Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-S1zYxVKHh-0G0TZ3N-94TkiuEY.roa
File: 1-S1zYxVKHh-0G0TZ3N-94TkiuEY.roa (raw, json)
Hash identifier: id6Cvot0VRy8KD5p5ErG7ShyLtrhb34cRFAaQPmLhTg=
Subject key identifier: F9:2D:73:63:15:4A:1E:1F:B4:1B:44:D9:DC:DF:BD:E1:39:22:B8:46
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4AAD955B62D5708882A271DF60B9984A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-S1zYxVKHh-0G0TZ3N-94TkiuEY.roa
Signing time: Thu 31 Aug 2023 08:20:04 +0000
ROA not before: Thu 31 Aug 2023 08:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ad:95:5b:62:d5:70:88:82:a2:71:df:60:b9:98:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 08:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f92d7363154a1e1fb41b44d9dcdfbde13922b846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:f6:d7:58:e2:01:93:3e:b2:c6:7d:eb:c2:
45:2b:a7:b5:47:40:81:0a:6f:02:b9:ef:a7:7e:81:
05:d4:00:37:cd:4e:61:e7:8e:54:c9:04:ce:73:44:
40:ce:85:39:fd:3c:d9:2d:5e:ba:e8:f3:08:cb:86:
66:16:06:89:bd:e5:aa:a3:27:c1:ae:74:cd:1c:1e:
dc:b9:88:af:8d:22:ff:58:ed:65:1c:fa:57:0e:21:
9f:f6:54:9d:23:de:80:e7:10:8c:f7:b8:8e:32:28:
b9:46:00:7b:6c:b5:b9:bb:c0:4d:ba:e0:13:6c:8a:
27:0c:18:12:55:7b:46:27:c0:9d:47:47:71:a0:d6:
25:47:5d:75:56:63:1d:97:28:87:56:28:e6:c1:06:
dd:a6:57:20:24:7d:9b:5d:2b:ab:86:ab:c9:f1:b0:
87:99:c8:1b:1c:67:f9:7f:fe:bd:60:cd:f7:10:f7:
66:5c:f4:e3:9f:b6:93:63:7f:ed:b0:04:0f:ef:1d:
fd:75:37:20:2c:4d:54:47:a1:9a:d5:54:eb:14:59:
89:f5:ac:40:6b:71:21:38:70:75:f4:0c:17:39:48:
c2:4b:a3:74:d2:d4:8e:97:b3:40:2a:26:2f:3e:be:
c6:01:4c:ae:c3:af:25:23:7e:cb:1c:8f:53:b1:68:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:73:63:15:4A:1E:1F:B4:1B:44:D9:DC:DF:BD:E1:39:22:B8:46
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-S1zYxVKHh-0G0TZ3N-94TkiuEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:6d:15:bd:0a:c9:77:86:d1:c6:36:dc:6c:f4:f6:3c:6a:4c:
c3:07:b1:a4:9e:23:51:91:41:9a:d7:77:90:55:a5:02:d3:20:
88:8d:8d:69:8a:78:0e:5b:36:74:ff:cc:fd:6a:9a:6f:f0:25:
5a:4f:2c:7a:74:08:cf:ca:da:a5:98:3a:76:0d:45:df:78:2d:
be:1e:5e:7f:96:d7:72:43:24:c1:ff:fb:b1:9e:ef:e0:4b:14:
b6:8a:b2:cc:dd:23:d2:63:e9:ce:e6:1b:dc:f2:38:9c:20:11:
1f:6d:8d:b8:81:6c:5d:87:68:2d:e8:ac:8c:5a:fe:29:42:f6:
5c:c9:da:78:fc:9c:43:e0:ad:35:a3:32:56:ca:94:d8:45:63:
fe:2d:fa:9f:2f:b9:12:ad:f5:d2:60:b6:83:80:16:a6:c9:df:
82:9d:94:e2:26:f0:6d:52:53:ba:6b:ed:d7:aa:d4:67:39:f4:
7d:9f:c8:40:2f:b2:bc:68:85:42:bb:da:ff:29:fd:87:99:dc:
77:1f:f1:07:77:c6:e1:42:67:5d:d5:29:83:55:f6:40:36:e2:
27:9e:74:ed:06:d4:93:6d:7a:95:f2:ed:59:b7:ac:8e:e1:0c:
19:72:57:ef:a1:95:8f:44:e1:41:ad:36:15:f8:3f:a6:51:da:
33:21:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:13:57 2025 by rpki-client