Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3uNimt-wOMBZmcdFNbIdd-dOKvI.roa
File: 3uNimt-wOMBZmcdFNbIdd-dOKvI.roa (raw, json)
Hash identifier: a8BDgWou7sS+GjxuFvQeBXRTLrKDisC/QsDk7W+HTyA=
Subject key identifier: DE:E3:62:9A:DF:B0:38:C0:59:99:C7:45:35:B2:1D:77:E7:4E:2A:F2
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA33E6710339DBC53DE0AAB47165DE97E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3uNimt-wOMBZmcdFNbIdd-dOKvI.roa
Signing time: Sun 17 Sep 2023 13:04:50 +0000
ROA not before: Sun 17 Sep 2023 13:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:a33d:d1db/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:3e:67:10:33:9d:bc:53:de:0a:ab:47:16:5d:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 13:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dee3629adfb038c05999c74535b21d77e74e2af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:24:58:06:e7:df:0c:24:9a:ef:7c:7e:6a:
24:28:a6:c4:55:86:98:a7:77:a6:28:a4:13:3e:7b:
57:30:aa:92:dc:c9:ff:72:3a:54:58:96:d2:18:66:
4d:17:43:48:9e:8d:3e:13:0d:5e:34:64:5d:b3:8d:
2f:7a:c3:7a:50:a7:c0:dd:f9:6e:64:2c:d1:7f:54:
8b:a4:eb:58:98:32:24:07:3a:53:d1:63:0e:fd:1f:
95:99:6e:71:87:e3:63:6c:9b:b1:c4:d4:05:10:d2:
0e:25:7d:e7:97:9d:46:24:32:8c:59:8d:e1:8e:d9:
17:ef:c6:35:56:f5:b9:4d:5e:bb:80:70:8f:bf:41:
d6:17:8a:67:95:f8:7d:0f:f2:bd:01:1d:cc:ad:74:
f9:cc:79:68:13:29:c3:9d:ac:6b:4f:98:60:e1:46:
70:37:77:de:de:bd:c6:96:0b:4b:f2:66:38:ed:f2:
7c:51:56:91:6e:7b:91:73:d6:22:bb:04:3a:0f:60:
66:52:e4:4e:98:dc:83:ba:3f:c5:2f:ff:66:b8:a4:
68:76:91:74:1e:cd:5a:ad:d2:a3:4f:23:34:f7:2a:
8d:cf:2a:d4:ac:03:ce:d8:8d:09:8d:d7:18:d2:11:
78:a4:83:5c:81:e1:f5:43:0c:92:72:12:3f:0a:97:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:62:9A:DF:B0:38:C0:59:99:C7:45:35:B2:1D:77:E7:4E:2A:F2
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3uNimt-wOMBZmcdFNbIdd-dOKvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ee:2c:cf:95:12:0a:df:04:26:8a:46:5c:20:d4:79:03:f2:
75:dc:a1:6a:3c:2e:0f:f1:9c:7c:91:19:d2:47:10:b8:d5:fb:
d8:6b:f7:d2:1f:40:78:f3:3a:d8:5d:5e:5c:47:e9:7a:a5:34:
14:f3:14:81:05:65:3e:7f:b4:c5:f2:95:d6:43:d4:ae:cb:2d:
a5:fc:0e:11:3e:44:0a:41:34:f8:4a:9e:a1:5d:43:aa:25:2f:
00:30:25:a7:81:3a:29:55:36:bf:c5:33:3b:8b:f5:01:73:dc:
7c:ef:cc:da:b6:0f:80:75:b4:38:40:03:de:f3:ec:99:d9:7d:
b4:60:81:13:c8:4f:02:77:c7:48:cd:22:2d:34:e2:d3:89:fa:
ca:fc:83:7a:22:23:7f:43:16:9a:29:da:48:ec:c7:9d:ac:44:
e5:a6:db:6b:a4:a6:8c:17:0b:19:2f:bc:a8:ca:7a:4f:84:59:
01:73:2e:bf:b7:b3:1e:6c:0b:b9:bf:8a:5f:af:8e:87:3e:ab:
ef:9c:c3:ca:7e:33:06:f1:cd:10:8c:2a:a2:0f:db:58:64:8a:
c4:2c:48:6a:10:c0:8c:e3:74:0d:58:04:80:27:ad:a0:ab:23:
1f:17:9c:8b:f6:8f:3f:7e:92:db:c9:ff:43:e6:6f:0d:31:4d:
b8:da:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:57:27 2025 by rpki-client