Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NYJ0e1mvmXv9yBor2-x2wHlwqBM.roa
File: NYJ0e1mvmXv9yBor2-x2wHlwqBM.roa (raw, json)
Hash identifier: U0O6WGIhAe9hrCuu14fHy4okm4KDaFcenITFunowYp4=
Subject key identifier: 35:82:74:7B:59:AF:99:7B:FD:C8:1A:2B:DB:EC:76:C0:79:70:A8:13
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019086AC0412AD028F2DEC4648AC8D26B58D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NYJ0e1mvmXv9yBor2-x2wHlwqBM.roa
Signing time: Sat 06 Jul 2024 06:12:18 +0000
ROA not before: Sat 06 Jul 2024 06:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:86:ac:04:12:ad:02:8f:2d:ec:46:48:ac:8d:26:b5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 06:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3582747b59af997bfdc81a2bdbec76c07970a813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:60:29:3a:2f:f4:d0:98:60:8f:6e:c3:26:4a:
32:e7:54:e4:00:23:14:6d:32:c9:8c:46:5a:86:9e:
6f:ff:e4:7d:58:4e:b8:e0:52:72:2c:cb:82:50:c4:
8d:50:2e:60:79:a0:19:6d:23:f9:ef:5b:4d:a9:84:
d5:46:28:21:e8:5e:33:1c:1e:48:d0:17:ec:51:07:
b0:0c:c1:ed:ce:f6:08:51:78:91:d5:7a:66:9b:0e:
2b:41:9d:e3:2a:f8:ed:00:02:bb:ca:08:fe:31:be:
f1:32:13:5e:7a:9a:45:22:fc:e7:47:ef:b1:10:cd:
a2:15:5d:68:9a:11:44:cc:71:dc:f3:ed:0f:54:5e:
66:f2:19:c5:2e:62:f2:cb:d3:aa:d0:6b:ff:35:22:
c0:a1:63:4c:a4:36:8b:ca:9c:52:ab:5f:8d:ef:6a:
f8:fa:0f:93:13:60:33:c2:cd:86:37:1a:7a:4d:b4:
8f:bb:9c:20:55:62:50:78:f3:bc:bc:cb:03:b4:fb:
d1:b2:59:9f:dc:61:90:0f:89:a2:ca:f9:a8:7e:15:
ae:f3:24:c6:f7:d2:df:19:9c:2f:34:9e:03:ab:44:
45:83:74:a1:b3:68:5b:82:00:84:fb:a1:d6:43:25:
39:94:54:2e:32:ce:46:6a:3a:d8:ab:b3:28:95:3a:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:74:7B:59:AF:99:7B:FD:C8:1A:2B:DB:EC:76:C0:79:70:A8:13
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NYJ0e1mvmXv9yBor2-x2wHlwqBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:fd:14:e5:82:6a:fd:a1:e0:24:ec:05:a5:b1:ca:f0:b1:52:
e6:49:1d:a6:d9:43:2f:79:09:57:e5:6d:ef:43:6f:6e:4a:2b:
ee:35:e2:89:55:24:c2:ea:91:8e:9d:d2:a9:60:67:6f:d6:35:
1a:6d:11:7c:14:f6:3f:28:c4:33:89:62:4f:8e:b1:96:c0:23:
c0:be:50:34:79:85:23:54:32:7f:d1:5e:68:dc:e5:4f:aa:96:
fc:69:dc:b3:08:34:b5:33:c6:e8:fb:a5:3b:c7:52:75:e0:2c:
2e:54:85:4c:9e:35:61:4b:32:14:8a:78:24:75:40:45:e6:61:
ea:19:ce:5c:e2:1d:9e:0f:68:4c:61:10:04:0b:f0:b6:aa:98:
af:72:ad:76:c9:22:3f:b5:31:0c:27:6f:73:d6:52:5e:a9:e2:
72:9c:0f:c0:2b:0f:8c:f9:17:39:85:a6:1d:2d:b9:92:3c:23:
32:93:fb:ba:e5:67:8a:cf:3b:29:9c:c1:d5:2c:a3:c3:e8:a7:
6d:f3:be:74:64:b8:06:ac:17:7d:5f:61:80:31:dc:4b:9f:47:
a3:17:7b:9b:69:40:e3:48:dd:7b:a8:49:ca:13:ec:6e:d1:a4:
75:9a:a9:d2:e2:8d:f2:0d:62:0e:b8:bf:40:93:b8:c8:f6:b7:
b6:5f:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:57 2025 by rpki-client