Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6PAr1ePNP_2eHqkog5bxicNrpA.roa
File: n6PAr1ePNP_2eHqkog5bxicNrpA.roa (raw, json)
Hash identifier: WoH26TVVb5cq/9L07SLspTfyZdhxo56m9oAT4rkJ2Lo=
Subject key identifier: 9F:A3:C0:AF:57:8F:34:FF:F6:78:7A:A4:A2:0E:5B:C6:27:0D:AE:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861E0EC42CB77E2B8D5EA69ACEC3FA71A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6PAr1ePNP_2eHqkog5bxicNrpA.roa
Signing time: Sat 04 Feb 2023 20:12:09 +0000
ROA not before: Sat 04 Feb 2023 20:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1e:0e:c4:2c:b7:7e:2b:8d:5e:a6:9a:ce:c3:fa:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 20:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fa3c0af578f34fff6787aa4a20e5bc6270dae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:86:64:3d:96:41:c0:b2:af:64:46:29:6d:
e8:77:56:3b:7b:6f:4e:4a:9f:c8:56:8d:29:bf:94:
e4:fb:37:76:cb:f4:e6:9f:31:ac:d0:04:d3:c4:51:
4c:b0:74:b7:d6:a2:d0:5f:3f:ec:73:ca:23:9f:4b:
53:63:1b:d0:74:6d:85:9d:7d:27:b0:d2:20:19:ce:
3a:3c:c6:2b:d7:46:e6:ed:80:d2:78:65:73:17:08:
80:f6:ff:e4:2d:bf:db:87:a3:1c:de:05:58:99:8a:
9f:2b:5a:56:a7:1a:f5:50:a9:65:4f:d2:91:f5:30:
01:b0:38:af:bb:73:10:50:ce:56:3b:5c:c7:04:1e:
4b:8d:97:2f:bf:69:3b:34:f2:3c:6e:d2:4f:5f:d2:
99:a9:5e:1f:3a:b8:2a:63:c9:5d:0b:b9:97:5a:e7:
76:a9:37:09:d1:1b:f0:d2:18:14:50:d1:fb:4f:19:
7c:54:90:e9:a0:c3:ba:10:ea:9d:bf:7d:70:bf:48:
af:56:9b:af:3b:6a:eb:d8:39:4a:75:4f:29:e6:33:
7a:eb:cc:98:66:2e:86:a8:51:e7:e7:5c:68:c4:45:
72:46:5b:23:4b:67:e4:0c:f1:7c:c2:fd:b9:9a:40:
c6:12:61:7d:00:f1:25:d0:b3:2d:17:22:57:2d:7d:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:C0:AF:57:8F:34:FF:F6:78:7A:A4:A2:0E:5B:C6:27:0D:AE:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6PAr1ePNP_2eHqkog5bxicNrpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:62:d6:7d:7b:3f:93:51:1b:d2:f1:02:eb:4c:8d:1b:f2:5d:
71:27:b8:ae:c2:03:37:7a:c9:43:c6:66:59:86:e6:2f:01:2e:
9f:26:11:83:52:66:46:cf:94:c6:d5:f1:f9:31:58:d3:39:66:
b3:a6:71:34:24:50:b3:e2:ca:54:3f:dc:12:91:d8:a0:e3:d0:
62:e8:5a:1e:1e:c1:60:93:c3:e8:f4:02:b8:65:9d:e4:a4:21:
de:5e:08:d7:1d:df:0b:26:15:31:51:db:fc:22:f3:97:e2:04:
a1:f0:e0:05:fc:f9:22:95:a6:ab:28:fe:00:0d:12:27:a5:e6:
f8:c9:83:df:28:36:66:6a:5d:18:fe:da:f4:1f:f1:78:a9:32:
8e:d4:7d:59:51:12:d2:03:79:8a:89:b7:51:92:65:46:ae:9e:
1f:39:67:86:97:22:c5:cd:e8:e7:cf:6f:dc:e9:4f:3f:9d:3d:
14:0c:8e:3c:bb:9c:93:2f:72:cc:26:d0:43:0a:77:f7:56:4b:
4f:6a:6b:5a:38:80:77:1f:bc:23:8c:17:c8:df:be:cb:93:d0:
aa:da:f6:a7:b8:41:ba:f6:fe:08:54:5f:da:5a:97:81:be:b6:
c4:54:0d:c4:27:2a:db:7e:4e:54:a8:8c:8f:fd:37:f8:65:f1:
14:4b:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:42:56 2025 by rpki-client