Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ijQIa_Nu7ty4STebdOBE9lK9qK0.roa
File: ijQIa_Nu7ty4STebdOBE9lK9qK0.roa (raw, json)
Hash identifier: Nf2rAZ1Vo9JzV/5BtOWa52YfE4BvOc4nSMnUfO13uQY=
Subject key identifier: 8A:34:08:6B:F3:6E:EE:DC:B8:49:37:9B:74:E0:44:F6:52:BD:A8:AD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019063AF69744A6E1E300692A24830AB823B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ijQIa_Nu7ty4STebdOBE9lK9qK0.roa
Signing time: Sat 29 Jun 2024 11:09:18 +0000
ROA not before: Sat 29 Jun 2024 11:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:af:69:74:4a:6e:1e:30:06:92:a2:48:30:ab:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 29 11:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a34086bf36eeedcb849379b74e044f652bda8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:7a:37:fc:0a:18:24:8c:a1:cd:49:a7:6d:
71:32:89:fc:d6:db:16:df:6f:62:76:fd:cf:69:42:
d9:b6:d1:88:3b:7e:b2:10:cc:c6:9e:ee:f9:ec:c2:
f0:0e:bc:7f:7e:e9:8a:56:72:27:8a:28:d6:cd:f1:
45:01:f1:84:f9:c6:fd:23:ef:e1:29:09:9a:6f:90:
11:95:14:37:6c:2b:1c:af:56:73:47:5f:66:31:40:
2a:c9:8d:6f:eb:7b:80:1c:c2:fc:67:7b:65:cf:4f:
57:db:9b:07:aa:5d:ab:12:c5:ff:ca:0e:22:2d:20:
28:08:3b:32:a4:54:55:cd:6d:81:85:4a:99:45:d3:
4c:92:fb:b7:ee:e3:74:6a:80:75:3d:ea:df:25:4e:
d0:4c:e1:c6:8a:ce:cc:65:44:93:8e:ab:76:02:51:
fc:ee:89:5f:33:12:f7:6e:38:a5:91:f3:df:d7:71:
13:22:00:85:6c:34:46:77:ff:76:15:b2:fe:05:65:
d6:da:0c:78:a5:4c:31:84:8f:e0:6e:fe:4c:dd:52:
d6:98:e7:f2:89:62:6b:da:8e:2e:92:a1:3a:9b:90:
9f:ee:53:3e:65:cd:6d:17:f7:04:8d:53:d4:5e:a0:
0f:4c:21:80:2f:d5:16:06:73:c0:f2:2d:41:a0:13:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:08:6B:F3:6E:EE:DC:B8:49:37:9B:74:E0:44:F6:52:BD:A8:AD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ijQIa_Nu7ty4STebdOBE9lK9qK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:24:7d:16:32:e2:58:e1:a1:a9:ef:e9:95:18:49:f9:78:2d:
63:57:21:7a:d8:32:62:ab:fc:1b:00:22:f4:ff:de:c4:07:97:
da:f7:42:ee:ef:96:bc:fe:24:99:a9:3c:13:cf:92:2b:30:a4:
e1:6a:03:a7:f0:48:01:bf:25:ed:93:dc:ea:a8:cd:6b:37:21:
8c:fe:ed:b4:36:45:0e:b5:0e:cf:6a:7c:5d:c6:54:2e:71:d2:
ce:7f:2e:b3:ef:84:38:25:72:63:f0:21:bb:16:03:7f:90:e1:
04:29:20:0a:1c:82:da:4d:b8:55:be:e2:2b:cf:c6:fc:af:e7:
ea:03:e3:7e:5f:11:81:1b:90:9f:d8:7f:3e:63:ce:ac:dc:d9:
76:2a:a2:ce:32:9e:db:63:23:1c:ad:28:3d:57:77:dd:4d:28:
03:a5:ec:87:38:2b:29:f8:32:b4:a9:1e:30:f0:47:32:e7:6e:
f7:c9:10:5a:16:96:fc:ea:4e:a0:70:ab:b2:4e:a3:e8:bf:33:
0d:1c:73:d7:5b:0f:55:dc:7b:74:5e:c6:13:18:66:09:cb:31:
7e:1e:83:30:3d:74:54:b5:ed:07:11:65:88:51:07:59:69:13:
f4:bd:c4:8d:03:b7:95:cd:9e:34:14:e3:df:3c:f8:76:53:d0:
aa:dd:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:57:25 2025 by rpki-client