Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5ZAbi5SXNsSt1TbBh-oSXoEttQA.roa
File: 5ZAbi5SXNsSt1TbBh-oSXoEttQA.roa (raw, json)
Hash identifier: qoiEvvdcbB1lKTnFINZBdLV5b3YPEeGv6PUvv2pNExM=
Subject key identifier: E5:90:1B:8B:94:97:36:C4:AD:D5:36:C1:87:EA:12:5E:81:2D:B5:00
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A796F009BB1D4E38AF2AF30B276F1F514
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5ZAbi5SXNsSt1TbBh-oSXoEttQA.roa
Signing time: Sat 09 Sep 2023 10:13:52 +0000
ROA not before: Sat 09 Sep 2023 10:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:6f:00:9b:b1:d4:e3:8a:f2:af:30:b2:76:f1:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 10:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5901b8b949736c4add536c187ea125e812db500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:16:b7:cf:be:aa:35:09:e7:8f:1b:94:fb:
fb:e6:f1:21:58:9f:5d:83:8a:e6:ee:c9:47:c3:32:
de:dd:b6:8b:05:1a:d0:67:6e:0f:4a:67:c9:57:dd:
20:74:48:80:c8:60:be:38:fb:9c:3f:55:13:04:41:
c8:0d:96:c2:d0:a1:ca:bf:cc:21:3b:70:e3:49:c5:
54:1e:5f:3f:0e:11:16:c7:99:2b:3b:1c:93:37:43:
19:2f:74:89:56:ed:16:e3:a4:a1:64:e1:a3:21:eb:
39:f4:52:79:a1:00:30:27:57:65:01:67:ab:29:93:
a3:5f:cd:b0:0a:b9:5b:c7:b5:53:3d:a7:7c:78:c2:
43:c9:79:13:7c:15:62:c6:3d:2b:01:72:c4:30:e2:
93:1b:93:8e:a3:f9:02:56:60:14:c8:5f:cb:b4:28:
1b:64:4b:f0:c0:0c:d8:a7:31:9e:33:98:11:e5:7c:
ac:34:8b:6c:b7:64:05:cc:83:b2:0f:f7:fb:08:6d:
c5:3e:ef:b4:ce:f1:b2:7f:8c:75:83:16:69:bf:d5:
65:b0:b1:1a:cc:fd:6a:2e:d9:14:e0:6b:5c:c5:26:
04:e9:47:11:e4:65:db:f0:f4:2a:4e:1c:f1:11:41:
cb:2b:11:be:ee:55:30:46:ab:8d:12:d5:f0:40:30:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:1B:8B:94:97:36:C4:AD:D5:36:C1:87:EA:12:5E:81:2D:B5:00
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/5ZAbi5SXNsSt1TbBh-oSXoEttQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:25:8a:c9:5a:2f:23:f8:35:a6:dc:e0:28:7f:4d:6e:cd:90:
3c:16:e0:ee:3e:e9:ef:21:ac:3c:54:44:aa:41:ef:ff:91:bc:
e0:e9:0d:a0:a9:04:82:81:0d:28:9b:83:ff:e6:24:4b:b8:58:
64:3b:6a:76:d8:55:48:06:1b:4e:0c:2b:9e:43:58:47:fb:4a:
e5:6c:52:b2:e8:31:dc:a7:bf:e7:30:e5:2c:65:61:13:a1:4c:
23:97:e2:93:a1:02:45:3c:39:6f:52:97:5a:c9:c7:98:69:91:
38:93:a4:8f:00:65:52:83:f8:ce:76:5b:37:27:3c:34:ce:21:
4d:dd:37:53:c3:ee:59:90:43:b2:5c:47:c1:38:46:42:f0:65:
91:54:46:df:84:11:9c:d7:34:bd:b0:78:cf:33:72:86:3b:68:
60:a7:92:64:d4:59:16:e6:ec:c9:e2:4c:ad:3d:1c:90:72:2f:
16:da:de:a4:57:45:c1:17:6f:20:2d:11:3d:a9:18:04:f7:88:
1f:84:c7:9b:99:a1:0d:c9:45:04:a1:c5:d3:f3:8b:5d:57:d0:
f6:f9:42:11:b5:31:3a:43:47:2a:a0:1b:da:32:12:53:ac:2a:
ee:98:0a:0e:bd:09:ed:4a:13:f9:93:fc:ad:e9:c6:46:70:c1:
e9:90:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:25 2025 by rpki-client