:be:94:0f:86:
6a:f5:e9:5f:e6:d3:32:26:46:bc:cf:c0:41:94:72:32:1d:82:
97:91:0c:3e:47:71:57:10:e5:55:f8:c6:ae:bb:b3:82:60:8a:
e0:a7:a6:44:8c:36:5c:ed:0f:1f:69:29:6a:47:78:e7:22:f5:
fe:99:f6:39:14:b7:9b:99:e6:82:9c:91:93:41:5f:06:3e:97:
cd:91:3d:be:69:dd:23:00:ab:db:a6:c1:e6:48:5c:a0:52:b3:
4f:b1:af:36:b1:a8:5f:a8:97:95:2e:1b:95:85:62:e9:c5:4d:
13:40:86:b9:4e:89:06:76:38:8e:8a:27:1d:54:ea:d7:04:e4:
f0:24:59:c6:02:83:99:38:2b:2d:a1:9c:08:35:b0:d3:02:bf:
e0:90:a5:33:2f:55:03:4a:b4:e6:ff:f6:48:80:7c:24:7b:57:
6a:bd:14:14:16:68:97:f1:d8:58:86:e5:11:79:62:9b:ff:6b:
4f:5f:dd:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCb6ZM3U3m+9P/ngsgcCN0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzEwMDkxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGEwMmNiYmYwZmEyMGJjNmRmNDA5MGZkMmEyZmZlZWZiYTc0ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ik/UMwUfZ/s97GJXTcDHyKUc0X
Z2lCIfhVUPGwyDOBwcr8n7G/iHuTARvP6eKo6E8JMspq+PMMBexR0nLBqyPFtlVz
xcOeXYtd+LQ1hFM+wxHRGG9xYsBdKnat3KabWCnLJSVnphx5gZGNLenNdKoii9jn
wH77nqClx4wHN72YLvl2RH0ptib4gzrgAKsBqqGjEWQAHQUWN/blcp/2ZGERk7Nl
xLzxZN1IrQCM1XHzdnBjGYfCF8RwSQyF3kwjsBY8YQJu9BXIobeNtn19yOqybk+v
OlSHpJKJeztEBeCcLSjxjgDO8kEPQBCft6XuKpPSXtrPwZUsO/gtha8PzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDSgLLvw+iC8bfQJD9Ki/+77p03WMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTktBc3VfRDZJTHh0OUFrUDBxTF83dnVuVGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE6nhbhUjguciyUgX3nq
PCZFFUHX96sT9ErnkTzVFrUw2ATfpXpMeGe5bg7/UCQ3vNjDCF/SxXwcNuxbZXh7
M8jWg892vpQPhmr16V/m0zImRrzPwEGUcjIdgpeRDD5HcVcQ5VX4xq67s4JgiuCn
pkSMNlztDx9pKWpHeOci9f6Z9jkUt5uZ5oKckZNBXwY+l82RPb5p3SMAq9umweZI
XKBSs0+xrzaxqF+ol5UuG5WFYunFTRNAhrlOiQZ2OI6KJx1U6tcE5PAkWcYCg5k4
Ky2hnAg1sNMCv+CQpTMvVQNKtOb/9kiAfCR7V2q9FBQWaJfx2FiG5RF5Ypv/a09f
3XU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:52 2025 by rpki-client