Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-VaYkvIQ9Tnt5vAI8-xSXZ0bfD4.roa
File: 1-VaYkvIQ9Tnt5vAI8-xSXZ0bfD4.roa (raw, json)
Hash identifier: TDvxQfZUJHQiBm6RZmBGp/mh0p4CpU84E9s3Xf7A8/c=
Subject key identifier: F9:56:98:92:F2:10:F5:39:ED:E6:F0:08:F3:EC:52:5D:9D:1B:7C:3E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A58D71247004058E6A6FAC10A9676E240
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-VaYkvIQ9Tnt5vAI8-xSXZ0bfD4.roa
Signing time: Sun 03 Sep 2023 02:20:04 +0000
ROA not before: Sun 03 Sep 2023 02:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:58:d7:12:47:00:40:58:e6:a6:fa:c1:0a:96:76:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 02:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9569892f210f539ede6f008f3ec525d9d1b7c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:1c:a2:ef:c0:8c:e0:10:71:d9:38:2f:ba:
b7:67:fe:2e:67:ac:11:d3:26:4f:87:55:4e:09:76:
cf:f0:72:3c:0c:b3:7f:8a:2a:da:40:1b:f0:cd:b6:
f5:a5:dc:67:ab:e2:82:4e:c5:bf:c8:eb:26:9c:fc:
c4:41:ce:11:90:f3:7c:8f:45:5d:fc:fb:8c:fd:6c:
3a:d2:bc:44:ee:b5:3a:ab:b5:fc:2e:20:4a:a5:49:
f3:c9:30:66:4b:9d:68:7c:39:23:f6:1b:c6:69:53:
82:ce:a5:25:38:bb:45:b0:d8:14:be:81:97:d2:97:
a4:66:44:ce:a1:25:95:fb:6f:4a:f2:c0:39:1d:e3:
aa:27:51:9d:03:fe:ca:3e:89:f0:05:e7:56:c0:6e:
64:09:af:71:ee:b9:ec:eb:1e:20:52:90:ac:44:8c:
0d:88:ac:a0:a7:a1:a5:dc:78:ce:34:57:e8:e1:ac:
ea:8f:5b:df:e3:ff:b6:7c:fb:f7:ee:5c:1c:4f:86:
a8:5f:cf:31:6f:1d:39:a2:a8:e8:b6:44:41:5b:9b:
83:12:3b:25:e2:57:c0:eb:7e:3b:f7:a7:fc:e5:12:
96:02:4e:8f:70:db:34:68:b8:22:77:62:db:8c:15:
eb:f6:5a:1f:c9:78:7d:73:d8:52:0d:19:f5:8f:53:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:98:92:F2:10:F5:39:ED:E6:F0:08:F3:EC:52:5D:9D:1B:7C:3E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-VaYkvIQ9Tnt5vAI8-xSXZ0bfD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:63:07:54:1c:ab:53:82:ae:92:d4:a8:9c:13:8f:89:73:bf:
c8:cf:d9:33:70:53:53:c3:64:81:b1:a0:a9:1a:2d:2a:68:19:
7c:d1:ee:72:09:d2:84:6b:49:e5:c0:60:2f:94:8d:64:26:72:
be:be:23:77:e1:55:10:43:b8:ad:8c:c3:f6:97:ec:33:c2:a4:
58:a5:8d:48:aa:0d:62:c8:a6:b3:51:04:16:c3:f2:3a:bd:e4:
45:1a:c5:da:fa:20:9e:14:e9:8a:42:e5:7c:83:8c:af:60:b9:
45:2a:8b:36:74:75:33:2c:15:91:23:c7:9b:b3:49:50:6d:60:
1f:c3:c4:f8:b1:69:79:db:8d:bc:8d:d7:5c:89:1f:e5:87:84:
4e:c5:d0:62:06:4a:a4:d4:01:45:f1:ce:3a:c6:42:3a:4b:fa:
d5:40:9a:f3:36:ad:0f:10:1f:64:12:f7:f4:79:d3:1e:dc:2f:
04:40:2c:44:e5:6b:7d:d2:bb:5c:39:19:f3:29:92:d4:ac:9c:
de:da:68:f2:f6:18:1a:f7:14:55:3a:61:08:32:ee:de:1c:e7:
65:98:5a:b8:81:61:a8:80:ad:47:1d:39:30:a6:13:4d:18:d7:
fa:b9:c8:a4:79:97:f2:13:63:02:9a:01:31:51:0c:61:20:54:
86:89:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:04:59 2025 by rpki-client