Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/60_EDf1UqPESm5jcLNmnaGQ_UIo.roa
File: 60_EDf1UqPESm5jcLNmnaGQ_UIo.roa (raw, json)
Hash identifier: tzBN/DPr8ownXIJkeTnUgzW5PB1oEDmORIMApZCYXAs=
Subject key identifier: EB:4F:C4:0D:FD:54:A8:F1:12:9B:98:DC:2C:D9:A7:68:64:3F:50:8A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A717DA58146120F66B06BA02AD024C83F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/60_EDf1UqPESm5jcLNmnaGQ_UIo.roa
Signing time: Thu 07 Sep 2023 21:12:54 +0000
ROA not before: Thu 07 Sep 2023 21:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:71:7d:a5:81:46:12:0f:66:b0:6b:a0:2a:d0:24:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 21:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb4fc40dfd54a8f1129b98dc2cd9a768643f508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:28:6c:f6:2b:ad:40:15:8b:49:df:fa:60:
ed:5f:89:9e:a5:f4:52:dd:87:68:93:44:76:91:9f:
e3:0f:56:ba:ed:fe:75:9a:7a:40:96:ff:ab:a4:1b:
7c:12:59:b5:93:13:fc:4e:d2:b0:81:10:38:9b:61:
b4:05:0c:af:f1:3b:a0:a1:7a:59:ac:9f:95:7b:a5:
b3:7e:3e:47:82:c0:21:64:ff:44:fb:f1:04:85:8a:
9a:5c:a3:80:93:37:94:9f:c8:6d:fd:1e:67:64:f6:
f3:82:5c:00:16:27:59:b1:54:11:ea:b7:d6:5c:5d:
8a:b4:c4:ec:e4:f5:37:fe:a2:6e:3d:66:32:b9:c5:
9e:b4:32:e3:74:79:dd:00:b3:c1:7c:78:7e:49:23:
7b:c0:b4:09:68:5c:2b:43:e9:ea:6a:27:06:b7:b8:
c6:8d:8a:c5:06:88:20:1e:a4:f2:3a:a4:2b:43:8c:
45:9a:56:bd:36:a8:24:35:6d:b1:60:11:a0:e8:28:
63:73:60:8d:e0:76:f0:f1:18:3d:8e:ca:fa:7c:47:
a6:64:e9:90:de:16:65:11:eb:8c:d5:a7:ca:0c:82:
b8:c3:48:0d:ea:db:28:9b:ba:8d:1b:da:44:1c:43:
a8:2d:9a:25:e4:9d:9d:2f:9d:64:eb:09:a7:51:44:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:C4:0D:FD:54:A8:F1:12:9B:98:DC:2C:D9:A7:68:64:3F:50:8A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/60_EDf1UqPESm5jcLNmnaGQ_UIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:5a:6b:1a:12:f5:81:3c:cc:4c:6c:c7:7e:2c:af:9d:10:d3:
77:32:87:31:ed:b3:62:c1:5c:07:b2:1a:17:7a:20:a9:ed:01:
5b:85:c9:d8:69:00:69:22:6a:1d:11:26:04:4b:73:03:42:c3:
4f:cc:31:2f:4c:48:19:ea:35:52:5f:0d:3f:3d:3e:b0:7e:29:
a2:0f:e4:f9:64:41:5e:dc:83:48:a2:45:7f:ed:ed:75:0b:ef:
3b:4a:27:ff:45:f1:b6:60:34:dc:7d:ee:2c:7d:3e:3d:f3:33:
49:0c:bd:76:80:bf:b1:e2:ba:f6:b4:4d:f5:d5:72:b0:81:6d:
92:9b:b7:76:84:41:34:ed:a2:f4:6a:84:36:73:76:7e:e9:0c:
ba:35:b3:1d:4d:5a:99:83:3b:7c:4e:b0:16:5b:48:5b:14:45:
9b:e7:ad:1d:c3:38:c1:79:25:fa:b0:3d:31:db:98:e2:03:fe:
e1:95:9a:0d:2d:32:3e:3e:96:2d:b4:c9:a0:53:c2:45:54:99:
e7:69:63:5a:6f:c0:bf:64:92:6a:09:fa:b2:24:cd:b8:a0:ce:
64:8f:b1:b2:36:6a:25:32:2e:bb:0b:73:01:4d:9f:2d:04:55:
85:40:84:a0:55:b1:ae:30:f6:8b:45:8d:15:24:d7:bb:6b:d1:
7b:14:86:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpxfaWBRhIPZrBroCrQJMg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA3MjExMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjRmYzQwZGZkNTRhOGYxMTI5Yjk4ZGMyY2Q5YTc2ODY0M2Y1MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcoobPYrrUAVi0nf+mDtX4mepfRS
3Ydok0R2kZ/jD1a67f51mnpAlv+rpBt8Elm1kxP8TtKwgRA4m2G0BQyv8TugoXpZ
rJ+Ve6Wzfj5HgsAhZP9E+/EEhYqaXKOAkzeUn8ht/R5nZPbzglwAFidZsVQR6rfW
XF2KtMTs5PU3/qJuPWYyucWetDLjdHndALPBfHh+SSN7wLQJaFwrQ+nqaicGt7jG
jYrFBoggHqTyOqQrQ4xFmla9NqgkNW2xYBGg6Chjc2CN4Hbw8Rg9jsr6fEemZOmQ
3hZlEeuM1afKDIK4w0gN6tsom7qNG9pEHEOoLZol5J2dL51k6wmnUUQunwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOtPxA39VKjxEpuY3CzZp2hkP1CKMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvNjBfRURmMVVxUEVTbTVqY0xObW5hR1FfVUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFRaaxoS9YE8zExsx34s
r50Q03cyhzHts2LBXAeyGhd6IKntAVuFydhpAGkiah0RJgRLcwNCw0/MMS9MSBnq
NVJfDT89PrB+KaIP5PlkQV7cg0iiRX/t7XUL7ztKJ/9F8bZgNNx97ix9Pj3zM0kM
vXaAv7Hiuva0TfXVcrCBbZKbt3aEQTTtovRqhDZzdn7pDLo1sx1NWpmDO3xOsBZb
SFsURZvnrR3DOMF5JfqwPTHbmOID/uGVmg0tMj4+li20yaBTwkVUmedpY1pvwL9k
kmoJ+rIkzbigzmSPsbI2aiUyLrsLcwFNny0EVYVAhKBVsa4w9otFjRUk17tr0XsU
hkw=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:36 2025 by rpki-client