Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/05Xu6HAwbCl0a0gnGg73GVUh4HY.roa
File: 05Xu6HAwbCl0a0gnGg73GVUh4HY.roa (raw, json)
Hash identifier: zJwrDOxplhlX60KayZDgElnzcComTGTA8cLLyg3F7kE=
Subject key identifier: D3:95:EE:E8:70:30:6C:29:74:6B:48:27:1A:0E:F7:19:55:21:E0:76
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A78FF4E7C4E409DE2AC1ED1B03163764A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/05Xu6HAwbCl0a0gnGg73GVUh4HY.roa
Signing time: Sat 09 Sep 2023 08:11:52 +0000
ROA not before: Sat 09 Sep 2023 08:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:78:ff:4e:7c:4e:40:9d:e2:ac:1e:d1:b0:31:63:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 08:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d395eee870306c29746b48271a0ef7195521e076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:6b:76:e5:8a:2d:4d:f3:70:3a:e1:c9:bd:
9e:80:bf:83:bf:02:7c:71:b2:9b:a3:25:b3:39:35:
65:78:86:53:39:61:e7:63:b9:6a:25:19:41:2a:67:
1a:b6:fd:2d:2f:0d:e3:db:4d:68:fc:01:26:61:e8:
5a:42:05:36:c7:d8:43:85:78:1a:8c:8d:54:fb:21:
dd:b9:71:c4:7f:ec:bb:f6:4b:87:2d:e2:57:c6:10:
0d:19:ca:38:b6:ba:76:07:44:95:91:28:50:fd:3b:
5d:cf:c7:7b:6a:8c:07:55:75:4d:1d:f2:91:a9:6d:
a3:04:89:d5:38:28:6c:19:fe:dd:c7:f2:33:34:27:
f2:37:4a:12:86:9d:bc:ce:80:d7:24:f3:07:8f:ea:
1e:82:bb:59:e1:40:f4:cb:16:4b:1c:13:a6:30:27:
59:c0:77:0e:d4:46:d8:b8:90:88:51:aa:22:e7:7a:
23:c9:9c:50:d9:de:4f:a4:84:70:3b:81:cc:fc:7e:
e2:4b:0b:ed:43:de:26:cf:1e:de:b8:09:c5:0d:6d:
5a:4e:31:55:f0:a3:ed:bd:13:74:6d:64:0f:42:7f:
13:f9:5d:87:1e:60:5a:7b:12:86:1a:e8:c7:d1:37:
a4:98:68:dc:4f:38:89:ab:73:4f:d2:0c:6c:82:b9:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:EE:E8:70:30:6C:29:74:6B:48:27:1A:0E:F7:19:55:21:E0:76
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/05Xu6HAwbCl0a0gnGg73GVUh4HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:ec:d8:bc:db:9e:a4:d8:c8:3c:97:0f:67:65:2b:eb:ed:93:
52:fb:90:d7:11:bf:b3:42:11:28:bc:2a:1d:2b:44:00:fd:3c:
b3:6a:aa:d6:01:e4:3c:df:88:e5:e4:29:c5:fb:55:1a:b6:eb:
14:4b:1e:f2:b1:f0:e3:88:a3:00:8b:21:a5:de:49:36:40:52:
ec:12:da:02:cf:41:e8:13:98:1c:9b:18:59:ec:87:f0:84:68:
ab:e3:4e:d1:e2:cf:6e:7f:ff:bd:9f:95:8c:df:43:c1:3c:ba:
ee:52:22:b0:ef:f9:27:7c:fd:ef:2a:8f:61:59:ed:3e:5d:e2:
7e:d1:3f:78:fc:f6:e7:76:93:23:e8:fd:14:0b:54:9a:77:e2:
38:40:ea:cb:52:62:22:83:9f:3d:8a:de:79:ce:2f:19:ee:87:
fc:01:7c:57:da:c8:22:70:31:98:35:87:06:5a:67:6c:b3:e8:
92:74:3b:25:7d:f2:30:09:d2:80:07:db:9d:9f:b3:fd:e6:64:
ed:0e:bd:c5:b2:6e:d3:b5:74:17:b8:5e:9c:f6:27:5f:4c:df:
fd:4b:79:3f:8e:dd:4d:42:8c:4c:a1:ae:fa:b3:74:fe:8d:f6:
ef:d6:a4:64:a0:aa:ac:83:9b:36:d9:bf:b6:e0:dd:61:3d:5c:
a4:a6:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:07 2025 by rpki-client