Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1vbt4a_xgaAjVhTVr6NvpTXZmvE.roa
File: 1vbt4a_xgaAjVhTVr6NvpTXZmvE.roa (raw, json)
Hash identifier: dFO4uDDbAPAODwTyA5Ifki8wHsmFxrWnM85ROxXVtuE=
Subject key identifier: D6:F6:ED:E1:AF:F1:81:A0:23:56:14:D5:AF:A3:6F:A5:35:D9:9A:F1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A916F12EB9DA26A1DC5F5EAA8F4BFE9A3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1vbt4a_xgaAjVhTVr6NvpTXZmvE.roa
Signing time: Thu 14 Sep 2023 02:04:50 +0000
ROA not before: Thu 14 Sep 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:916e:7285/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:6f:12:eb:9d:a2:6a:1d:c5:f5:ea:a8:f4:bf:e9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f6ede1aff181a0235614d5afa36fa535d99af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:7e:1c:6b:d7:07:a7:7f:ff:59:e2:96:52:
c4:e4:e6:41:d2:52:56:ec:21:fa:89:af:8f:37:a7:
4b:a9:31:14:bd:3f:e0:c3:6c:43:25:ec:ca:5e:69:
de:dd:9d:ee:e8:fc:9b:c6:f3:ba:70:b2:f8:b7:c7:
85:49:89:45:28:f2:4e:4b:c6:24:5d:41:a0:70:ad:
61:38:78:c3:75:a4:5e:92:6b:79:a1:49:f6:81:38:
2b:8b:0b:92:77:94:74:b9:06:fe:04:cf:4b:d7:99:
0a:d7:2c:2b:28:61:23:e8:47:c8:04:fe:28:f9:72:
da:c2:c5:9c:a9:27:c0:6f:b9:5b:87:82:48:8d:cf:
50:ce:af:a3:97:01:69:04:eb:e5:43:17:1e:01:16:
ee:1c:f5:3e:37:f8:e6:b8:e4:25:21:66:4f:3b:f6:
57:2d:ac:d0:c0:09:f6:a6:41:46:32:d5:16:80:ba:
fb:72:52:95:32:0b:b8:e6:c8:df:c0:d9:76:9c:bb:
d8:de:82:d7:fb:2e:7e:ef:f4:9e:cf:be:11:17:d0:
85:b6:ac:a6:bf:c0:e2:3a:63:bf:48:e6:cc:7c:03:
ba:ac:92:5a:01:1b:5a:7a:ed:a1:84:13:5d:9d:65:
e2:14:5b:cf:c2:10:1c:e1:b9:b6:30:f4:93:fb:73:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:ED:E1:AF:F1:81:A0:23:56:14:D5:AF:A3:6F:A5:35:D9:9A:F1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1vbt4a_xgaAjVhTVr6NvpTXZmvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:83:23:de:88:fa:9c:88:24:e0:c8:ae:86:1a:ea:bb:c5:23:
33:43:d2:48:48:03:c0:e4:72:d8:83:6c:dd:16:ed:95:0d:f8:
db:3d:a4:d2:ab:5a:81:ba:d0:26:61:50:6f:b9:48:4d:19:a0:
d9:72:50:e3:72:37:46:48:b9:85:c4:19:0f:d6:d9:c4:3c:09:
18:cd:65:e8:1c:c1:a1:b6:86:d0:f2:a8:35:34:ab:00:f9:9b:
61:22:ba:cc:da:1e:3e:5f:46:2e:49:18:f3:6e:e4:39:bb:3c:
b2:19:44:47:c1:a2:04:1d:b9:54:87:36:64:68:27:ac:52:52:
b7:84:26:33:69:a7:fc:ac:9f:3c:ab:94:72:da:0d:37:b7:5a:
c4:03:c0:27:cf:e9:1c:83:16:81:54:f9:7e:e8:9a:38:0d:e3:
72:5e:4d:9e:19:31:6d:dd:e6:25:48:13:31:ae:46:32:a3:03:
a7:9e:aa:6c:93:74:e6:27:c3:68:51:fb:e0:4f:eb:cc:b0:2d:
48:3d:22:57:cf:04:7a:9f:be:75:70:bd:00:15:39:50:85:36:
d6:f5:bc:61:cb:40:df:6c:5c:bf:be:00:58:ab:e8:63:58:bd:
30:57:ca:3a:26:26:79:9c:86:1c:a6:49:98:f1:fc:57:e7:1c:
9e:ec:81:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqRbxLrnaJqHcX16qj0v+mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDIwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY2ZWRlMWFmZjE4MWEwMjM1NjE0ZDVhZmEzNmZhNTM1ZDk5YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Z+HGvXB6d//1nillLE5OZB0lJW
7CH6ia+PN6dLqTEUvT/gw2xDJezKXmne3Z3u6PybxvO6cLL4t8eFSYlFKPJOS8Yk
XUGgcK1hOHjDdaRekmt5oUn2gTgriwuSd5R0uQb+BM9L15kK1ywrKGEj6EfIBP4o
+XLawsWcqSfAb7lbh4JIjc9Qzq+jlwFpBOvlQxceARbuHPU+N/jmuOQlIWZPO/ZX
LazQwAn2pkFGMtUWgLr7clKVMgu45sjfwNl2nLvY3oLX+y5+7/Sez74RF9CFtqym
v8DiOmO/SObMfAO6rJJaARtaeu2hhBNdnWXiFFvPwhAc4bm2MPST+3PkFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNb27eGv8YGgI1YU1a+jb6U12ZrxMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMXZidDRhX3hnYUFqVmhUVnI2TnZwVFhabXZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJyDI96I+pyIJODIroYa
6rvFIzND0khIA8DkctiDbN0W7ZUN+Ns9pNKrWoG60CZhUG+5SE0ZoNlyUONyN0ZI
uYXEGQ/W2cQ8CRjNZegcwaG2htDyqDU0qwD5m2EiuszaHj5fRi5JGPNu5Dm7PLIZ
REfBogQduVSHNmRoJ6xSUreEJjNpp/ysnzyrlHLaDTe3WsQDwCfP6RyDFoFU+X7o
mjgN43JeTZ4ZMW3d5iVIEzGuRjKjA6eeqmyTdOYnw2hR++BP68ywLUg9IlfPBHqf
vnVwvQAVOVCFNtb1vGHLQN9sXL++AFir6GNYvTBXyjomJnmchhymSZjx/FfnHJ7s
gek=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:52 2025 by rpki-client