Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NV4nrgV3ZaZXmnKCs9IhyAMvYjI.roa
File: NV4nrgV3ZaZXmnKCs9IhyAMvYjI.roa (raw, json)
Hash identifier: ECc2zXRk8pr7/CXx63zTwbKEkv4qk+7UQqkjX6W2f4s=
Subject key identifier: 35:5E:27:AE:05:77:65:A6:57:9A:72:82:B3:D2:21:C8:03:2F:62:32
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A84214F4095FDB916034501F560E1DAB5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NV4nrgV3ZaZXmnKCs9IhyAMvYjI.roa
Signing time: Mon 11 Sep 2023 12:04:50 +0000
ROA not before: Mon 11 Sep 2023 12:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:8420:f725/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:21:4f:40:95:fd:b9:16:03:45:01:f5:60:e1:da:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 12:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=355e27ae057765a6579a7282b3d221c8032f6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:3b:f0:24:f5:65:f4:40:c8:cd:f6:af:3c:
8a:3b:5a:02:82:22:f9:64:d2:7f:03:0b:4b:27:a3:
7e:1b:46:c0:35:70:bb:73:e0:2b:f5:8f:3f:42:5a:
5c:52:7d:3c:f7:fb:76:27:83:35:b4:03:7f:06:b9:
1c:f0:87:b9:a6:25:d9:6c:86:d3:db:4d:15:9b:dd:
20:e1:fa:fa:15:7e:65:86:0d:bd:d8:6b:e1:55:d0:
8f:39:ca:f8:bd:39:e3:6f:e1:8e:e6:e8:1b:51:d9:
f1:63:ef:ed:92:a5:43:57:0c:44:97:66:98:94:19:
a6:c0:d5:10:e8:8d:ed:f3:1f:61:ce:3a:51:c7:62:
bd:ac:01:c4:60:60:a8:3b:8f:3d:33:b0:86:a4:7e:
04:88:62:a6:2d:3e:7e:67:4c:c0:a0:fd:44:5f:85:
33:97:43:83:c5:39:1b:79:ef:81:d7:fe:c2:01:e5:
ba:38:5d:48:d4:7d:71:48:41:d9:df:9b:af:b1:95:
ed:55:42:06:0e:b8:79:4e:f7:32:34:51:c7:c4:f1:
b8:39:1e:1d:ef:e3:a6:f4:bd:b0:e6:74:d9:e8:71:
65:2b:64:90:c9:d9:e2:01:df:ca:a1:ce:50:44:3c:
07:db:99:0e:31:8c:d9:42:d6:37:43:8b:73:ff:6e:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:27:AE:05:77:65:A6:57:9A:72:82:B3:D2:21:C8:03:2F:62:32
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NV4nrgV3ZaZXmnKCs9IhyAMvYjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:9c:6f:4f:01:c2:69:ea:5f:c1:01:4a:82:d7:2c:71:8d:23:
2d:e8:84:04:bf:bd:77:5b:5c:c5:c2:4a:dd:09:9a:25:36:54:
65:05:e2:95:7d:42:7d:15:19:91:fe:9f:11:86:6a:90:a7:97:
7c:33:9f:8d:95:15:51:1c:73:8e:37:c7:d4:fd:ea:b4:f4:46:
f3:85:11:15:a7:a7:33:00:c1:52:3c:38:c4:ab:d7:bb:55:d2:
82:d5:ca:60:e1:f5:31:b8:91:2d:9b:6f:6a:0a:84:1b:4a:58:
33:55:46:e9:a5:2f:73:09:94:6e:8e:52:0a:bc:8e:20:02:c2:
c8:c7:2f:61:3e:95:19:9a:50:26:b1:4a:01:cb:05:10:75:28:
79:15:6b:73:cc:cd:19:0e:29:03:37:84:25:1f:ae:3f:58:60:
12:c1:7c:47:b7:4d:b7:7e:df:a6:d8:40:e4:94:46:f9:af:c6:
46:16:d4:cd:14:db:4f:cb:5c:e1:e5:a5:30:af:21:44:9c:ae:
bb:98:f5:90:48:03:10:21:76:c8:1b:6f:b4:7f:8f:7a:7f:8e:
c9:79:53:f6:9c:d0:d5:5b:38:7e:77:0d:82:f4:ae:d9:6a:bd:
e8:32:be:8d:84:90:3f:e8:57:c0:f1:94:b3:34:d1:0c:13:48:
ed:30:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:25 2025 by rpki-client