Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/1-NS0h_6wzcKhmsCw5HoNqcBbkTM.roa
File: 1-NS0h_6wzcKhmsCw5HoNqcBbkTM.roa (raw, json)
Hash identifier: pbP5Mf189QYMxKr5gm6N9dpwdpsmIKGPsXB5pKCo2wQ=
Subject key identifier: F8:D4:B4:87:FE:B0:CD:C2:A1:9A:C0:B0:E4:7A:0D:A9:C0:5B:91:33
Certificate issuer: /CN=29e123c1852d347cbd279e3045377c9cd510284a
Certificate serial: 01882086B6A068798A68ED50E6F171D69949
Authority key identifier: 29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/1-NS0h_6wzcKhmsCw5HoNqcBbkTM.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.3.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b6:a0:68:79:8a:68:ed:50:e6:f1:71:d6:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e123c1852d347cbd279e3045377c9cd510284a
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d4b487feb0cdc2a19ac0b0e47a0da9c05b9133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:2b:5b:ea:81:77:8d:dd:f5:49:c2:41:e6:
ab:03:4a:83:29:97:26:a2:7a:55:57:b1:3b:62:88:
bf:d6:05:f3:31:eb:04:67:78:36:3f:ff:53:0d:35:
94:90:78:a5:32:0e:f6:79:90:3f:f0:28:3a:2c:8a:
b7:28:d4:55:46:fe:09:ef:b0:48:18:8d:1c:a4:3b:
ee:17:02:21:90:56:2b:b7:f8:be:6a:a8:21:61:51:
67:73:d3:be:43:63:36:cc:d6:38:03:48:ea:00:c1:
84:9b:5c:ff:ef:af:e3:54:b1:b1:f1:82:75:8f:3e:
22:bd:5f:3d:ad:42:5a:c8:cb:c9:3d:33:9d:78:49:
6e:0f:a0:ea:73:94:52:10:8f:cf:1d:b9:cc:d2:87:
e3:ce:42:a9:06:f4:b4:83:90:66:6d:be:aa:5b:02:
58:8c:e2:ca:fe:83:e2:f2:e5:61:0c:09:53:44:f9:
7b:4b:0a:3f:4a:95:b9:cc:69:f4:31:14:89:8c:17:
8b:fa:5d:13:a9:1c:1e:a4:f5:ec:0c:a5:de:50:3b:
9f:31:49:64:1d:95:e7:6d:f1:ab:57:f1:a9:ff:e2:
75:34:86:db:47:25:d2:7f:a9:32:76:ec:a9:e4:38:
5e:36:d6:ce:45:5d:10:2e:dd:a3:f1:5c:93:b2:03:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:B4:87:FE:B0:CD:C2:A1:9A:C0:B0:E4:7A:0D:A9:C0:5B:91:33
X509v3 Authority Key Identifier:
keyid:29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/1-NS0h_6wzcKhmsCw5HoNqcBbkTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:12:9d:2d:08:ea:ce:59:19:f4:85:2f:f0:27:7a:30:a9:41:
b1:cb:48:d4:5e:3f:ed:e8:2d:b7:c7:9f:47:88:00:0f:e4:91:
ad:69:e7:61:85:0a:10:9f:a9:e0:2e:31:7f:c2:d2:2a:34:f4:
49:62:09:6b:45:4e:55:c1:1f:09:82:31:f7:ac:2b:8a:5f:2f:
0f:81:ce:74:32:2f:7d:07:d1:11:1b:fa:32:28:ec:7d:f5:e8:
f9:9b:d2:f2:e9:59:ce:31:9a:66:e4:93:4a:55:10:41:2e:c0:
c6:f1:63:41:12:43:f5:77:7f:4e:6a:01:ed:a9:3d:ce:2c:19:
12:21:66:cd:00:f7:06:13:c1:8f:aa:00:31:1e:47:00:d6:11:
80:7a:05:66:1d:0a:d3:c6:fe:7a:d7:99:c6:9b:5f:de:c2:a1:
e8:f1:be:4b:f5:6c:a1:63:4b:27:94:1c:82:17:d0:fe:4b:5f:
75:a3:88:b6:30:b0:93:a7:dd:59:b9:1a:21:b5:aa:32:38:76:
48:7a:2c:50:92:c0:b6:3d:a5:d8:f7:e3:19:f7:97:8c:f6:8e:
5d:a9:76:1a:32:c7:0b:5d:c5:1e:0d:cf:b5:cc:89:e7:8e:5e:
ec:cb:f3:7d:22:4a:16:10:50:32:a1:70:af:d4:d2:bd:a6:a5:
16:38:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:41:59 2025 by rpki-client