Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6e_Zs87bw5vsV_wfexcuiNtS7_E.roa
File: 6e_Zs87bw5vsV_wfexcuiNtS7_E.roa (raw, json)
Hash identifier: 6Li1nd5jfYBALXLlNhussBewKC9Y8eBad9B3SO+6qkU=
Subject key identifier: E9:EF:D9:B3:CE:DB:C3:9B:EC:57:FC:1F:7B:17:2E:88:DB:52:EF:F1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5C7A008D01F6EA60C7BFB3B2A27C9DD9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6e_Zs87bw5vsV_wfexcuiNtS7_E.roa
Signing time: Sun 03 Sep 2023 19:16:53 +0000
ROA not before: Sun 03 Sep 2023 19:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5c:7a:00:8d:01:f6:ea:60:c7:bf:b3:b2:a2:7c:9d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 19:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9efd9b3cedbc39bec57fc1f7b172e88db52eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:78:bf:44:72:77:cc:2b:93:ad:11:b7:7d:
9e:be:52:af:f7:f4:6c:00:6f:12:86:2c:38:1f:9a:
32:3b:3b:cb:e8:da:aa:9b:93:d8:e1:2c:2f:b8:6b:
1b:f7:2c:97:45:69:4d:85:e6:81:ab:41:dc:4d:67:
56:ce:25:b5:53:eb:3d:aa:26:e6:2a:78:19:cb:05:
28:ec:8b:d7:1d:0c:c7:9d:bc:2f:44:d1:a6:6d:fd:
3b:1d:2b:3f:11:ed:2b:0d:f2:90:29:46:90:d6:5a:
0e:96:f7:26:10:f8:f8:88:ed:21:ad:35:44:f4:ee:
84:b3:74:4a:eb:da:57:5d:41:23:31:97:0d:1a:57:
fb:7a:21:ba:1b:55:bc:f1:88:63:b7:09:8b:96:7a:
08:6b:a0:75:d2:5d:0b:46:27:5e:2d:59:22:5a:fc:
f3:c2:36:0e:a9:c5:3f:c8:d8:16:08:26:92:a1:3f:
ef:c7:ae:3c:00:88:42:a6:01:5c:04:6a:a2:f3:06:
e5:48:47:23:a3:3b:27:5a:43:6e:fc:b4:00:2a:bb:
b0:65:69:fb:86:bf:bc:26:fd:af:82:bd:24:11:a7:
56:e4:1c:2e:65:4e:c9:b1:a0:e1:df:1f:e9:aa:60:
45:97:81:84:6c:ff:3a:5e:f1:2c:17:97:38:32:e3:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:D9:B3:CE:DB:C3:9B:EC:57:FC:1F:7B:17:2E:88:DB:52:EF:F1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6e_Zs87bw5vsV_wfexcuiNtS7_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:42:bc:ce:63:4d:f1:bf:d4:a0:02:ee:35:4e:c3:be:ee:31:
a3:cd:8d:bf:ee:65:3e:fa:e3:5d:d3:4e:b9:a4:63:d8:98:0d:
02:5f:9c:a1:8c:ac:0f:79:bd:77:7c:23:12:5f:94:34:a0:fc:
6a:dc:0b:c7:75:b9:f9:32:9e:a6:19:a9:b5:b3:2e:51:27:79:
ea:f6:00:cb:df:e8:b5:ea:b1:69:a5:be:c9:83:31:e4:2a:0f:
f6:7a:31:9b:1a:0b:8f:fc:2b:1e:6d:20:91:68:67:fb:b5:d0:
5c:0d:79:81:b3:44:1a:6e:6c:d3:a9:40:ce:23:e2:2b:65:5e:
cf:ee:66:72:28:46:11:ea:b4:8f:ce:30:b8:9e:32:42:4f:d4:
b9:8e:a5:33:85:26:b1:ae:2e:cb:4a:3c:36:b9:2c:84:99:bf:
c9:08:8a:ab:84:65:33:15:c6:c0:41:1e:e4:a1:05:d0:53:23:
bf:b4:a8:91:90:89:9a:33:b5:a9:8f:7f:eb:8f:3a:7d:07:ef:
02:cf:ad:15:8c:9f:67:ba:dc:60:e8:ac:03:62:b9:a1:ff:7a:
74:7c:f7:97:ab:42:39:8c:61:cd:cf:c4:47:fd:a3:b8:d2:74:
ed:5d:55:80:32:74:7a:41:47:45:cd:7c:fc:7a:e6:63:e8:02:
d5:7c:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:54 2025 by rpki-client