Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n8EmWXV0A4Re2WjjPTklgCMUUFo.roa
File: n8EmWXV0A4Re2WjjPTklgCMUUFo.roa (raw, json)
Hash identifier: jobRMUKGf65Ww+39f1hsijGChOVTqwBNSM49JyLw8xU=
Subject key identifier: 9F:C1:26:59:75:74:03:84:5E:D9:68:E3:3D:39:25:80:23:14:50:5A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909C1F97059ECDC679B3C062301F841A31
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n8EmWXV0A4Re2WjjPTklgCMUUFo.roa
Signing time: Wed 10 Jul 2024 10:10:34 +0000
ROA not before: Wed 10 Jul 2024 10:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:1f:97:05:9e:cd:c6:79:b3:c0:62:30:1f:84:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 10:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fc12659757403845ed968e33d3925802314505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:7d:d4:5a:90:1f:57:bf:b6:61:bd:fd:a2:
b1:37:fb:d7:1c:ea:0c:26:2b:8e:4a:bc:0a:11:9f:
69:af:30:a6:c5:c1:2b:31:79:24:0f:3d:83:e8:e0:
74:47:7e:46:fa:dd:06:0b:ea:01:62:fa:b6:ea:ec:
47:93:37:fc:fe:db:5f:75:6e:5e:6a:b4:7a:6d:6b:
f1:9a:c1:7b:01:dd:bc:69:c5:af:b7:66:5e:78:06:
34:2d:a7:9c:fd:69:f1:fe:5d:16:7e:83:1f:f3:2b:
36:db:fe:86:97:59:b5:86:e0:87:eb:6f:a1:5d:28:
55:b8:52:64:8b:38:0a:48:fb:9c:80:18:9d:dd:3b:
a3:7e:07:cc:fb:2e:2c:0e:9a:03:97:5e:a8:20:34:
55:43:8d:50:30:f4:c4:f8:57:cf:a4:1a:e3:e6:40:
69:c5:7b:d5:f6:ca:99:4d:a4:5f:84:13:61:6e:2f:
e0:f9:22:63:9b:bb:c4:0d:6a:3a:6e:9d:cc:d6:56:
66:c3:6d:8d:e3:f3:de:2d:87:73:3b:bb:bb:b9:1a:
cf:54:5b:75:8f:6e:fb:78:3d:3c:72:20:23:70:6d:
dc:5e:52:9c:02:7c:0b:10:6a:69:2e:00:04:93:e6:
3a:bd:45:db:d3:ec:fd:16:62:e1:4b:ab:92:83:ce:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C1:26:59:75:74:03:84:5E:D9:68:E3:3D:39:25:80:23:14:50:5A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n8EmWXV0A4Re2WjjPTklgCMUUFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:41:b3:85:36:67:12:b4:a4:26:60:07:d5:30:bd:8a:f5:62:
2e:27:64:c0:08:2e:d2:4a:e3:26:44:4b:4d:be:95:34:9c:18:
c0:b9:b7:c8:ec:86:4b:22:de:c7:72:f7:00:95:e9:63:68:52:
84:7e:37:56:52:cb:20:92:bb:aa:eb:f4:5e:6b:a9:e9:aa:a0:
20:e0:86:2d:40:33:be:b1:4c:c2:5a:c0:c6:af:ec:9e:44:0e:
31:4a:94:f5:c1:c2:2e:62:1d:38:7d:ff:0a:a4:fa:eb:6a:02:
6e:c3:ee:ea:e8:5e:1e:f6:94:59:35:56:71:60:f9:f0:b7:60:
51:c8:05:3b:2e:b6:95:c6:97:10:69:5d:5e:fc:68:4e:3f:fe:
e0:72:ff:c0:f3:a8:b4:e2:e2:2a:dc:57:0a:83:e0:30:00:68:
e1:4d:4b:f9:3b:6f:e3:0c:34:dd:f4:84:d9:a8:c5:49:c3:34:
82:56:bd:b4:e4:b0:bc:02:fb:3e:6b:9a:1b:24:3d:9e:42:bf:
56:08:ec:21:35:71:cf:88:f5:8a:78:89:93:9b:0d:35:89:14:
65:46:4e:d7:0f:8d:70:3a:3d:41:59:3a:8f:67:2a:3e:4b:70:
68:e4:8c:4d:67:96:61:49:4c:00:56:64:b2:70:26:fd:16:84:
02:47:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:59 2025 by rpki-client