Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6eaKul_UK1lYNXArskRje1lniEM.roa
File: 6eaKul_UK1lYNXArskRje1lniEM.roa (raw, json)
Hash identifier: 3rOFvOgFdpcdDSCih8AlNGg2KRym3NnPfWYKZc2/Xv8=
Subject key identifier: E9:E6:8A:BA:5F:D4:2B:59:58:35:70:2B:B2:44:63:7B:59:67:88:43
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8987C1B03E1648817DA0E639D76BD13B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6eaKul_UK1lYNXArskRje1lniEM.roa
Signing time: Tue 12 Sep 2023 13:14:50 +0000
ROA not before: Tue 12 Sep 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:87:c1:b0:3e:16:48:81:7d:a0:e6:39:d7:6b:d1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e68aba5fd42b595835702bb244637b59678843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:55:ef:3f:b7:48:86:e2:26:6d:b8:6e:bd:
dd:21:09:84:2e:0a:f2:3d:07:7c:0b:68:77:9b:85:
95:79:72:f4:fe:f8:35:c3:1c:f1:85:9c:15:1a:cc:
27:e5:42:b6:99:c3:bc:1a:a1:3c:2f:62:b4:74:7c:
c1:a6:42:a8:12:86:cc:45:af:1e:a7:77:dd:71:71:
5c:ff:d2:d8:c0:78:8d:2d:87:88:58:07:2e:03:d5:
88:01:6a:cc:e3:ec:22:f4:ae:b4:2f:0c:a6:c0:b6:
a0:ea:10:3f:f7:db:d8:4b:df:bd:bb:d5:3d:c7:0b:
5c:a9:69:8d:58:07:1c:1e:1b:1d:65:02:63:43:06:
63:ad:36:11:00:5c:14:00:1f:20:e2:2b:11:fd:71:
4e:6e:22:52:8b:5f:0e:55:0d:2e:8a:92:33:02:4e:
8f:7c:dc:e5:33:ba:8c:71:bb:b1:0d:c0:28:d5:bc:
c6:67:d0:01:51:f1:3c:a3:8a:03:aa:6d:7d:ca:cf:
ce:89:67:b0:ba:b2:8a:89:10:a0:b6:b0:28:2d:f6:
ce:bb:bb:08:cc:74:83:66:09:7c:2d:4d:58:4e:89:
be:61:a8:8a:7c:a9:69:d8:bf:01:6c:50:d3:a2:05:
2e:4f:cd:39:16:d9:0f:0e:59:da:1c:df:c7:54:c0:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:8A:BA:5F:D4:2B:59:58:35:70:2B:B2:44:63:7B:59:67:88:43
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6eaKul_UK1lYNXArskRje1lniEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:22:39:f5:dc:b2:4b:da:a5:3d:bf:dd:84:a7:96:c0:d7:46:
14:d4:6c:09:c7:74:bf:51:0f:74:0c:76:a8:d7:b8:da:03:c8:
5b:4d:54:9d:17:20:8f:90:4e:87:56:ce:2c:61:cc:9d:23:28:
be:66:a5:2d:3d:0d:74:c2:58:40:86:29:a6:21:90:35:f9:aa:
93:ca:85:73:5d:94:40:52:2a:41:30:2c:84:da:67:7c:c4:45:
52:e2:d2:1c:c2:1a:17:97:ff:5a:d5:fb:bd:67:c3:ba:4e:9e:
cd:8d:a0:e8:f9:68:5f:c0:94:bd:75:11:e8:0c:b5:1d:0e:24:
90:7c:cd:49:8a:ab:87:10:1c:12:7e:48:24:47:ee:08:c1:54:
24:bb:1c:c2:0a:a6:ac:b5:fd:82:9f:23:80:53:e2:2b:e3:9e:
72:93:d5:8a:57:67:26:3e:3a:1a:fb:b6:93:a9:3e:f7:cc:9a:
cf:7a:f4:11:6a:3b:6a:86:a2:97:48:31:df:1a:c9:9c:81:2f:
92:ed:5a:f7:b5:aa:48:01:cb:75:44:eb:26:29:e4:05:12:5d:
1d:50:b0:5c:8a:cd:ec:ee:e0:4c:95:2f:48:45:12:e5:f4:de:
77:b6:83:b4:60:db:ff:d4:52:ad:27:08:72:e4:b9:17:6e:59:
cf:3d:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:52 2025 by rpki-client