Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2F1ZYXPWIcltrP7EQxXiPwdeycg.roa
File: 2F1ZYXPWIcltrP7EQxXiPwdeycg.roa (raw, json)
Hash identifier: srYJ9y9COSuWCSzTn5/w5Wb3zUdKc3NWUTkBKvmdb9Q=
Subject key identifier: D8:5D:59:61:73:D6:21:C9:6D:AC:FE:C4:43:15:E2:3F:07:5E:C9:C8
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5DC38C49A759A5C6407C31AC81687F07
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2F1ZYXPWIcltrP7EQxXiPwdeycg.roa
Signing time: Mon 04 Sep 2023 01:16:51 +0000
ROA not before: Mon 04 Sep 2023 01:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5d:c3:8c:49:a7:59:a5:c6:40:7c:31:ac:81:68:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 01:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d85d596173d621c96dacfec44315e23f075ec9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:c2:4f:bf:ff:81:4b:9f:d2:f1:e3:0d:b1:
9e:dc:e4:bf:75:d5:4a:e0:22:e7:e0:48:07:54:aa:
30:1b:ba:ca:ac:c9:42:65:ba:fa:cd:82:44:dd:9a:
1b:3f:ed:a9:9f:79:6e:95:97:79:63:2b:2e:9a:63:
cf:80:43:bf:f0:c3:c5:fb:d1:52:28:50:76:7a:a6:
ac:85:21:fa:36:5f:39:ec:4a:c3:3c:10:f8:8b:2e:
e4:de:7e:69:be:b6:f4:41:48:da:fa:84:8a:78:98:
ed:a2:5c:e5:ea:ce:2f:61:0a:5d:dc:0a:b1:bd:67:
0a:1c:c7:5e:0c:3d:de:20:16:a0:a6:67:84:bd:e0:
2c:56:2e:d5:69:67:16:01:a3:8b:19:fd:e2:5a:cd:
88:f2:03:27:a1:c5:aa:d2:a3:70:24:b9:f9:31:ba:
18:c6:41:7b:36:73:a6:32:77:53:c3:06:80:6a:e3:
b4:e5:c3:10:87:76:1f:0f:11:be:c9:a1:5f:44:ae:
20:ae:52:f2:d5:df:4f:a6:45:c2:3f:e6:5f:31:73:
8b:48:39:b4:1f:9b:85:d3:43:93:43:d1:79:79:44:
39:6f:ee:b3:73:3e:32:ab:a3:59:53:06:f2:56:24:
a0:61:07:1a:67:07:e1:1e:c0:6d:68:90:b5:2c:b9:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5D:59:61:73:D6:21:C9:6D:AC:FE:C4:43:15:E2:3F:07:5E:C9:C8
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2F1ZYXPWIcltrP7EQxXiPwdeycg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:64:a2:be:f5:a1:6f:35:bf:86:19:65:7d:04:3c:b8:04:47:
72:85:db:4a:ab:47:2a:f6:30:c3:56:b4:6c:d9:20:c2:b5:ef:
29:b2:63:f2:94:16:32:67:e8:87:ba:23:45:a0:8e:f2:95:da:
6b:78:94:b8:aa:67:31:08:ed:7b:8c:bd:e3:b5:09:b0:76:86:
f4:19:ca:25:82:8c:76:b0:48:df:99:f2:de:96:87:54:93:61:
8a:a1:bb:c9:04:3d:89:91:cd:87:e1:34:ee:67:d3:07:de:94:
f4:0e:e8:ee:49:d9:bb:60:48:2d:22:40:c6:b2:3c:2f:d7:a0:
88:10:e8:1f:e3:76:7f:cc:e2:dd:69:57:94:74:e1:3f:97:84:
fc:10:e7:6e:c7:6f:7d:9d:ad:51:75:11:a9:13:57:3d:28:f2:
c4:e8:41:5f:55:f1:0c:6b:be:61:37:db:d2:a3:df:e5:01:16:
e2:99:c3:85:67:3f:5f:1c:d3:f0:f1:e6:ca:a2:9e:36:91:d9:
5f:06:2b:34:82:62:b8:f0:90:38:6a:d9:68:79:0f:d3:69:8a:
9f:e9:0d:e9:bd:17:ae:3f:21:24:8d:2c:51:1f:20:cb:e5:05:
90:c1:03:d5:f9:05:28:fa:bb:ca:70:d1:1f:11:7b:29:da:b1:
f5:c6:1c:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpdw4xJp1mlxkB8MayBaH8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA0MDExNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODVkNTk2MTczZDYyMWM5NmRhY2ZlYzQ0MzE1ZTIzZjA3NWVjOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ7CT7//gUuf0vHjDbGe3OS/ddVK
4CLn4EgHVKowG7rKrMlCZbr6zYJE3ZobP+2pn3lulZd5YysummPPgEO/8MPF+9FS
KFB2eqashSH6Nl857ErDPBD4iy7k3n5pvrb0QUja+oSKeJjtolzl6s4vYQpd3Aqx
vWcKHMdeDD3eIBagpmeEveAsVi7VaWcWAaOLGf3iWs2I8gMnocWq0qNwJLn5MboY
xkF7NnOmMndTwwaAauO05cMQh3YfDxG+yaFfRK4grlLy1d9PpkXCP+ZfMXOLSDm0
H5uF00OTQ9F5eUQ5b+6zcz4yq6NZUwbyViSgYQcaZwfhHsBtaJC1LLm0rQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNhdWWFz1iHJbaz+xEMV4j8HXsnIMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMkYxWllYUFdJY2x0clA3RVF4WGlQd2RleWNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdkor71oW81v4YZZX0E
PLgER3KF20qrRyr2MMNWtGzZIMK17ymyY/KUFjJn6Ie6I0WgjvKV2mt4lLiqZzEI
7XuMveO1CbB2hvQZyiWCjHawSN+Z8t6Wh1STYYqhu8kEPYmRzYfhNO5n0wfelPQO
6O5J2btgSC0iQMayPC/XoIgQ6B/jdn/M4t1pV5R04T+XhPwQ527Hb32drVF1EakT
Vz0o8sToQV9V8QxrvmE329Kj3+UBFuKZw4VnP18c0/Dx5sqinjaR2V8GKzSCYrjw
kDhq2Wh5D9Npip/pDem9F64/ISSNLFEfIMvlBZDBA9X5BSj6u8pw0R8ReynasfXG
HP4=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:53 2025 by rpki-client