Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nb1veZcPPWzwmpT2y8t7gXnStXc.roa
File: nb1veZcPPWzwmpT2y8t7gXnStXc.roa (raw, json)
Hash identifier: Fiu9FmKFMKvaXTnu5h2UqU8X/7S4RBDlXR92KxEcRco=
Subject key identifier: 9D:BD:6F:79:97:0F:3D:6C:F0:9A:94:F6:CB:CB:7B:81:79:D2:B5:77
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019091D59E9CB95B007CF87ECD4A9CF1F891
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nb1veZcPPWzwmpT2y8t7gXnStXc.roa
Signing time: Mon 08 Jul 2024 10:13:34 +0000
ROA not before: Mon 08 Jul 2024 10:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:d5:9e:9c:b9:5b:00:7c:f8:7e:cd:4a:9c:f1:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 10:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dbd6f79970f3d6cf09a94f6cbcb7b8179d2b577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:86:f5:45:11:e6:4b:eb:37:05:2c:55:b0:
83:59:3f:50:ae:dc:9d:dc:24:9d:07:3b:6d:c2:c7:
35:88:c3:2f:63:b5:fb:7d:d3:14:1d:92:3b:43:b4:
1c:92:55:f7:df:6c:38:4b:c1:43:42:9e:16:a8:31:
43:3d:25:5d:b9:08:b2:a7:52:24:f4:c3:f7:d2:31:
a0:e4:60:41:16:25:06:c0:04:4e:89:b5:87:c6:7d:
41:13:4d:1d:3c:33:61:39:56:c4:22:d3:17:6f:9b:
b0:70:9f:48:43:e4:18:81:1e:58:71:1b:39:e5:94:
e8:41:af:9f:88:ff:d0:14:ac:20:d3:8b:7c:9a:38:
7f:38:de:3a:04:6e:a0:0a:04:29:89:a7:7c:1f:8d:
34:86:38:35:4b:bf:4a:9d:fd:80:27:38:ce:ab:c0:
c1:32:c8:88:f7:c0:0a:55:a3:09:79:e1:7b:ea:43:
d7:ed:a0:72:0a:47:1f:cf:28:24:bd:e7:44:fb:61:
a3:ca:68:9a:2e:2d:51:31:fd:28:83:f1:8a:01:db:
9e:67:21:08:54:49:c7:45:0f:c6:6d:d2:ba:b1:34:
d8:49:e3:3b:76:d9:c1:30:64:28:60:32:f0:44:a0:
62:dd:31:be:10:5f:8a:11:b6:4c:ec:80:08:51:5d:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:6F:79:97:0F:3D:6C:F0:9A:94:F6:CB:CB:7B:81:79:D2:B5:77
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nb1veZcPPWzwmpT2y8t7gXnStXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:d9:e2:df:93:5a:e2:3d:c7:0c:f7:f5:9c:83:d3:9e:96:91:
f3:34:64:6e:4a:c4:20:58:bc:e5:e2:73:4a:02:ce:ec:22:15:
c7:ce:5f:0c:0c:b3:db:9d:69:1b:0e:5e:06:7b:31:ee:3a:81:
9c:e5:14:30:26:c4:52:e1:0f:8a:4b:a8:4a:57:b4:c4:14:65:
db:48:0b:e2:8d:3e:6b:98:7c:48:19:b2:e8:16:4f:ea:f2:db:
1b:4a:ab:7a:ae:3e:a9:4b:af:77:bf:c7:9b:e5:ad:58:5a:5e:
69:bf:1f:3c:17:67:18:51:4a:fb:0b:fb:5a:4f:db:94:5e:c2:
8f:1e:7a:56:d0:b2:53:a5:bd:7a:23:06:2b:86:a1:69:c3:c8:
a2:b6:16:12:49:dc:53:50:58:8d:47:b7:8f:64:44:77:f6:4d:
e5:b4:61:b8:b5:a0:88:ab:8d:7e:b4:ca:94:d9:b7:4f:75:bc:
0e:7f:25:dd:b4:93:2e:17:98:9f:a9:19:0d:ac:fa:65:62:87:
ee:0d:f9:3a:5e:57:cc:86:8a:53:09:ac:78:d7:2f:77:8d:cf:
77:e0:30:80:80:eb:19:02:78:fc:97:43:85:3e:60:43:c1:de:
a0:a4:30:c2:87:94:21:67:6b:df:df:49:0b:b4:46:5a:ac:fc:
3f:52:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:09:44 2025 by rpki-client