Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6x5IRxDwwbUBqtVq_4au9-WOGMc.roa
File: 6x5IRxDwwbUBqtVq_4au9-WOGMc.roa (raw, json)
Hash identifier: gUJ2hZ7b5ih/B6EhgxCGynX7/zBwTRAiieMAiq9LHpM=
Subject key identifier: EB:1E:48:47:10:F0:C1:B5:01:AA:D5:6A:FF:86:AE:F7:E5:8E:18:C7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9931C40F1863D7545BEF27F7B6AF0C93
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6x5IRxDwwbUBqtVq_4au9-WOGMc.roa
Signing time: Fri 15 Sep 2023 14:14:50 +0000
ROA not before: Fri 15 Sep 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:31:c4:0f:18:63:d7:54:5b:ef:27:f7:b6:af:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1e484710f0c1b501aad56aff86aef7e58e18c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:ee:84:3f:85:98:c4:0e:25:73:17:83:a5:
62:8c:77:92:a8:c1:de:5f:53:9f:1e:97:97:0b:8c:
82:6f:4e:d8:62:77:cb:c8:37:90:f0:5e:23:4c:5e:
d5:af:cb:45:ae:4f:a9:51:b4:94:bd:60:2e:d1:03:
42:35:1c:e0:44:e7:02:03:6a:fe:49:17:34:2b:db:
03:44:26:5d:57:bb:66:52:3a:79:88:73:ec:6c:1b:
83:35:cf:3e:b9:c2:e9:8c:9a:7d:49:cd:94:f1:d6:
0d:98:18:7c:aa:ba:24:56:f9:da:c7:6c:b1:43:78:
23:b3:cb:11:06:8b:6d:8c:6b:0d:0d:18:3d:b1:78:
01:44:01:82:3a:80:c7:96:f0:c7:cd:a3:74:a8:ec:
54:6e:0c:7c:1f:9a:96:bf:03:af:da:00:6f:df:be:
c9:3d:21:c7:c4:39:2e:b1:21:e4:b7:99:4d:a1:e3:
3f:1c:bf:41:db:82:fd:d1:9a:1e:8a:d1:2f:1d:86:
ed:bc:e0:27:67:2b:23:e7:c7:b5:fb:64:32:79:49:
c2:ea:9a:77:a1:47:66:33:c3:03:21:2c:81:cb:d4:
9e:aa:fd:c3:9e:d1:72:90:16:a8:75:7d:38:20:50:
91:15:8c:aa:cf:9c:a4:70:c9:39:e4:ce:44:95:d8:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:48:47:10:F0:C1:B5:01:AA:D5:6A:FF:86:AE:F7:E5:8E:18:C7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6x5IRxDwwbUBqtVq_4au9-WOGMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:f0:c9:74:fb:02:16:24:7d:4c:f3:49:b3:28:2e:f3:16:e0:
e2:a3:25:42:e8:ad:97:e2:39:5d:18:af:26:96:7b:b0:3d:98:
23:e1:8f:b7:0d:73:2c:c3:8e:8b:e4:d4:e5:fb:7f:1b:65:fe:
77:e2:dc:5a:a1:23:41:0d:40:72:eb:4f:0e:4f:ee:6a:92:20:
28:f3:81:16:d7:6d:0f:e6:60:d5:24:79:18:83:64:4a:42:c2:
9e:e7:ec:60:ed:c7:15:04:bf:6f:21:f9:f0:d1:55:03:db:6e:
d1:03:a8:9d:f4:6e:35:fc:e7:20:f5:ad:8f:d8:93:81:da:f0:
00:93:8c:77:e3:46:81:5b:b4:af:b1:5c:db:8b:97:fd:bb:65:
c6:dd:34:73:75:ba:fa:c7:9c:eb:d3:e2:2f:bc:9e:c5:78:2c:
e6:3b:e5:22:8b:62:f0:96:51:ef:04:e9:4f:fc:00:ac:f9:f1:
1c:fd:b3:ea:e9:94:1e:7f:04:ce:2c:24:c7:96:63:fe:0d:e3:
2b:6f:a9:9e:8e:fe:36:c9:8a:f0:35:13:29:d0:4c:61:18:47:
8d:60:e5:f2:f0:e5:97:57:2d:f1:fe:f2:00:2a:ad:65:7c:b7:
9f:12:d7:64:84:f5:8f:63:02:e0:c6:78:a9:7f:da:f8:e2:0b:
0f:7d:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:38 2025 by rpki-client