Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NqE7_aiRGWAL8Q2E1rDhyf3oC3o.roa
File: NqE7_aiRGWAL8Q2E1rDhyf3oC3o.roa (raw, json)
Hash identifier: a22CLJjB0rr097DO/CbLWJOXROXq4vbJFydkfEAdFpM=
Subject key identifier: 36:A1:3B:FD:A8:91:19:60:0B:F1:0D:84:D6:B0:E1:C9:FD:E8:0B:7A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5AABC290F1593B53B137AA8EA38EE0DA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NqE7_aiRGWAL8Q2E1rDhyf3oC3o.roa
Signing time: Thu 09 May 2024 00:05:56 +0000
ROA not before: Thu 09 May 2024 00:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:5aab:88ae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5a:ab:c2:90:f1:59:3b:53:b1:37:aa:8e:a3:8e:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 00:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a13bfda89119600bf10d84d6b0e1c9fde80b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:a4:2b:6c:30:3f:0b:e3:b7:78:c9:2c:f6:
a2:d1:d1:45:a8:6e:cf:d7:5e:01:2a:33:c0:8f:00:
29:f6:65:e5:83:6e:46:3f:bb:e2:ca:0a:37:ac:20:
66:c5:b4:0a:2d:6c:09:e0:7f:9f:3c:c8:bd:be:4f:
c1:1a:66:3f:3c:74:a1:04:0a:2c:42:fd:25:5b:6e:
42:33:cb:c5:9f:9c:5e:d8:fc:39:5a:f1:05:82:ac:
34:e8:13:b4:23:94:ea:2b:dc:3d:e8:f0:95:d0:71:
1f:ba:88:e9:6f:37:a0:75:7a:3f:be:fd:b9:f7:cb:
a5:13:85:79:2a:dd:56:0f:6a:93:85:97:f5:da:f9:
5a:57:a2:95:0f:3e:47:55:79:a7:72:6f:e0:b6:e0:
54:f4:25:e1:48:dd:9d:43:48:19:cf:e9:62:57:0b:
12:09:09:71:75:74:3f:e4:8c:06:ca:a3:e0:de:c7:
1f:0f:6f:c2:f9:4c:72:ed:d7:b7:35:dc:dd:60:a6:
dc:2e:83:a4:5b:fa:70:5b:da:db:f7:08:a5:48:13:
95:4b:07:ed:e7:d8:89:4d:db:cb:af:56:79:41:c8:
86:13:49:fb:e0:e8:aa:af:36:1b:51:16:1f:26:08:
d7:91:8b:f5:ec:16:69:f6:36:bd:9d:86:b7:58:87:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:3B:FD:A8:91:19:60:0B:F1:0D:84:D6:B0:E1:C9:FD:E8:0B:7A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NqE7_aiRGWAL8Q2E1rDhyf3oC3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:37:e3:e1:4b:5a:83:78:be:4f:c1:45:e4:1d:6a:bd:d4:c0:
8d:50:52:f0:52:7d:76:26:5b:b8:d7:f1:d5:f9:17:cb:33:57:
8e:e8:92:46:ac:9b:92:a8:d1:ee:e4:62:a6:14:03:b6:bf:cc:
8a:0e:e3:ed:b4:3b:78:ef:d7:ec:d5:f0:e0:a3:9f:c1:01:4c:
7b:bf:d0:c9:86:cf:d0:f9:f6:bd:20:49:d3:7c:ff:69:c0:59:
d6:66:70:92:4d:7c:35:2d:d9:18:37:b4:1f:d0:f3:97:b4:2d:
ae:31:5c:61:4a:8d:d4:63:91:6e:49:74:3b:ce:6d:c4:50:fe:
44:03:a6:5d:e9:e8:53:6b:2e:3f:89:8e:7f:41:6b:5d:82:3d:
1a:5a:cb:51:d6:d9:d9:1c:ea:e1:4b:d1:51:26:8a:9f:e0:ee:
c5:36:76:69:e1:9c:b9:8c:13:fe:20:9e:c1:d3:0e:67:89:db:
d0:d7:be:c3:9b:96:ad:3b:0f:8a:f4:a6:06:76:d0:91:3a:92:
54:36:38:da:7b:00:cf:e6:60:46:ba:fd:5c:8d:32:95:cb:60:
49:e8:13:dc:50:86:f5:8b:be:80:f4:10:ab:d6:33:b9:4a:da:
13:97:9e:2c:da:20:da:ab:72:1e:1d:51:da:1f:45:61:d5:36:
64:17:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:52:27 2025 by rpki-client