Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/65ynDJ9pPM7ZTH65fk-7uDH1DqY.roa
File: 65ynDJ9pPM7ZTH65fk-7uDH1DqY.roa (raw, json)
Hash identifier: /9P8rwOIO2jqineSYBZ+nmKwCefFNWWtD29RYA5Gi2A=
Subject key identifier: EB:9C:A7:0C:9F:69:3C:CE:D9:4C:7E:B9:7E:4F:BB:B8:31:F5:0E:A6
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A82D7C12C9A8A6EB4A52C05DDA7BA7950
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/65ynDJ9pPM7ZTH65fk-7uDH1DqY.roa
Signing time: Mon 11 Sep 2023 06:04:52 +0000
ROA not before: Mon 11 Sep 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:82d7:2b87/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:d7:c1:2c:9a:8a:6e:b4:a5:2c:05:dd:a7:ba:79:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb9ca70c9f693cced94c7eb97e4fbbb831f50ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:71:f1:f0:96:1e:d2:fa:de:c0:7b:47:7b:
f7:25:0d:44:ca:5f:46:76:74:cd:dd:06:76:10:6e:
76:28:6b:98:95:8e:b7:75:ff:3f:09:82:7f:7a:d8:
43:39:a3:95:d7:c2:33:bb:a9:1d:02:6b:07:51:8f:
e0:5a:45:6b:21:d9:7d:77:dd:a6:ef:f1:50:5f:e7:
71:ab:a4:99:e8:02:a1:89:3a:6b:32:de:c6:fb:43:
fb:c8:27:c9:bd:5b:46:4b:25:31:84:c1:bf:ca:7a:
f9:44:dd:1a:d2:fa:e9:d1:b6:18:ca:55:2e:a4:0a:
0a:08:bc:9e:7b:d1:02:e5:b6:92:61:13:d4:0c:1a:
df:e7:9d:fb:70:f1:77:cb:10:9c:bb:4f:46:a0:55:
a5:55:77:b9:0a:e7:bb:24:14:0b:a4:9f:6b:77:39:
42:3c:a1:72:38:49:b0:81:2d:69:7f:fc:3c:00:98:
e0:b7:4f:8c:a6:a2:5c:32:30:50:df:04:b7:17:bc:
b2:ba:32:fe:df:b9:ee:38:10:98:b6:89:a8:59:11:
48:ab:07:b2:3c:57:34:c2:78:ed:56:41:c5:7b:f9:
cc:7b:27:d0:08:4b:d9:f9:82:8b:9b:f1:7e:c5:94:
b0:fd:92:f1:33:0e:1b:43:94:05:ec:fb:59:66:b8:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:A7:0C:9F:69:3C:CE:D9:4C:7E:B9:7E:4F:BB:B8:31:F5:0E:A6
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/65ynDJ9pPM7ZTH65fk-7uDH1DqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:af:26:1a:7b:a6:9f:bc:22:fb:f6:53:13:eb:55:40:53:60:
a3:cc:9b:9f:8e:8b:aa:b3:9c:b7:9b:f6:72:cf:87:bb:6a:2f:
4e:04:4e:86:69:0c:aa:92:c5:c7:da:92:7b:e7:19:d0:77:09:
aa:3c:5c:af:a1:68:a3:16:1c:d2:99:cf:cf:0a:6d:38:c4:7e:
c3:12:21:ac:a2:28:0f:f0:3b:9a:57:22:1c:9b:3c:40:4d:8d:
ac:2e:82:fe:57:84:e9:23:ec:47:4b:03:64:3c:39:2b:3a:db:
6e:2d:ac:1e:f9:1e:34:47:a9:d5:59:c1:5a:a6:95:4e:b9:98:
79:f0:b3:12:82:b4:32:45:fa:10:7a:a8:f8:40:53:82:68:88:
46:b1:42:78:38:93:72:74:17:c7:c1:81:73:03:50:29:f6:35:
9a:7d:93:8d:c8:f7:fb:1b:90:42:5b:85:4a:2b:98:c2:e6:e0:
13:58:ab:09:aa:1f:e1:cd:23:22:c7:8b:3a:df:4e:08:80:f4:
97:b8:41:63:af:59:c3:3d:2c:ba:41:82:83:f9:9d:8a:97:a1:
ab:c4:c0:7a:99:d3:5b:31:7b:de:7a:8f:3e:f8:4f:fd:c6:c7:
78:07:d8:f9:fa:ea:e9:b8:0b:1e:fa:a9:56:d9:46:98:b0:b5:
a5:7d:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client