Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1E6bO7qnVNYe25OoS4YrhYmSRg8.roa
File: 1E6bO7qnVNYe25OoS4YrhYmSRg8.roa (raw, json)
Hash identifier: p2487L7Jen/v2rnbRjuwT8POGtyllSi6ntErbpQsM8w=
Subject key identifier: D4:4E:9B:3B:BA:A7:54:D6:1E:DB:93:A8:4B:86:2B:85:89:92:46:0F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A67606FD0B918CFB91B537AAC6C906A39
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1E6bO7qnVNYe25OoS4YrhYmSRg8.roa
Signing time: Tue 05 Sep 2023 22:04:47 +0000
ROA not before: Tue 05 Sep 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:6760:30b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:60:6f:d0:b9:18:cf:b9:1b:53:7a:ac:6c:90:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44e9b3bbaa754d61edb93a84b862b858992460f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:37:5f:12:7d:98:aa:53:51:2d:d7:00:bb:
02:79:3e:16:96:a6:83:49:86:c5:9f:b7:53:61:7f:
53:03:c0:e1:ce:61:d0:a7:70:80:3c:21:07:c3:ba:
4f:63:38:af:82:4a:c1:b1:12:39:c8:66:24:84:ae:
9b:b5:8b:82:a0:34:0d:e7:7c:93:52:4d:82:98:3c:
07:6a:e7:fb:f9:c2:57:ba:d3:fe:5b:88:55:ef:8d:
ed:b8:7c:e8:84:7f:86:68:f2:8e:d7:a7:cf:e5:6d:
63:9e:d0:b8:2d:08:25:04:c9:63:4c:05:d1:59:8d:
4f:2f:f3:dd:08:e5:61:ce:b3:04:50:01:f0:df:8d:
bd:fb:d3:19:72:d2:e9:80:3d:ed:70:ee:97:27:53:
6e:b4:06:cd:e6:8a:df:7b:a2:40:fc:41:34:ea:8f:
b9:df:c9:e7:03:4d:43:87:b2:ce:a5:f1:ca:39:ec:
d7:39:42:44:7c:d3:66:b9:c6:9b:8b:be:13:a8:32:
e6:fe:78:d0:90:c3:7c:ba:94:d9:d1:fa:29:0c:47:
9f:2a:90:de:e8:75:fa:d6:07:a4:ff:0c:e7:37:55:
25:e8:b0:e5:c9:f9:a8:06:e1:a4:09:b1:31:db:83:
fe:0c:42:18:8e:62:dd:6e:c9:43:02:97:07:4a:1e:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:9B:3B:BA:A7:54:D6:1E:DB:93:A8:4B:86:2B:85:89:92:46:0F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1E6bO7qnVNYe25OoS4YrhYmSRg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:77:d9:79:6a:cf:1a:55:2d:fa:c7:96:2e:d3:50:79:b8:5c:
aa:85:34:9c:8c:f3:7e:a9:8d:3b:cf:d4:7f:fa:37:42:69:7f:
de:72:d9:e5:10:e1:18:e6:68:01:58:7c:0f:c9:f4:1d:61:cb:
41:81:8a:74:d4:75:84:90:03:0a:85:10:6d:b2:c8:19:54:1f:
e8:13:ca:96:c5:88:f7:3c:38:85:b5:ba:38:eb:90:75:6f:9f:
1b:25:55:66:bb:48:3f:65:3d:45:5a:bf:96:91:36:74:f3:ca:
0c:e8:6b:7e:74:54:93:a1:8e:50:23:aa:6a:e1:87:86:03:f4:
77:5e:3e:ba:97:ae:5d:55:52:5c:a5:c8:ea:59:60:62:b7:c9:
62:ee:08:48:10:5a:61:a5:d3:42:8e:be:f4:1f:36:e6:c5:69:
da:47:a7:7d:3e:5e:91:35:1c:9f:d1:b2:09:c4:fd:6d:f2:05:
b4:28:29:10:1b:66:79:3c:3b:5c:1a:f4:d7:37:2f:dd:7c:86:
bc:e7:23:9d:2c:eb:0e:e4:42:9b:e1:7f:0a:f6:91:b5:71:25:
e1:9e:95:69:01:21:3e:d8:7d:3b:11:df:a7:0c:fb:6d:a8:14:
0e:02:3f:eb:9b:47:cd:6d:a6:ee:e1:ec:19:18:44:86:a1:40:
a8:17:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:44 2025 by rpki-client