Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/269t4j5jTKo1gj7EsrP9U30l8z8.roa
File: 269t4j5jTKo1gj7EsrP9U30l8z8.roa (raw, json)
Hash identifier: Lu8SEO44qqMmQNyi8K6il7Q9L6darBsL4PmzgHGjRCs=
Subject key identifier: DB:AF:6D:E2:3E:63:4C:AA:35:82:3E:C4:B2:B3:FD:53:7D:25:F3:3F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA8D9F32114CEFBF68A44C979A29C33AC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/269t4j5jTKo1gj7EsrP9U30l8z8.roa
Signing time: Mon 18 Sep 2023 15:12:50 +0000
ROA not before: Mon 18 Sep 2023 15:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:d9:f3:21:14:ce:fb:f6:8a:44:c9:79:a2:9c:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 15:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbaf6de23e634caa35823ec4b2b3fd537d25f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:54:04:77:28:7d:4c:a1:03:7f:a6:e5:32:
d3:7c:27:9a:02:79:8c:84:fb:f5:ed:33:da:57:b2:
c2:4d:97:fa:d0:18:55:04:ba:2b:06:e3:04:07:fb:
55:88:a6:2d:61:d1:19:35:27:82:d7:e7:04:5a:0c:
fd:98:8f:66:06:37:72:64:e2:6f:c9:45:2d:e9:a8:
dc:37:29:4f:29:4e:57:db:35:54:a9:61:95:68:1b:
f4:4c:37:e4:a3:39:f3:d0:e7:e8:8f:ea:88:df:44:
fb:26:ed:23:f2:8c:8a:ba:5b:58:79:20:5b:d6:82:
29:f0:2d:c9:41:3a:1f:29:37:51:37:e1:78:6b:48:
02:bc:1c:1f:c3:4f:58:a2:0a:b4:bc:a2:20:f8:52:
7f:53:03:ef:7a:31:13:84:22:33:24:87:19:d2:b0:
39:b0:ab:18:83:de:18:e4:70:b4:70:b2:f5:21:9c:
05:a2:5f:fd:0a:89:5d:eb:1f:12:9d:90:1c:00:b5:
e3:55:61:2d:da:c9:a0:a5:1e:ea:c1:60:a4:56:9a:
d2:d3:3b:39:1e:e1:5e:08:c7:48:8c:0f:70:08:45:
39:41:9c:f2:86:cd:6b:0d:3b:f5:ef:56:f3:8f:35:
3a:25:88:4a:d6:5a:96:50:a9:ea:cf:e6:9b:4a:77:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:6D:E2:3E:63:4C:AA:35:82:3E:C4:B2:B3:FD:53:7D:25:F3:3F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/269t4j5jTKo1gj7EsrP9U30l8z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:7d:5f:30:00:f7:4d:89:ea:14:57:a3:ce:54:87:ed:8c:dd:
12:ff:8c:cc:49:51:a5:67:55:e8:fb:13:79:71:5c:c7:7f:fe:
09:6a:d1:69:18:c7:eb:b4:5f:fa:42:1b:6f:c0:dc:69:72:f6:
d2:09:15:5e:32:67:14:9b:2e:80:dd:a3:bb:e8:cf:1f:26:8e:
60:57:36:0f:b5:a3:3c:08:a8:3e:c3:cc:f0:c2:63:53:88:57:
e9:a1:a3:b1:c4:2e:ca:32:0b:77:48:d7:70:9a:20:a0:52:19:
36:c5:cf:29:19:4f:68:94:31:dd:17:f9:27:a4:b5:a9:bf:c6:
cd:48:b6:48:75:63:3a:27:9b:ed:c1:bc:94:21:8e:54:f3:19:
f3:1e:e9:ad:df:76:cc:3d:01:3c:bc:1a:4f:ab:9a:3f:e4:6f:
a8:55:5b:e7:82:ff:42:16:6a:f7:05:7e:66:c2:35:96:30:a0:
70:d2:da:51:cd:2e:8e:ca:e5:97:8a:84:f4:65:5e:84:6e:31:
d6:c4:25:3c:1c:36:17:05:8b:0c:fa:0a:63:61:37:2a:10:7a:
e5:34:39:d3:bf:b6:a7:d1:49:51:b9:9d:7b:90:40:a1:e7:35:
79:73:f4:09:0d:c8:5b:47:59:ac:5b:e0:8d:07:b4:00:ed:85:
9a:16:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:44 2025 by rpki-client