Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nXE-EhjMEdo6-NGRVSCxsvmohWw.roa
File: nXE-EhjMEdo6-NGRVSCxsvmohWw.roa (raw, json)
Hash identifier: 0fCv4T1kLvAd21bsI6b9KjzS8lR6C9zhZovq+z5jv1w=
Subject key identifier: 9D:71:3E:12:18:CC:11:DA:3A:F8:D1:91:55:20:B1:B2:F9:A8:85:6C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9C97842DD96AFDFD6C2F663436526D2B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nXE-EhjMEdo6-NGRVSCxsvmohWw.roa
Signing time: Sat 16 Sep 2023 06:04:50 +0000
ROA not before: Sat 16 Sep 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9c97:18ba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:97:84:2d:d9:6a:fd:fd:6c:2f:66:34:36:52:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d713e1218cc11da3af8d1915520b1b2f9a8856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:40:f5:2f:ef:30:84:7d:93:fa:60:95:4a:
b4:00:02:e9:69:14:d2:82:87:40:14:bf:62:01:d1:
cc:bf:d9:6f:ec:fe:03:0d:4f:60:c2:42:c3:cf:47:
f9:35:61:45:b2:35:2e:d0:c5:9d:e4:c8:17:eb:59:
d3:f3:5e:c4:13:b2:3b:51:49:8e:1e:20:10:09:f7:
5c:dc:51:32:01:b1:e0:57:77:fd:5c:ca:91:26:7e:
19:68:8b:1d:86:bd:91:2e:31:74:0a:a0:61:a9:35:
45:fb:db:86:03:8f:f9:20:93:cf:d4:8f:e3:3c:fc:
58:99:98:67:88:e5:70:37:d4:40:72:5f:f5:fa:cd:
60:4f:9c:ec:09:8f:18:ad:8e:53:48:7c:df:70:5a:
9e:8c:e0:9b:68:98:e2:c4:18:2a:4f:6c:e0:21:af:
17:e7:b4:bc:3b:58:63:50:72:07:9e:3d:0e:ef:7c:
b5:d3:e8:b4:bf:48:51:a4:01:dd:d8:3d:d8:c6:bf:
e5:d8:0d:14:c7:19:05:6d:6f:ce:4f:dd:56:9e:f9:
05:46:49:3e:6f:14:54:42:27:d1:9a:10:7e:c4:19:
02:9f:af:21:35:df:18:4a:54:7c:01:1d:f7:7b:00:
70:a1:21:b2:16:2e:e0:18:84:1e:05:48:8a:e5:bf:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:3E:12:18:CC:11:DA:3A:F8:D1:91:55:20:B1:B2:F9:A8:85:6C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nXE-EhjMEdo6-NGRVSCxsvmohWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:7d:ae:6f:06:2f:65:22:70:ea:be:0a:30:ff:8c:6f:ea:95:
f9:a2:c6:ae:85:d0:33:71:c3:2c:8b:e5:90:6d:d6:53:a1:9c:
de:d7:60:81:48:82:1e:3f:b8:43:68:12:4e:79:60:c4:7f:c2:
98:4e:e3:4e:49:3b:ec:9d:0c:7f:ab:28:8e:43:ce:3f:f4:96:
35:26:57:91:40:c7:74:39:d8:48:02:97:d1:a8:5b:d4:1f:e4:
41:df:05:96:8c:a3:80:2e:46:bd:75:41:e9:58:79:c7:b9:ca:
89:58:eb:20:f0:fa:d1:b2:33:b2:f1:10:ec:cd:47:9d:cc:31:
38:24:05:cc:d7:f6:8a:1f:1c:02:5c:5c:de:49:f9:1e:81:fb:
0d:c1:8a:1e:71:a6:5a:63:d0:40:aa:67:8c:7e:34:7a:fb:0e:
d6:a5:a9:db:a7:7f:de:02:ce:1f:d5:c9:9f:65:0f:03:de:fc:
94:70:28:9d:7f:7b:22:52:83:f3:d8:c8:e3:86:ab:ce:63:c4:
b4:12:8a:42:22:5e:15:2f:b5:25:8b:0f:1f:5c:b2:84:1f:7f:
52:3a:76:f1:d7:1c:bc:30:e3:83:c9:f4:65:61:b9:60:ce:4e:
cf:69:df:ca:bc:e7:e2:f4:0a:38:09:5b:b8:88:14:b7:d9:98:
09:fc:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:35:35 2025 by rpki-client