Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/86axtS0pyusRc-X1cs52W7QG-9M.roa
File: 86axtS0pyusRc-X1cs52W7QG-9M.roa (raw, json)
Hash identifier: 3LJKpT1d68SzyeNJJlB+/k6vqjt8xcPuS6k7wNsxodE=
Subject key identifier: F3:A6:B1:B5:2D:29:CA:EB:11:73:E5:F5:72:CE:76:5B:B4:06:FB:D3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A53AEE13FDD6826EAEC8ACF8667EA2356
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/86axtS0pyusRc-X1cs52W7QG-9M.roa
Signing time: Sat 02 Sep 2023 02:18:04 +0000
ROA not before: Sat 02 Sep 2023 02:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:53:ae:e1:3f:dd:68:26:ea:ec:8a:cf:86:67:ea:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 02:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3a6b1b52d29caeb1173e5f572ce765bb406fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:10:b4:c5:9f:51:b7:83:f8:41:36:f7:3b:
54:06:68:77:d8:2f:04:cd:22:23:ca:18:bd:ad:57:
e1:12:a3:89:7c:f8:32:fd:93:65:85:96:3b:49:60:
95:38:f9:b6:ff:8d:d9:41:bd:68:7c:1d:d4:b1:e6:
36:15:b2:3b:ac:e6:d8:5c:ef:91:42:35:07:ad:98:
0c:b4:ab:15:eb:3c:93:4b:c8:b3:85:fb:44:d8:3f:
53:18:39:a2:dc:5d:6d:49:5d:21:c0:7e:7b:3d:8a:
05:8d:79:bc:5e:ab:2c:bf:ba:16:6e:67:77:bb:ea:
bf:2e:01:03:4c:11:b9:64:4f:39:ed:3c:46:95:64:
cd:2e:51:04:ec:12:99:cd:27:10:ce:ff:72:d6:4c:
3f:30:fd:39:4b:c8:7d:8e:2a:f0:b7:23:4d:3e:d5:
a4:4b:fe:19:63:77:71:7b:82:19:a0:f0:7c:1f:59:
23:7f:e3:13:ac:f7:92:d8:26:1c:6c:fb:a0:dc:14:
d1:08:ca:af:e1:0b:7e:99:4d:d9:53:1b:cb:40:15:
3e:48:ef:1f:83:cc:d9:d5:fc:d8:f3:1f:2a:9a:c3:
6d:ce:64:0f:8b:e0:e9:1a:fe:38:ed:8f:e3:22:0c:
67:4a:36:83:32:50:59:62:95:82:d1:53:5d:bd:f9:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:B1:B5:2D:29:CA:EB:11:73:E5:F5:72:CE:76:5B:B4:06:FB:D3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/86axtS0pyusRc-X1cs52W7QG-9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:30:40:db:46:ca:b8:b0:b7:2c:8f:01:71:d1:ba:0e:b6:13:
ec:c3:4f:38:cf:ca:27:56:2e:c7:99:58:05:fa:05:9a:c0:30:
36:eb:23:b0:8c:81:f5:d4:53:b2:2c:0d:d5:fe:09:dd:72:74:
65:23:85:4c:72:ce:17:6e:1e:f8:d7:ec:e3:6f:e1:d5:47:81:
e4:d6:1b:ad:b1:05:7b:85:c3:ef:73:0f:34:58:d3:5b:49:b6:
20:90:73:6c:f7:a9:7e:9f:0e:16:62:13:7c:dc:e9:0e:10:f9:
ba:19:a0:25:e2:e3:09:0a:39:b1:af:84:0e:c7:3f:e7:2a:9e:
00:e7:3f:0c:2d:11:b2:8f:1a:97:15:f5:75:b7:6e:ed:7a:b3:
0e:a5:eb:e0:cf:5c:dd:a2:67:00:63:70:f8:28:95:3e:64:67:
de:44:6b:9d:46:0e:a6:91:de:f8:48:d4:37:34:c4:28:ae:43:
7b:f3:2b:ea:6e:70:7f:c3:ab:ba:70:4f:95:8c:a5:f3:49:a0:
bb:1e:da:4b:0a:72:05:3b:df:11:c5:c8:a5:eb:52:c4:1e:bb:
10:68:61:00:9a:f9:ea:da:17:06:a9:23:1a:c0:0a:b5:1c:4d:
2a:9b:99:71:10:a0:43:04:56:7d:fb:f6:8a:b5:ac:41:b8:c3:
65:ac:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:00 2025 by rpki-client