Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/57M6Exnv_IIRqMDqRq-Sqn2VQds.roa
File: 57M6Exnv_IIRqMDqRq-Sqn2VQds.roa (raw, json)
Hash identifier: qzFR3l6xfBw7bfN1IXDznVkxbwQbtIitoAFhFl83xyo=
Subject key identifier: E7:B3:3A:13:19:EF:FC:82:11:A8:C0:EA:46:AF:92:AA:7D:95:41:DB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A49FB0E0BF038DA8ECEE4AB16E260108C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/57M6Exnv_IIRqMDqRq-Sqn2VQds.roa
Signing time: Thu 31 Aug 2023 05:05:04 +0000
ROA not before: Thu 31 Aug 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:49fa:7c4f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:fb:0e:0b:f0:38:da:8e:ce:e4:ab:16:e2:60:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b33a1319effc8211a8c0ea46af92aa7d9541db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:d6:c2:d8:2b:8b:b9:a3:28:50:79:26:5a:
f1:98:3b:da:1b:90:a9:c8:b4:e9:03:f4:69:4f:71:
9a:65:74:34:71:3d:31:23:21:2b:e9:92:38:65:23:
cc:4d:d6:a3:0b:12:6d:98:ea:8b:8d:d6:0b:d2:a7:
76:5f:17:c5:ef:59:99:e9:7f:44:71:c7:c0:20:ab:
16:84:37:1e:6a:1d:b4:5f:cc:68:06:2b:66:a5:8e:
1b:b6:fa:47:a8:c2:6b:05:59:e7:01:d4:5b:ab:73:
e7:16:47:3d:0a:5d:71:d7:ac:e3:1b:96:df:72:44:
eb:61:d0:b3:0e:55:82:62:d7:05:26:cb:5b:43:09:
06:4a:27:eb:31:ac:05:4e:e0:7a:89:39:83:0d:e7:
87:3e:41:c5:ff:e6:03:9a:b4:59:de:3b:c6:d9:c8:
1a:ff:d8:7f:f8:a8:11:dc:cf:90:57:a6:bc:ca:58:
dd:19:77:9c:07:cb:42:96:71:6a:24:80:9d:7e:ca:
26:59:20:56:19:3d:6d:fe:06:1b:39:2b:de:25:38:
c1:d0:1a:d6:01:97:30:85:37:b9:6b:a9:67:78:d1:
26:38:13:d2:08:68:c8:9c:41:59:da:20:60:ae:a3:
40:a6:6f:15:67:54:57:81:9f:6f:24:78:7c:69:73:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:3A:13:19:EF:FC:82:11:A8:C0:EA:46:AF:92:AA:7D:95:41:DB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/57M6Exnv_IIRqMDqRq-Sqn2VQds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:b4:7b:80:12:20:6a:37:7f:72:a3:7f:e5:68:1f:ca:30:8d:
4f:d7:6e:9b:ad:0b:6a:be:1f:9f:d5:bb:fa:b5:fd:1e:82:e3:
14:be:4f:a0:35:ec:60:12:41:8e:bb:9b:41:e4:41:ed:40:7a:
f7:d2:35:10:6d:c6:84:8a:74:b3:fd:cb:fe:8d:9d:4e:72:ed:
7f:b1:5b:6c:72:e4:ad:23:eb:55:65:a9:61:d6:a6:2b:00:47:
40:b1:68:c3:d7:81:98:b7:26:fd:99:13:3c:62:52:3c:16:31:
42:48:48:e9:7c:27:62:6b:e8:ce:09:54:71:f6:96:38:86:bf:
1e:a4:66:b5:fc:bb:d5:98:40:4a:64:d5:95:6e:71:e9:11:84:
70:5c:a5:77:12:f2:cf:69:fa:f2:66:1e:02:69:91:b8:bd:3d:
66:e1:fa:3f:e9:9f:54:af:48:47:30:c9:27:f8:34:cc:ab:09:
cd:4c:0d:d4:97:b5:43:ca:3a:fc:95:55:b2:be:55:61:94:a0:
29:f2:3e:69:7a:d1:09:62:83:6c:59:b2:46:27:6d:02:9f:f7:
cb:cd:c2:70:70:15:6e:17:54:81:1d:8f:50:2d:fa:86:3f:f7:
db:66:0e:93:ce:32:55:77:c7:ba:6b:2d:15:9c:ef:3b:96:2e:
87:1d:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:29 2025 by rpki-client