Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-03dbmpFq2zleDXnu9FtCvR80Oc.roa
File: 1-03dbmpFq2zleDXnu9FtCvR80Oc.roa (raw, json)
Hash identifier: 7ljEi5OWwwelQ968djAxd8BBV1iL6Wc4d+PwZUsAAqo=
Subject key identifier: FB:4D:DD:6E:6A:45:AB:6C:E5:78:35:E7:BB:D1:6D:0A:F4:7C:D0:E7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9555E983486B816C3AD947D8E5F0F003
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-03dbmpFq2zleDXnu9FtCvR80Oc.roa
Signing time: Thu 14 Sep 2023 20:15:50 +0000
ROA not before: Thu 14 Sep 2023 20:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:55:e9:83:48:6b:81:6c:3a:d9:47:d8:e5:f0:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 20:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4ddd6e6a45ab6ce57835e7bbd16d0af47cd0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:25:a3:9b:0e:b6:ff:08:1b:07:7b:3e:5f:
45:8b:f3:58:e3:78:55:b3:b5:0a:45:b6:be:75:ef:
74:2f:92:47:b4:00:bc:ce:c6:41:7a:28:dd:7b:48:
77:dd:53:7c:9b:6b:d0:4d:6d:89:de:64:73:51:fb:
42:4b:f3:77:f1:20:f9:ce:56:86:d1:a9:8f:5a:10:
a9:c7:4c:57:f6:dc:28:e5:39:2f:c5:da:78:d7:81:
61:f5:10:ec:0b:9d:94:c6:14:0e:74:f4:4d:2b:26:
92:a1:8b:17:61:c5:9e:1e:f1:d4:21:60:a0:e2:99:
4c:58:cf:56:49:85:b7:10:ba:47:de:3d:52:3e:dd:
0f:68:2c:af:c1:2a:35:c2:db:ae:d4:9f:31:29:f1:
08:03:24:85:91:a8:63:49:96:a0:1b:92:57:f9:3d:
5d:a9:2a:68:da:4a:b9:2e:9b:b9:6a:98:aa:29:b4:
2d:69:15:60:21:de:03:04:51:d2:c8:75:13:e0:03:
5f:56:ec:35:56:87:94:a9:3c:12:70:f2:af:e2:d8:
6e:04:ff:87:74:cf:3c:2f:2c:a1:f9:32:b1:8f:d4:
30:b2:f1:09:4b:d0:2c:61:c9:9d:34:d3:e3:27:1f:
46:78:5d:04:7f:72:f7:59:44:d6:f6:61:7d:f5:f6:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:DD:6E:6A:45:AB:6C:E5:78:35:E7:BB:D1:6D:0A:F4:7C:D0:E7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-03dbmpFq2zleDXnu9FtCvR80Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:a0:ad:3a:f3:7f:88:aa:d9:f7:73:7a:b4:05:1b:9d:8e:14:
07:34:bd:0a:8e:92:f4:35:49:70:0d:c8:2d:08:e9:ed:ff:18:
65:ab:46:bb:4c:fa:fc:bc:69:aa:da:c3:87:52:05:7d:81:c9:
b9:b7:f9:08:80:f5:34:98:a9:24:33:55:c4:b5:1c:f7:4b:12:
83:8e:b1:38:ce:71:ec:14:8a:df:13:df:9e:aa:94:f4:16:3c:
91:81:98:18:d3:9f:84:e7:6b:14:f3:86:59:5b:cb:f9:79:a2:
8e:7d:20:9c:4e:62:d2:ab:9f:35:4c:f5:7c:ad:c2:9d:d9:74:
0e:f2:82:ff:cb:91:2a:d6:05:d3:23:9c:ef:35:fb:6f:42:bc:
56:7f:3d:98:d4:10:dd:41:67:55:fd:26:ca:97:6e:9e:f3:0e:
2c:63:cb:08:ea:b0:83:71:3a:28:f1:50:d7:7d:1e:86:61:01:
38:6c:2b:31:1b:f4:8f:f7:85:31:bf:cb:7f:5b:51:da:82:e5:
b9:15:fd:18:49:4c:f6:90:72:ee:7a:9f:00:60:f0:f4:57:50:
70:77:f9:db:cb:b2:2e:38:9a:3d:30:d7:58:63:d9:77:aa:55:
1e:0a:9f:9f:76:a9:f7:26:e5:a7:2d:a4:f6:e4:ad:7d:8d:ad:
4e:e8:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:17 2025 by rpki-client