Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NWr3sohMx-qTkKLA4L10iSAfp1M.roa
File: NWr3sohMx-qTkKLA4L10iSAfp1M.roa (raw, json)
Hash identifier: KC0mdEt8hVVKOZp/HrxJZRhgGZuwlRPjrbbHIQ7buIA=
Subject key identifier: 35:6A:F7:B2:88:4C:C7:EA:93:90:A2:C0:E0:BD:74:89:20:1F:A7:53
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8790377C3831616CFCF0CFD168E5107A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NWr3sohMx-qTkKLA4L10iSAfp1M.roa
Signing time: Tue 12 Sep 2023 04:04:50 +0000
ROA not before: Tue 12 Sep 2023 04:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:878f:e3e6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:90:37:7c:38:31:61:6c:fc:f0:cf:d1:68:e5:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 04:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356af7b2884cc7ea9390a2c0e0bd7489201fa753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:ec:68:8f:7a:11:b7:01:6d:5e:9a:39:95:
44:08:41:fe:0c:1a:4d:16:f9:8b:c7:8e:3f:a4:e4:
53:ae:80:a4:59:c5:7b:81:cd:05:92:92:60:c4:0f:
23:16:a5:51:50:ee:d6:e9:4e:71:9d:5b:92:0d:e5:
4b:2b:e1:20:a3:5e:33:5b:4f:02:f6:a4:c6:52:66:
91:7e:b5:25:4f:8f:52:d0:9d:1c:0a:e6:c1:ea:02:
1b:b3:e8:b9:d3:fe:8a:a8:45:db:79:c5:69:73:6e:
88:4b:b0:44:fb:57:d3:b9:7d:8b:ae:fb:ac:d1:06:
ef:fd:37:d8:a3:31:b2:9d:40:ae:96:73:14:85:d3:
10:bc:71:2e:3a:18:8c:8c:05:98:27:7d:f1:bf:b0:
cc:9b:54:d3:32:d8:0a:fd:be:48:b6:3b:6d:7e:de:
e0:05:74:2f:ab:de:05:b5:c7:4b:be:d6:7a:35:e7:
e7:01:26:26:81:db:c0:3e:6b:f3:21:7a:51:ab:16:
20:92:c4:b2:b4:b1:c0:43:bf:ef:e9:01:61:42:ec:
f6:09:78:c0:ee:d9:55:43:6c:fb:61:86:0c:d2:00:
52:ab:f8:2f:cc:18:79:b1:1c:b1:ba:16:a0:0d:57:
1a:41:a6:d3:83:44:d1:85:25:56:7c:4b:ac:cb:30:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:F7:B2:88:4C:C7:EA:93:90:A2:C0:E0:BD:74:89:20:1F:A7:53
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NWr3sohMx-qTkKLA4L10iSAfp1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:c1:d7:c6:78:bb:24:cf:e6:5a:8e:0e:e8:d5:d9:c7:bf:d1:
53:32:c0:cc:a3:12:b1:45:ef:83:58:42:ae:e8:9e:08:93:34:
20:1f:a7:7c:56:19:74:17:76:88:d5:c8:0f:9e:f0:11:fe:f7:
ba:27:5c:b7:a8:14:04:8a:de:a4:9b:43:a5:3f:8d:06:07:cc:
dd:84:48:75:6e:60:7e:28:24:e6:41:4c:55:db:25:aa:95:da:
06:d6:34:fe:b5:13:2a:f0:9d:8a:84:33:ac:0f:71:0e:ae:c0:
fc:89:05:10:88:a2:ef:4b:3a:40:28:ab:db:e8:73:d9:3c:e3:
29:06:59:a8:75:09:14:9d:a3:03:2b:6f:57:35:58:19:96:44:
16:26:b5:7a:6f:c9:c0:3c:49:00:c7:cb:20:4d:11:e4:51:45:
d3:57:5f:42:09:56:8a:ed:f1:d3:d8:08:f4:b9:cc:65:34:69:
7a:db:cc:78:ad:92:b7:6c:63:24:8f:7a:fc:92:04:7d:e5:85:
12:f3:22:bd:a1:f0:cc:de:92:1f:90:51:9c:15:35:83:bc:64:
66:35:af:81:e4:1f:6f:6e:bf:e1:2d:28:e9:9f:39:20:40:4e:
bf:bc:08:a2:6d:65:9e:d7:e3:03:06:69:30:7f:ce:93:b8:0b:
04:eb:45:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqHkDd8ODFhbPzwz9Fo5RB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEyMDQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTZhZjdiMjg4NGNjN2VhOTM5MGEyYzBlMGJkNzQ4OTIwMWZhNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE3saI96EbcBbV6aOZVECEH+DBpN
FvmLx44/pORTroCkWcV7gc0FkpJgxA8jFqVRUO7W6U5xnVuSDeVLK+Ego14zW08C
9qTGUmaRfrUlT49S0J0cCubB6gIbs+i50/6KqEXbecVpc26IS7BE+1fTuX2Lrvus
0Qbv/TfYozGynUCulnMUhdMQvHEuOhiMjAWYJ33xv7DMm1TTMtgK/b5Itjttft7g
BXQvq94FtcdLvtZ6NefnASYmgdvAPmvzIXpRqxYgksSytLHAQ7/v6QFhQuz2CXjA
7tlVQ2z7YYYM0gBSq/gvzBh5sRyxuhagDVcaQabTg0TRhSVWfEusyzBJYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDVq97KITMfqk5CiwOC9dIkgH6dTMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvTldyM3NvaE14LXFUa0tMQTRMMTBpU0FmcDFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFLB18Z4uyTP5lqODujV
2ce/0VMywMyjErFF74NYQq7ongiTNCAfp3xWGXQXdojVyA+e8BH+97onXLeoFASK
3qSbQ6U/jQYHzN2ESHVuYH4oJOZBTFXbJaqV2gbWNP61EyrwnYqEM6wPcQ6uwPyJ
BRCIou9LOkAoq9voc9k84ykGWah1CRSdowMrb1c1WBmWRBYmtXpvycA8SQDHyyBN
EeRRRdNXX0IJVort8dPYCPS5zGU0aXrbzHitkrdsYySPevySBH3lhRLzIr2h8Mze
kh+QUZwVNYO8ZGY1r4HkH29uv+EtKOmfOSBATr+8CKJtZZ7X4wMGaTB/zpO4CwTr
RbE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:06:16 2025 by rpki-client