Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-9Dkci8CmbwWSB_BchoKPzndRS0.roa
File: 1-9Dkci8CmbwWSB_BchoKPzndRS0.roa (raw, json)
Hash identifier: mSi9p/y6P7uZPVKfFKkDITqPMlAVCFQY8HVoLbon7EA=
Subject key identifier: FB:D0:E4:72:2F:02:99:BC:16:48:1F:C1:72:1A:0A:3F:39:DD:45:2D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A62DF2048E4BB35E0FECEA1DF1ABD2E82
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-9Dkci8CmbwWSB_BchoKPzndRS0.roa
Signing time: Tue 05 Sep 2023 01:05:04 +0000
ROA not before: Tue 05 Sep 2023 01:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:62de:7217/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:62:df:20:48:e4:bb:35:e0:fe:ce:a1:df:1a:bd:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 01:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbd0e4722f0299bc16481fc1721a0a3f39dd452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:dc:f5:f6:26:ff:3e:be:4b:89:19:98:9b:
64:17:37:0e:8b:e5:94:fc:d2:d1:50:4c:c9:ff:91:
b2:80:17:f8:ab:d0:e4:3d:80:55:02:2d:8d:16:b2:
76:94:77:57:bc:da:c7:f9:7a:8d:9d:10:4b:f6:86:
ee:31:21:2c:1c:81:fd:9a:bb:b6:df:ee:1e:10:30:
46:ae:8f:d2:bc:ba:7d:06:77:d7:18:75:10:c2:1c:
22:05:10:a3:ba:49:5a:07:99:9c:bb:ff:f7:23:b0:
c8:7a:9b:dc:b9:8d:2b:c3:8a:28:19:28:9f:5a:67:
75:c5:d9:d1:7d:ce:5c:e4:b0:b1:0f:72:44:f9:2f:
0d:25:30:c4:5b:6c:2c:6f:1b:8d:ca:76:db:b7:17:
72:18:97:96:ae:72:9c:c6:e4:a5:0d:8f:ff:dd:f3:
06:2a:bf:2c:5c:51:c2:97:48:c4:f0:54:90:6d:0f:
75:d9:12:49:f2:9f:38:9d:3c:2c:b2:6d:f8:0d:63:
18:27:e9:93:9b:ea:bc:8c:97:35:ba:00:3b:69:f1:
5d:b8:c3:c0:1b:8c:85:7e:4f:b1:8e:02:02:8a:0c:
d4:4a:fc:f1:28:9a:b2:90:bb:38:14:ce:65:ec:e7:
99:da:ca:14:52:8b:91:0e:8e:d2:de:54:17:96:28:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:E4:72:2F:02:99:BC:16:48:1F:C1:72:1A:0A:3F:39:DD:45:2D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-9Dkci8CmbwWSB_BchoKPzndRS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:b1:8c:ac:ef:c8:7d:90:1e:b4:c8:be:88:b5:bb:69:92:d3:
47:d0:fd:87:ab:8e:01:05:13:00:bc:9b:a8:ff:db:09:89:e4:
0e:ea:38:e0:12:5b:68:aa:0c:1d:7c:85:12:18:9a:cf:76:e4:
fa:c7:ee:fb:01:12:ea:0d:e1:cc:e9:70:3c:74:c4:2e:9e:b7:
4e:a7:2c:ae:50:31:ff:02:5a:95:63:e4:ca:04:29:10:77:42:
1a:c9:f6:5d:a7:1d:e0:a5:3d:7a:e6:90:ca:ab:8b:c5:f3:62:
b3:91:cf:91:48:3b:98:8e:1f:64:8a:f4:14:05:ac:a4:80:c6:
f7:8f:a5:86:66:d2:8e:c3:1e:d2:8d:96:1c:14:5d:b6:fe:6f:
ad:58:23:c8:50:a3:7b:f0:55:29:1c:68:af:27:37:a1:db:06:
a9:fe:bf:b4:3b:26:a1:33:62:4a:dc:7f:e8:b7:e8:3e:50:8f:
fa:7c:db:b6:11:4f:49:51:46:ed:06:07:aa:7d:38:e9:eb:2c:
d0:25:cf:7e:8c:ac:7d:ef:4b:54:88:4f:77:6f:b0:88:ec:8f:
18:57:f0:95:79:10:4b:90:fe:53:3d:20:a9:fd:11:8a:21:17:
44:39:58:ab:6d:bf:68:92:b6:d4:4f:8a:ec:fc:ad:35:98:29:
58:1c:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:16 2025 by rpki-client