Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nPmDEl6NGV0Aye-YZ2D4cJhxvXE.roa
File: nPmDEl6NGV0Aye-YZ2D4cJhxvXE.roa (raw, json)
Hash identifier: i95RvICm2rQVdaF7VzgSnDktZ8GbIcjP+DvVeQBdi+Y=
Subject key identifier: 9C:F9:83:12:5E:8D:19:5D:00:C9:EF:98:67:60:F8:70:98:71:BD:71
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5C01502F7B5F5BFF9C53921377B6FACD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nPmDEl6NGV0Aye-YZ2D4cJhxvXE.roa
Signing time: Sun 03 Sep 2023 17:05:04 +0000
ROA not before: Sun 03 Sep 2023 17:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:5c00:6f45/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5c:01:50:2f:7b:5f:5b:ff:9c:53:92:13:77:b6:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 17:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cf983125e8d195d00c9ef986760f8709871bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:b2:71:4d:35:42:1e:74:6f:e2:8e:fa:b8:
77:02:88:67:b5:75:58:9c:dc:98:f4:20:e4:96:49:
9b:f6:39:20:3e:87:f1:24:18:fb:d1:3a:ca:4e:ba:
14:04:d8:52:d8:b5:65:64:3f:59:f5:07:e7:9a:04:
db:89:06:84:02:6d:c7:26:93:d6:3e:d0:d2:d5:92:
f6:00:15:99:49:bb:5c:73:5e:29:05:e5:e3:21:b2:
69:f6:e1:31:fb:33:ad:ed:c4:16:bd:4a:89:31:bc:
6e:72:71:b4:92:61:8e:6e:72:6b:19:f9:ce:d0:fc:
2c:6d:66:70:8d:01:2b:d9:64:e9:cd:7c:d2:7d:3f:
8a:b5:47:66:08:e1:1b:f3:c9:17:05:fe:60:f4:52:
df:c2:a3:12:91:6c:18:6c:85:e4:fb:4f:7e:d4:0e:
eb:e2:05:28:3c:40:fd:10:eb:3e:92:4d:c1:4d:bb:
12:53:93:c0:32:3a:d8:b7:3c:55:f4:e4:2f:f4:ef:
64:fc:3b:fe:f3:a0:96:8f:aa:c7:eb:df:7b:45:46:
86:aa:4d:48:9a:17:8b:09:bf:14:ee:d0:84:0f:20:
54:f5:c2:23:ef:68:1e:a1:af:36:07:46:4b:ad:04:
29:01:a8:2e:33:6f:71:03:ba:4c:4f:ac:90:83:fa:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:83:12:5E:8D:19:5D:00:C9:EF:98:67:60:F8:70:98:71:BD:71
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nPmDEl6NGV0Aye-YZ2D4cJhxvXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:f1:f4:e5:16:51:be:06:57:fd:16:66:f0:33:21:5f:34:de:
b0:8a:28:bb:0a:e1:76:a3:c2:9d:07:77:56:ea:34:cc:5c:27:
ad:dc:8a:d2:22:24:5a:67:23:1c:50:61:c9:c7:fd:5a:ec:72:
79:dd:29:1a:cb:dd:0a:30:0f:7f:2b:f1:b2:cf:72:7e:02:13:
7d:2f:54:d1:b1:23:17:fc:a7:c6:25:dd:03:15:a6:f3:90:b7:
56:a5:21:2f:97:3e:55:8d:17:a1:c6:68:55:49:7f:1d:bd:06:
10:bb:7f:fd:3b:7c:d8:b9:c0:76:1c:6b:f9:8f:4c:71:c3:5c:
67:b9:36:70:79:4d:a0:15:3a:d9:98:c6:4a:0b:54:09:7b:41:
cc:c7:85:c0:74:b8:54:fd:a5:40:be:a6:3d:6a:11:8c:9e:50:
ce:0e:5b:56:09:a6:c4:9c:17:22:1e:bb:fe:00:9d:e5:02:1a:
3d:83:e7:3d:2d:bf:4f:c7:eb:c2:bc:8c:56:4f:b1:3b:c9:f5:
b5:fb:0d:c4:bc:e2:80:90:79:59:2d:46:38:57:42:42:dd:24:
c3:e9:8d:b5:41:49:7a:79:d1:a9:20:cf:f0:ef:bc:d1:c4:5e:
23:c3:cc:31:00:90:ae:0e:57:83:9b:dd:c7:8e:54:fe:0d:9b:
3b:c3:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:57:01 2025 by rpki-client