Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pNlPsHGYAn-VICsbrTFGTntAVcM.roa
File: pNlPsHGYAn-VICsbrTFGTntAVcM.roa (raw, json)
Hash identifier: ZHB0odbCWhZgmjwlvFB/ht1/1sqw+7jNkQcEoDVaKgk=
Subject key identifier: A4:D9:4F:B0:71:98:02:7F:95:20:2B:1B:AD:31:46:4E:7B:40:55:C3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A89EC7717F3BFC408CA18CA1E9B6881B1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pNlPsHGYAn-VICsbrTFGTntAVcM.roa
Signing time: Tue 12 Sep 2023 15:04:50 +0000
ROA not before: Tue 12 Sep 2023 15:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:89eb:ea10/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:ec:77:17:f3:bf:c4:08:ca:18:ca:1e:9b:68:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 15:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4d94fb07198027f95202b1bad31464e7b4055c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:3e:9d:21:62:f2:15:4a:52:d2:aa:02:4c:
e1:ff:3c:5d:15:46:c4:9f:db:04:29:76:5f:cf:95:
15:2e:b4:92:58:01:dd:da:24:dd:1c:d3:55:56:3d:
02:3f:f3:08:63:a2:64:76:a9:37:d8:9b:4f:43:4f:
02:8b:5f:f6:0b:b6:42:28:87:fb:cc:73:f8:7e:85:
89:3e:dd:50:65:07:59:ad:8d:20:5c:54:0d:7c:44:
67:d8:40:f6:d4:c8:42:c8:18:fb:2f:e7:b4:3c:f5:
43:78:79:32:a4:5f:13:c2:3c:b2:bb:b4:5f:f2:4f:
ea:05:1f:8a:56:13:7c:72:9d:8a:a3:94:ab:15:3f:
67:e4:d6:64:a0:01:98:8e:e8:5a:b8:c2:3a:46:95:
8c:a8:1d:7d:17:e5:0d:4e:50:c6:49:9b:0c:c9:4d:
76:d7:3b:05:c3:9b:89:aa:21:2e:16:78:b6:2b:56:
22:ee:c7:08:b4:a3:33:65:26:27:30:40:68:7b:a0:
c1:3f:42:4a:29:99:44:b1:9a:ba:57:5b:72:2f:28:
11:f3:78:0d:24:26:8b:75:da:3b:4a:7d:fc:f3:71:
1f:03:b5:e6:29:f8:62:28:61:cf:60:f5:08:46:59:
60:60:e5:27:e9:83:1a:22:b2:91:a7:a0:85:9f:5d:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:4F:B0:71:98:02:7F:95:20:2B:1B:AD:31:46:4E:7B:40:55:C3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pNlPsHGYAn-VICsbrTFGTntAVcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:9a:fe:b6:7f:3e:13:fe:00:36:1e:67:a0:89:a9:b2:d4:0c:
69:07:19:47:dc:80:48:b4:d3:77:3a:6d:56:35:4c:43:56:73:
b9:af:f6:52:5a:cf:3f:dd:90:36:b3:91:06:98:aa:48:ef:17:
8f:e0:4d:7d:bf:a8:92:96:0a:6c:58:79:11:4f:4e:e3:51:a5:
41:b8:08:f1:25:a1:5e:51:b9:d8:d6:7f:fb:96:de:92:12:84:
91:6f:64:2e:5d:c7:a2:d4:37:71:c1:45:e6:d3:71:6b:05:70:
80:81:04:c1:54:4b:d5:29:a8:31:03:f7:44:35:08:d7:20:22:
2a:d6:86:f4:9d:99:a5:bf:68:0a:b5:ca:e0:d7:21:f2:a6:c6:
45:dd:11:97:bf:21:25:af:e2:c6:11:84:8e:92:f3:5a:04:f9:
dc:18:83:1e:58:fb:2d:99:da:ab:3d:60:96:18:7a:c3:47:59:
af:d8:de:85:c4:6d:60:1f:95:34:c5:a4:b9:7c:5c:b4:d9:33:
df:e3:aa:18:8f:bb:09:e0:47:1f:cf:5c:65:17:6e:cd:3b:d7:
8d:fe:2d:19:dc:64:03:1a:34:d4:f5:1b:82:d5:ba:2a:55:aa:
e2:99:f3:c0:c5:6c:d7:2c:e9:f9:95:5d:6a:20:42:9c:7a:e0:
97:3e:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:14 2025 by rpki-client