Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/58ie3K_kjnqQQjXBDs9qZzPKcs8.roa
File: 58ie3K_kjnqQQjXBDs9qZzPKcs8.roa (raw, json)
Hash identifier: QeJX9ORvCXu3hqbUWAgVNGfMnxWwYxOYlD9rR6Mv6qM=
Subject key identifier: E7:C8:9E:DC:AF:E4:8E:7A:90:42:35:C1:0E:CF:6A:67:33:CA:72:CF
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A650D57EC58AA434782F0EB8B47BF1310
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/58ie3K_kjnqQQjXBDs9qZzPKcs8.roa
Signing time: Tue 05 Sep 2023 11:14:47 +0000
ROA not before: Tue 05 Sep 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:0d:57:ec:58:aa:43:47:82:f0:eb:8b:47:bf:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c89edcafe48e7a904235c10ecf6a6733ca72cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:92:9e:d4:e7:66:b3:4d:57:2c:b3:ae:7c:
9c:33:b7:3c:5e:db:eb:a6:5e:91:af:48:90:2a:64:
bd:18:1b:0d:e0:72:77:1a:0e:e7:63:f3:f5:e6:65:
08:94:f9:a4:73:29:eb:02:ca:78:a2:09:4a:ab:cf:
7d:ce:b2:11:f3:36:6d:b0:c9:88:22:4f:22:fb:02:
92:5e:ba:25:30:8c:3a:76:07:4c:6a:f9:1e:6e:e0:
e7:58:7c:68:87:88:e6:28:c1:5f:79:97:57:d7:0b:
03:73:2d:56:d8:83:f5:36:bb:56:bb:b1:63:f1:03:
b8:a3:e0:bc:57:16:cf:f9:75:75:f8:5f:ad:35:e4:
25:ff:8e:df:9c:5d:7d:b4:cd:65:1e:66:a0:e1:96:
37:86:c5:36:0e:a1:af:c9:6b:70:27:db:a7:1e:d5:
69:c0:ba:9b:6c:02:fc:9a:85:dd:fd:31:49:19:5c:
3f:96:37:51:c3:d6:41:00:f8:fe:1d:72:ba:b8:a6:
fc:72:29:37:87:b0:b9:a2:8a:19:cc:f8:61:c7:03:
e2:c2:aa:1f:9c:52:03:d8:65:8f:cc:9c:ba:76:7e:
79:00:fe:a0:a9:40:eb:e7:bd:15:48:d7:00:d1:3d:
ab:f6:28:b1:f6:97:4c:97:0d:a5:56:74:d5:c1:fe:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:9E:DC:AF:E4:8E:7A:90:42:35:C1:0E:CF:6A:67:33:CA:72:CF
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/58ie3K_kjnqQQjXBDs9qZzPKcs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:b9:05:50:9b:b3:9c:b6:60:87:3d:53:46:0c:75:3d:88:be:
fd:f4:df:17:70:78:87:0b:62:ab:f3:bd:cb:4b:a7:45:c9:65:
e9:3f:ce:59:89:a6:77:34:95:72:fb:6b:80:0b:37:84:c5:23:
f8:f0:25:fa:89:a0:f7:b6:ae:4e:10:f8:8a:c1:37:4d:e4:db:
86:73:e2:67:a7:20:08:69:8c:e8:24:55:ec:1f:77:7e:dd:a1:
cb:6b:e3:b2:55:dd:e6:e6:1b:f3:de:90:ee:74:ff:38:c7:54:
2d:d5:33:8a:a1:b3:63:6c:90:b6:7a:66:12:ee:61:c2:0c:41:
14:5c:bf:43:f8:1c:b9:2e:ec:60:af:ca:45:ca:e8:ae:75:67:
55:99:f1:58:33:3d:97:ab:b9:8e:a0:ac:80:12:87:7b:eb:54:
d4:10:ba:d9:cd:4a:07:3c:2f:d4:04:6c:5f:a5:5d:51:8c:09:
23:4f:da:0b:fe:11:46:2e:fa:09:cb:96:82:bf:ee:9d:06:a3:
82:49:56:4f:66:94:bb:97:3c:3d:c8:8e:d5:76:ee:ac:22:3d:
61:e9:0d:cf:61:1a:1e:ad:b6:54:56:bc:99:9b:ba:93:b7:89:
a3:fa:ea:3a:d2:7c:eb:36:ab:fd:91:0d:77:21:9a:89:05:46:
42:54:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:59 2025 by rpki-client