Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4UobCCpkjUJxo9isDLvN3zizAow.roa
File: 4UobCCpkjUJxo9isDLvN3zizAow.roa (raw, json)
Hash identifier: +k44TOs8R7/5UHy8k5THUZn3VtJTMNZST02yb5CBDag=
Subject key identifier: E1:4A:1B:08:2A:64:8D:42:71:A3:D8:AC:0C:BB:CD:DF:38:B3:02:8C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5A20A8F43AD48778C66477F6CB2208B4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4UobCCpkjUJxo9isDLvN3zizAow.roa
Signing time: Sun 03 Sep 2023 08:20:04 +0000
ROA not before: Sun 03 Sep 2023 08:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:20:a8:f4:3a:d4:87:78:c6:64:77:f6:cb:22:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 08:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e14a1b082a648d4271a3d8ac0cbbcddf38b3028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:86:cb:16:5f:ad:62:f0:31:3a:d1:a2:ba:
96:38:b1:21:20:42:b4:4c:24:8a:0d:fd:74:5c:41:
44:84:64:e7:e0:64:0f:68:68:a6:8a:ea:75:f5:6e:
67:39:0e:9f:5a:38:29:3c:fb:b0:57:b2:7c:02:07:
8c:b8:fe:d0:16:e6:ad:19:56:f9:96:ce:ab:1f:6e:
cc:f4:9f:75:1f:00:00:f1:9c:d2:68:5d:de:5d:bf:
ff:14:3e:7f:d9:55:05:5a:ce:1a:11:b6:86:13:eb:
2f:a9:ab:35:4f:01:82:83:ff:d9:b5:5c:ab:81:c8:
bd:8e:50:f8:c8:cc:8e:e5:c7:e4:2c:2e:4d:20:2f:
48:ed:c7:d7:71:85:a5:bd:80:af:a6:1d:ba:ab:1e:
75:d5:d8:66:10:89:aa:aa:29:19:7e:7a:e1:c8:27:
6f:5d:3a:2d:84:f9:8f:0d:1c:17:6f:b2:83:92:06:
8d:f2:94:57:69:11:2c:22:64:8f:89:fe:2e:86:8e:
c5:b4:55:db:04:55:fe:6e:e4:a3:72:0d:9a:f0:19:
c0:3b:ca:01:56:c5:cf:61:55:c9:72:08:fa:86:8b:
4e:ce:bd:05:66:34:82:8f:fd:23:ed:26:e5:be:67:
8b:e3:bd:fc:35:5b:a7:7f:bc:82:e2:d7:c3:86:0c:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:1B:08:2A:64:8D:42:71:A3:D8:AC:0C:BB:CD:DF:38:B3:02:8C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4UobCCpkjUJxo9isDLvN3zizAow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:33:f5:9b:3e:ce:6e:cd:8f:03:ce:00:b3:81:68:d2:d0:7e:
88:3f:50:40:5f:56:d7:d5:9e:92:69:54:a4:d3:1a:bc:ce:ba:
48:70:7d:d4:20:7e:eb:d9:90:70:7c:54:2e:4d:32:57:aa:14:
e0:ab:a3:84:58:41:47:51:2b:3e:d5:61:ae:32:03:af:f7:3b:
7f:79:c5:45:bf:1a:73:47:12:b5:a6:0e:cf:06:63:d3:41:26:
65:1b:be:ca:9b:28:71:fd:fe:66:9a:70:73:97:6b:ea:04:3e:
70:65:bf:72:b1:10:32:4c:82:61:a7:d1:1e:4a:ab:db:47:c6:
f2:15:fd:e7:e4:b0:99:a8:83:28:74:ab:48:ff:7c:e3:5b:cc:
ed:7a:38:b3:58:78:e9:5d:9b:73:88:99:71:e0:66:ec:da:37:
55:2a:ef:21:a2:8a:26:75:3b:6e:dd:f6:68:3d:2e:db:ee:c2:
e1:6c:81:15:63:f3:d7:b7:fb:a6:dd:a5:88:fa:08:6b:fd:25:
e4:ae:15:b9:0c:fc:fb:72:aa:e5:76:fc:ad:ab:57:c2:38:e7:
9f:6f:ce:fb:7e:ba:5c:df:45:77:64:7a:9d:8e:44:60:ee:7c:
3e:51:5e:1a:97:37:6c:22:e1:ab:00:0b:84:7a:3f:b3:b9:9f:
44:99:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:08 2025 by rpki-client