Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa
File: nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa (raw, json)
Hash identifier: k2smBo0B6Rg200HCyYBg3ev4MK3Z8GGwk8I2j8r77Ts=
Subject key identifier: 9E:56:7A:87:A9:61:FA:03:5F:BC:ED:A7:63:44:68:B8:6D:6C:57:11
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 157DD29A
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa
Signing time: Sat 01 Jan 2022 14:03:44 +0000
ROA not before: Sat 01 Jan 2022 14:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398826
IP address blocks: 104.160.21.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360567450 (0x157dd29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e567a87a961fa035fbceda7634468b86d6c5711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:a7:29:f9:58:5e:e2:43:b3:e6:b9:61:9a:
61:fe:42:06:79:36:2e:64:d8:7a:2c:2c:64:5d:10:
f4:24:fb:d3:c9:d3:a5:99:92:59:13:dc:0e:01:75:
60:53:b4:89:c2:a8:86:a4:87:ff:e2:20:8d:ce:ea:
76:7e:1b:37:0f:f5:03:0a:ca:f9:df:b2:73:72:41:
1f:6d:a9:05:8c:c2:92:ef:4c:e7:f7:18:50:f3:6b:
fc:24:54:73:3f:78:6c:92:9c:79:c8:42:2d:cf:c9:
fe:f4:3d:87:80:88:fa:a0:98:8d:b7:e3:24:1f:39:
c2:a2:3b:d3:a1:e4:25:32:00:59:64:63:0b:98:a2:
2b:a3:ec:51:7d:9f:98:0c:cd:a0:a6:ce:72:f2:7e:
98:2e:c8:c6:ef:dd:aa:9a:43:42:bb:01:0b:03:00:
0d:9d:4f:99:6e:c6:e0:2d:fb:7b:3a:77:a8:d8:54:
28:f3:bf:fb:40:07:9c:ab:3f:8e:32:38:9b:7c:69:
05:bb:1a:c4:2a:0b:49:67:fa:6c:6e:52:c5:cf:c4:
72:34:0b:75:28:b3:c2:10:cc:8c:e0:dd:25:55:70:
84:70:51:c2:28:23:a4:2b:0d:70:7b:39:68:85:55:
f9:8d:f6:ee:88:0b:5e:74:d4:f3:c5:a2:a4:36:92:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:7A:87:A9:61:FA:03:5F:BC:ED:A7:63:44:68:B8:6D:6C:57:11
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0-104.160.21.255
Signature Algorithm: sha256WithRSAEncryption
4a:07:43:f4:6e:e2:1a:d3:7f:f4:77:cc:36:a2:16:b2:92:14:
ac:d2:99:d5:a0:e0:6e:0b:40:ac:05:ca:af:98:5b:1f:1b:56:
49:d7:e9:97:b2:f9:ce:87:50:d0:72:2e:1d:20:4f:6d:d1:3d:
66:8c:b1:eb:c2:01:93:4e:c6:99:df:43:05:28:1c:73:ce:7a:
5f:34:07:f2:28:8a:4d:60:ca:4e:a2:7b:a5:1f:f4:f5:50:44:
6b:c6:b7:88:c3:5b:d5:d3:f4:0a:49:37:bf:7d:f6:89:76:e9:
30:90:c3:ca:3a:e7:32:ca:50:3d:42:9f:e3:ed:02:a9:f4:66:
78:04:64:ac:03:49:b3:3e:cd:fb:0c:7d:91:eb:ec:cf:66:0b:
04:19:b3:18:41:a7:9e:0d:9e:c9:2a:c4:82:75:d1:aa:83:fa:
60:67:ff:ad:5c:32:24:76:46:5d:57:07:f8:2d:33:d4:c7:3a:
09:13:5e:eb:bc:11:97:44:0b:c0:b3:33:db:d9:a4:02:38:02:
09:89:c5:60:6c:3e:2b:90:0d:2b:99:92:06:96:05:b0:0a:e0:
c5:65:f6:63:f3:8b:9e:73:da:4f:29:ab:44:44:ca:54:04:00:
ed:1a:4e:93:19:08:1e:1f:93:a6:2a:77:03:0a:d6:38:db:28:
6f:f8:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:07:59 2025 by rpki-client