Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nAKI8GVDkQISV0dSUcvnMDT2c38.roa
File: nAKI8GVDkQISV0dSUcvnMDT2c38.roa (raw, json)
Hash identifier: kcSFzZdyHli2mlPJg+Z18YFVqv6R/YYI3+bIj0tEZsw=
Subject key identifier: 9C:02:88:F0:65:43:91:02:12:57:47:52:51:CB:E7:30:34:F6:73:7F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A0A211D09614C05B02F22E7A31982592
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nAKI8GVDkQISV0dSUcvnMDT2c38.roa
Signing time: Thu 11 Jul 2024 07:11:34 +0000
ROA not before: Thu 11 Jul 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:a2:11:d0:96:14:c0:5b:02:f2:2e:7a:31:98:25:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c0288f0654391021257475251cbe73034f6737f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:b1:1a:fb:e0:27:1b:b6:41:72:90:50:f5:
e6:80:b5:6e:1d:fa:2a:db:24:42:a0:41:8d:25:42:
b8:57:0f:1c:b2:c7:ca:26:7f:8c:1f:b9:e8:87:97:
8d:bd:87:ed:5c:5b:02:8f:3d:60:99:77:20:14:7f:
fd:32:21:fb:bf:4f:bc:4d:e3:05:cc:6b:06:95:8a:
8f:15:d0:08:2a:3a:d6:50:d2:bb:1a:da:6b:8d:26:
62:29:c0:81:b2:b2:5d:4e:f6:88:b3:c3:6e:51:ee:
17:5f:2e:77:af:78:77:8d:26:ca:a3:77:54:97:14:
20:97:f3:f6:c9:c5:e4:de:26:f2:c1:32:29:ac:b0:
44:6b:d5:76:64:38:9d:b4:19:7e:2c:46:e3:42:b8:
d6:17:13:a4:6d:5b:5e:5b:fa:c4:e5:3b:a2:b3:2b:
14:4e:66:01:cf:1f:a4:79:0a:a1:a8:ec:98:39:20:
90:e8:a3:75:f7:4b:fc:57:fd:25:3a:59:c6:2a:d6:
2f:9b:22:14:3c:0e:da:f8:7a:c7:d4:65:6a:82:fd:
2c:6d:2c:e5:e1:8f:ed:94:c5:91:f6:e3:a1:06:66:
19:e7:5a:b1:32:68:1b:54:e0:6c:c4:f2:ca:e6:83:
5b:b7:50:d0:c3:40:95:e8:de:aa:ac:a7:91:6d:a1:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:88:F0:65:43:91:02:12:57:47:52:51:CB:E7:30:34:F6:73:7F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nAKI8GVDkQISV0dSUcvnMDT2c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ed:e3:5c:1a:ff:11:58:ce:ff:60:73:fa:1f:96:aa:2e:cb:
d3:93:fe:11:b3:68:1c:bc:5d:a6:53:17:73:9f:f0:01:b7:aa:
81:81:01:f0:cc:d1:c5:3d:6a:bd:10:a0:44:b2:76:96:8d:6f:
bc:f3:a7:c7:25:ea:d4:6c:00:2e:5a:87:58:e5:76:ae:94:10:
91:96:99:a7:2a:17:98:36:25:f7:3a:86:c1:35:ee:76:ab:4b:
a9:ad:5e:f8:6f:6d:d8:fb:74:5c:72:7f:c3:e2:64:07:3b:9a:
c8:ea:34:3c:a2:40:74:71:38:cb:23:ac:bc:23:e7:f9:b7:09:
49:eb:f2:37:8a:f9:7d:5f:4d:d3:f5:2d:27:43:5b:95:58:54:
ef:56:3d:83:80:a1:65:af:6c:92:f0:14:71:cd:29:d7:2c:cb:
83:56:db:fb:49:b4:39:9c:b1:c3:f3:92:53:c4:2d:5e:b8:8e:
9e:11:5c:7a:65:66:1c:98:19:9a:a2:ec:90:65:f2:d0:27:65:
8b:a5:e3:8b:b5:6d:fa:9b:b3:cf:4f:fc:62:cc:f7:70:07:2a:
7f:ca:9c:d6:e3:d5:27:d3:37:d8:56:5e:1c:db:33:d9:a6:34:
92:f8:9e:1a:40:77:1e:1f:c7:a9:b2:b6:b3:fc:e7:50:4d:1f:
af:5c:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:24 2025 by rpki-client