Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_pKukaiCEMzwwA9xkrKlLLj8FM.roa
File: V_pKukaiCEMzwwA9xkrKlLLj8FM.roa (raw, json)
Hash identifier: GPlcdIOHlF2aEwYyfsyQ+A/xU6qAnxlVJ2bqsNOGxy8=
Subject key identifier: 57:FA:4A:BA:46:A2:08:43:33:C3:00:3D:C6:4A:CA:94:B2:E3:F0:53
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A90151C3C72D33ABEB3CF355257C4354
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_pKukaiCEMzwwA9xkrKlLLj8FM.roa
Signing time: Fri 12 Jul 2024 22:12:34 +0000
ROA not before: Fri 12 Jul 2024 22:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a9:01:51:c3:c7:2d:33:ab:eb:3c:f3:55:25:7c:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 22:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fa4aba46a2084333c3003dc64aca94b2e3f053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:50:cd:12:2f:dc:89:ae:6d:6c:dd:31:b0:
ca:f4:da:af:4e:e3:6d:21:0e:30:a8:23:c9:d9:a7:
67:98:b3:d1:e3:20:1b:ad:1b:f5:9a:ac:e4:fb:ae:
d6:40:f4:97:04:c8:b1:85:01:55:87:af:16:9d:b0:
8b:74:ff:f5:d2:be:99:97:b5:2f:00:86:89:bc:c1:
1b:bf:07:ae:73:e4:13:43:dc:b4:ba:07:14:56:81:
1c:03:59:85:71:ec:17:35:2e:20:f0:53:d9:df:d8:
41:72:75:0b:eb:b6:b5:92:59:0d:76:c3:e1:58:7b:
f2:d5:91:99:2a:2d:f3:67:25:c5:e0:9b:1f:5b:b0:
a2:32:41:d6:09:10:66:ff:cc:c4:0f:a8:ed:a2:aa:
54:51:f1:ac:69:da:92:82:3d:03:f9:fc:eb:08:90:
44:1e:da:28:01:cc:44:48:86:36:3c:5c:39:d4:b4:
4d:c8:cf:2b:8d:3b:6e:79:be:c0:14:a6:f7:05:46:
3c:65:15:03:bd:b2:b4:94:3c:1d:3b:26:b4:26:77:
4c:77:f3:05:68:4f:1f:6e:51:c5:ae:47:cb:c8:14:
5d:78:e6:1f:73:73:c3:69:a6:b1:5f:a6:1d:c3:ec:
6a:d6:de:85:81:4c:cd:f5:30:c9:b3:7d:64:34:45:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:4A:BA:46:A2:08:43:33:C3:00:3D:C6:4A:CA:94:B2:E3:F0:53
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_pKukaiCEMzwwA9xkrKlLLj8FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:17:8f:04:ad:7d:e8:e1:d3:f6:9f:5f:fd:2b:e0:24:a7:c2:
4a:65:fb:63:e6:20:fd:5d:91:4d:7b:fa:74:43:1b:bf:af:59:
0f:e8:85:f5:71:a4:44:3e:86:74:6e:6a:93:31:82:00:6d:8e:
c6:9d:88:48:64:26:53:da:7c:e7:c2:37:04:56:a1:f8:91:7f:
ac:5b:b9:58:11:59:de:fb:8b:fd:65:c0:e8:bd:13:d6:66:6e:
d5:60:5d:8d:a2:46:f1:54:de:00:11:4b:56:d1:bf:66:57:0e:
16:7f:88:f8:47:9d:ff:92:5d:92:80:41:9b:63:37:d1:6d:9c:
b1:7b:f5:dd:f8:c4:a5:dd:9e:45:fe:b8:73:8c:00:f7:d6:ba:
cc:a2:8d:84:2e:f5:65:e3:3d:2a:9d:61:e2:3b:7c:fe:38:49:
b5:93:e6:00:d5:6a:38:e1:47:d7:5f:69:72:ca:2e:ac:41:ba:
77:0f:8a:5a:be:a0:96:a3:91:45:d2:c9:a4:a5:e0:af:a0:4b:
f0:f5:f7:79:ba:27:01:ed:ee:38:94:b8:2b:ad:2e:a4:8c:73:
1f:f1:62:ed:8e:80:99:c6:74:50:88:c9:59:d7:18:81:d7:fe:
2a:fa:64:b5:2e:6a:b7:82:aa:87:73:b5:9e:07:b1:29:2c:36:
48:e4:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:07:54 2025 by rpki-client