Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/15LvkNL_XvwvcNW-J9PNCGfi-8A.roa
File: 15LvkNL_XvwvcNW-J9PNCGfi-8A.roa (raw, json)
Hash identifier: j015feC9HLaToy9Zs+D02M0RDYAVkzFMtoQONCzfBaY=
Subject key identifier: D7:92:EF:90:D2:FF:5E:FC:2F:70:D5:BE:27:D3:CD:08:67:E2:FB:C0
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5D1C35BFBE024445F1E5FCC0B58CCDB0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/15LvkNL_XvwvcNW-J9PNCGfi-8A.roa
Signing time: Sun 03 Sep 2023 22:14:04 +0000
ROA not before: Sun 03 Sep 2023 22:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5d:1c:35:bf:be:02:44:45:f1:e5:fc:c0:b5:8c:cd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 22:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d792ef90d2ff5efc2f70d5be27d3cd0867e2fbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:8f:2f:15:25:1f:59:ce:c9:09:9e:41:aa:
42:00:93:c3:72:5e:a7:e0:5d:a3:74:c5:05:10:f5:
f4:dc:58:eb:c3:5c:e3:6c:c6:e1:06:b3:71:88:4b:
e1:fb:fd:e1:5c:28:75:9e:fa:32:23:af:7f:1c:55:
b5:fd:59:ff:1d:2c:23:e6:b6:d2:5f:62:c6:73:26:
e4:87:d0:75:39:97:93:96:f1:0f:4d:3c:00:a2:b3:
98:28:c3:c2:96:f6:9e:04:6c:c6:1e:e6:d2:75:22:
73:fa:df:8b:8c:f6:33:af:5a:18:d9:5c:ed:b7:64:
ef:fb:83:50:14:05:c5:db:6a:fd:bd:bd:96:8e:12:
39:19:75:e6:f0:6b:02:f1:f6:92:2f:8b:aa:4c:ce:
3c:b4:11:b2:74:5b:bf:e8:20:7f:cc:a8:44:d6:41:
55:47:af:98:59:5a:91:41:0b:d9:22:0f:88:1c:c5:
b8:41:56:d9:77:7b:72:d5:31:65:70:80:67:d9:7c:
8f:ec:c4:f1:1b:ee:63:e3:d2:d7:34:c6:1f:f7:ea:
b6:bb:5d:bf:cc:59:ba:aa:0e:08:63:13:93:06:73:
06:f7:d1:ad:de:ec:31:ff:c2:05:e5:b3:e5:02:fa:
3a:a0:a7:d5:12:8a:bb:0b:b6:5b:16:28:67:3b:31:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:EF:90:D2:FF:5E:FC:2F:70:D5:BE:27:D3:CD:08:67:E2:FB:C0
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/15LvkNL_XvwvcNW-J9PNCGfi-8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:f7:08:47:72:03:aa:ab:e4:0d:84:f7:6c:ee:6f:a5:ba:ab:
f5:d4:34:b7:af:25:12:8b:53:5f:3c:f6:85:f8:a2:7c:77:a7:
1a:2b:ee:0e:86:11:23:c1:6a:d2:20:e2:b0:d6:7d:f5:b5:04:
18:e1:32:7a:a8:02:75:4d:d1:95:7a:fe:ac:36:a3:74:b1:82:
2d:f2:a5:6a:22:5b:d0:63:93:6d:9f:b1:1e:00:c4:3e:20:23:
8d:16:c2:06:d4:67:93:42:26:4e:55:a3:43:63:4f:b5:6a:17:
b0:b6:5e:5d:8d:db:f3:c0:e3:bf:16:0b:95:73:de:8d:f8:65:
d6:d1:f6:f3:bf:4b:64:22:84:d8:03:28:50:17:c8:48:f9:3c:
c5:ff:53:53:11:9d:62:10:05:21:03:c9:10:94:e4:f8:fc:94:
3e:48:89:78:5c:24:ce:3c:b7:85:2a:3e:c2:8e:a1:1a:a8:85:
ee:76:df:f8:41:37:8e:90:fc:0a:9d:04:6b:2b:f8:13:55:c9:
c8:af:2e:37:2f:9c:d1:0a:88:0f:6a:cc:59:a6:98:4f:68:df:
d6:a3:c3:73:89:e6:9c:9c:e9:9d:e2:4d:fa:ed:2f:b7:0a:52:
c1:9d:0b:63:bd:82:72:9f:76:de:e7:c9:ab:c6:a3:05:e6:a3:
6a:1a:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:37 2025 by rpki-client