Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3EII6S5D67hcjAK5rbygmrdgl6s.roa
File: 3EII6S5D67hcjAK5rbygmrdgl6s.roa (raw, json)
Hash identifier: DMwDfpkNwGgZnziz3J/STKqx+z14FHIsgP84ATGSvgI=
Subject key identifier: DC:42:08:E9:2E:43:EB:B8:5C:8C:02:B9:AD:BC:A0:9A:B7:60:97:AB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5789D21C8236EBD0F29BAB6E2D9BFBA0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3EII6S5D67hcjAK5rbygmrdgl6s.roa
Signing time: Sat 02 Sep 2023 20:16:04 +0000
ROA not before: Sat 02 Sep 2023 20:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:89:d2:1c:82:36:eb:d0:f2:9b:ab:6e:2d:9b:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 20:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc4208e92e43ebb85c8c02b9adbca09ab76097ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:d4:c1:60:f1:00:76:5b:eb:1a:53:18:fb:
a6:7e:e7:27:6d:d3:73:71:56:f7:3f:a4:f2:74:c4:
56:da:06:c7:d8:80:a3:0e:6f:06:a6:fc:cf:56:88:
47:e5:6b:46:de:99:4b:61:60:43:ae:99:09:37:ce:
e3:c8:0a:78:9f:a4:cd:c8:ba:fb:9a:2b:dc:70:50:
8d:f1:d7:4e:b6:39:2c:67:78:6b:98:f4:90:f2:f3:
41:8f:ed:0b:fc:69:3d:bd:26:ce:72:ce:7e:fd:fc:
a3:ce:7e:b5:fb:c0:58:0d:dc:31:ad:36:5e:d2:86:
d1:f5:a1:92:ab:d0:4b:40:56:a9:89:a1:4a:35:b2:
60:81:4c:29:ba:dd:04:22:4f:8f:30:dd:a6:e6:0e:
66:ef:59:aa:94:c5:5a:37:59:b7:1a:3d:ad:5f:4a:
a8:f7:bf:ae:d6:78:c0:18:41:5a:23:29:e2:64:d6:
90:37:d6:6e:d9:c9:5e:35:bc:fb:16:7c:c2:b4:d6:
38:ed:52:0a:49:d3:05:7f:02:3f:b3:00:55:84:4d:
cc:b2:23:a7:ee:95:97:66:b1:1e:f4:23:a8:ed:09:
04:3a:4f:63:e5:35:f6:a6:94:79:f4:6e:b7:45:5a:
fd:73:97:8a:17:f5:43:c6:5e:cc:83:c3:7b:ed:b0:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:08:E9:2E:43:EB:B8:5C:8C:02:B9:AD:BC:A0:9A:B7:60:97:AB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3EII6S5D67hcjAK5rbygmrdgl6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ec:6a:ad:8f:f9:10:29:04:e5:9d:d2:61:f3:f5:e4:35:cb:
1e:9a:b6:63:4f:87:62:a7:96:3d:fc:66:2c:05:96:91:85:db:
ee:c9:13:1e:1a:d6:3d:0b:e8:92:3e:c9:09:40:42:2b:76:d4:
4f:ac:2a:fc:0a:d1:52:75:a1:8d:fc:e1:66:d5:28:4a:70:81:
ab:e6:e4:5d:86:8b:ba:06:ca:92:83:30:e1:6a:19:30:a5:fa:
f2:97:56:cc:8a:b5:56:93:7e:54:25:4a:17:87:42:eb:dc:75:
0a:0b:11:5c:c8:8b:63:66:9f:6f:d6:34:75:c2:8d:49:0d:3f:
9d:68:6d:bd:45:4a:71:fc:8e:e3:cb:2a:7a:af:1e:17:b0:67:
29:73:0b:cf:5a:39:95:e2:b9:47:07:e1:3e:d7:0f:4f:e6:41:
cf:de:c7:76:e4:f6:f6:f4:4e:c0:8d:c1:1b:54:d2:22:1d:9a:
d4:6c:3b:29:90:21:8a:1b:17:a2:db:18:79:0f:fb:ff:31:a0:
a8:70:45:c0:19:1d:23:05:e8:7f:94:01:c7:a7:fd:50:28:0f:
0f:2f:56:57:d2:89:9c:28:f5:af:bb:2d:42:13:5b:8f:f7:24:
60:35:37:76:c0:55:fc:f8:4a:d7:e2:aa:b9:f8:83:38:db:45:
39:b4:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:46 2025 by rpki-client