Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-MujtLHEcJxQABIBI0IsnHK9AXA.roa
File: 1-MujtLHEcJxQABIBI0IsnHK9AXA.roa (raw, json)
Hash identifier: FwmpWJBSsN3H4sC9tBzF5lQpvkPtZn4abya0dgwvnwU=
Subject key identifier: F8:CB:A3:B4:B1:C4:70:9C:50:00:12:01:23:42:2C:9C:72:BD:01:70
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA8D29FDE8E6151F21512AF19B29811B4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-MujtLHEcJxQABIBI0IsnHK9AXA.roa
Signing time: Mon 18 Sep 2023 15:04:50 +0000
ROA not before: Mon 18 Sep 2023 15:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:a8d2:1b69/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:d2:9f:de:8e:61:51:f2:15:12:af:19:b2:98:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 15:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cba3b4b1c4709c5000120123422c9c72bd0170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:a6:2b:b5:43:80:0e:74:b4:7d:e1:ba:39:
89:be:3d:66:d6:46:ef:3f:98:46:b8:d5:3d:e1:da:
d7:43:b7:84:12:cc:76:75:5b:c0:2d:fd:dc:c1:78:
6e:4c:48:9c:66:3c:5c:59:03:1c:8e:9e:c8:2c:6c:
f9:27:f9:6d:ad:02:22:b0:b3:e4:e2:12:eb:34:a3:
26:4a:4c:af:9a:fe:52:29:b4:79:35:59:dd:20:49:
36:2d:f0:eb:82:19:1f:00:af:6d:e4:41:55:2e:42:
80:1a:63:9d:6c:43:51:ce:5f:b5:2f:f3:a4:94:f2:
1c:53:fb:f7:27:8a:b7:ce:fa:78:62:38:73:4e:49:
be:61:bb:93:11:de:8a:a2:3b:c2:28:42:0b:fc:e0:
8d:49:6c:95:8d:33:1f:ef:4c:8a:ab:32:64:26:d0:
40:e2:ab:cf:04:1a:48:9d:a3:a5:11:88:3e:32:35:
a9:98:ba:f5:21:a0:91:4b:cd:6d:a2:f0:7b:c0:01:
ce:46:9b:30:12:f4:6e:d0:9c:c3:4b:a7:d8:93:d1:
32:05:60:bf:95:bd:6d:ee:e3:cf:50:16:1e:73:e5:
da:cc:f0:63:1c:ed:ad:12:ef:05:35:e3:7a:ed:81:
c1:21:ca:78:a4:4e:f1:20:0a:de:b5:2d:f5:5e:d7:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:A3:B4:B1:C4:70:9C:50:00:12:01:23:42:2C:9C:72:BD:01:70
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-MujtLHEcJxQABIBI0IsnHK9AXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:54:e5:4e:4b:48:5b:3c:24:df:13:fa:ad:3f:8d:05:3e:53:
9b:2f:1a:f2:02:e5:54:7c:09:f7:ad:04:ef:8c:d1:c9:e9:a1:
1d:28:37:06:4e:b7:7c:46:83:73:35:fb:72:6b:37:66:2d:94:
fa:9d:80:fe:f1:31:de:70:6e:f3:d8:cd:cd:64:51:61:a5:2f:
16:f4:20:40:a8:ec:7a:47:d2:0a:40:92:20:69:47:03:b2:31:
20:de:15:15:fb:dd:74:f1:37:24:4d:67:de:a8:76:de:d0:5b:
49:6e:c7:d7:71:81:6d:42:28:14:32:14:df:35:d9:f9:bd:21:
89:ef:0c:a4:e2:05:55:96:f6:bb:b3:c8:55:ef:f3:58:61:c7:
9d:21:98:13:22:eb:04:0f:8f:d2:c1:59:54:bb:6c:ba:10:7b:
7a:fa:0b:87:29:6e:a7:13:88:87:13:0d:74:6b:f3:e0:0b:6f:
08:9c:08:d0:44:c2:78:86:c8:e7:d0:f7:39:fc:f4:5f:84:19:
20:e1:c1:d7:23:be:b5:09:fd:bb:28:03:97:2c:4e:77:3d:88:
85:cf:a7:ea:ef:bc:b8:71:ac:7d:70:0e:66:57:b7:17:09:e5:
7e:72:e9:8b:d9:62:95:e9:f3:6f:36:16:c3:27:60:1c:5b:6a:
18:d0:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:12 2025 by rpki-client