Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7xwMFezxPoiCf_iGN6cBRLl5Hp8.roa
File: 7xwMFezxPoiCf_iGN6cBRLl5Hp8.roa (raw, json)
Hash identifier: yWKQwtV6ucyZXasn5OSBA0lSheIlTo+9TWz1JqOE/Fc=
Subject key identifier: EF:1C:0C:15:EC:F1:3E:88:82:7F:F8:86:37:A7:01:44:B9:79:1E:9F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A905C69BFECEB83052D98DC4056CD4457
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7xwMFezxPoiCf_iGN6cBRLl5Hp8.roa
Signing time: Wed 13 Sep 2023 21:04:50 +0000
ROA not before: Wed 13 Sep 2023 21:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:905b:f359/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:5c:69:bf:ec:eb:83:05:2d:98:dc:40:56:cd:44:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 21:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef1c0c15ecf13e88827ff88637a70144b9791e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:a6:0f:f9:59:95:29:d7:73:47:40:07:3e:
5b:ed:bd:5d:f7:47:b7:48:90:9f:2c:59:ff:f0:6c:
87:5f:06:4e:e6:da:36:90:89:45:43:eb:2f:29:4d:
b0:05:44:da:ac:15:e0:51:7b:c7:6a:6f:86:85:35:
88:98:11:24:8a:74:90:1b:c8:d7:08:16:48:85:97:
be:b3:25:db:dc:88:29:40:ec:17:4a:22:2a:c0:88:
95:b8:7a:19:fa:b3:61:79:c8:23:6d:bf:4c:3e:bb:
d6:4e:f2:f6:54:12:a2:02:51:87:53:9e:e6:d3:ca:
2d:68:f7:97:b0:3c:33:69:f1:e5:6f:bc:ba:02:01:
36:6e:a6:39:9b:41:8d:c0:25:15:17:90:92:59:8c:
27:f3:e3:d8:52:b0:a1:b3:be:cc:82:76:58:bc:af:
b9:d9:c4:15:34:5e:f9:3b:08:5d:e2:63:ee:6c:3d:
57:09:00:dc:f1:ab:2e:54:f9:be:ff:b3:4e:84:8b:
cb:b6:45:c3:e4:3b:47:9a:8b:df:11:cd:6c:6c:e3:
3f:e6:4f:8c:10:47:8a:80:0f:11:31:24:69:89:c2:
68:b2:97:8f:db:9e:fc:61:ac:79:07:f1:bf:ca:6d:
8a:22:c4:30:fa:7c:b5:7e:e5:f0:b5:b9:0f:c8:5a:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:0C:15:EC:F1:3E:88:82:7F:F8:86:37:A7:01:44:B9:79:1E:9F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7xwMFezxPoiCf_iGN6cBRLl5Hp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:63:91:28:9c:d0:09:bb:ad:38:b0:6d:a6:a1:74:fc:62:d7:
16:12:f9:62:b9:02:bd:e7:04:1d:06:ba:b3:b9:3e:02:7c:bd:
41:de:b1:e2:4b:9d:76:e3:2e:e5:d0:56:25:73:92:b7:6b:87:
35:2d:61:e9:8a:da:71:bd:5e:3d:82:a1:f7:0a:46:98:a9:41:
eb:8b:51:e6:58:36:dd:40:88:e1:13:ea:16:e4:29:c1:fd:56:
f9:57:4a:2d:23:57:42:f2:5d:ac:b2:4e:fc:a0:e8:03:26:90:
1c:b0:3c:6d:7b:20:f3:f3:8a:dc:a9:ef:a2:7b:3d:98:93:d4:
b4:3f:3d:5f:6c:8c:69:d1:d1:7c:b0:b3:21:c6:d1:d0:d0:bb:
0d:dd:d0:0b:43:60:cc:5b:94:0a:39:9b:59:8e:ad:4b:bd:cd:
6b:c1:19:d9:f0:a5:3e:b5:58:3a:c1:3c:2d:66:9b:c5:d9:ff:
4d:31:16:75:58:77:3d:48:6c:90:56:50:49:3a:ae:9e:9f:4c:
c7:5a:af:f0:40:c4:0e:ea:5c:a3:49:46:01:ba:a1:25:2b:58:
3f:54:a9:8e:7d:6e:ca:c6:33:18:c9:87:3a:c7:26:3f:b4:5a:
69:ab:8b:7b:0f:50:da:50:b5:57:30:29:9a:33:d0:ac:ae:b9:
47:a2:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:01:35 2025 by rpki-client