Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8FFI2BJSI1aPd4gi4xB-IsD2zdA.roa
File: 8FFI2BJSI1aPd4gi4xB-IsD2zdA.roa (raw, json)
Hash identifier: PnWgFMjE/7T8tZK5/zKWs2I5b+QP9Te7PkM+OkDHi84=
Subject key identifier: F0:51:48:D8:12:52:23:56:8F:77:88:22:E3:10:7E:22:C0:F6:CD:D0
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AACE65249F69360A1B34C95E49E16D891
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8FFI2BJSI1aPd4gi4xB-IsD2zdA.roa
Signing time: Tue 19 Sep 2023 10:04:50 +0000
ROA not before: Tue 19 Sep 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ace5:be7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:e6:52:49:f6:93:60:a1:b3:4c:95:e4:9e:16:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05148d8125223568f778822e3107e22c0f6cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:00:3a:53:e9:42:8e:9b:35:1b:97:44:ca:
4f:2a:88:2b:23:92:4d:15:bb:4d:b2:9b:f4:a6:b2:
67:2e:d3:51:5d:89:75:a2:eb:02:53:79:b9:7a:71:
d4:a2:1c:fc:3b:c2:b3:24:d4:30:7c:41:fe:d2:24:
86:15:88:06:4a:a2:50:98:f6:d3:0b:82:19:9f:01:
2f:d9:ad:b9:31:6d:c9:1e:77:7e:ac:18:cf:f7:85:
8b:9f:4d:ca:21:eb:62:44:c2:a1:e2:dd:24:1b:1c:
55:59:37:d4:41:3d:67:c0:f4:69:b2:21:83:55:74:
46:dd:a1:c0:e7:de:b1:d2:1a:f1:96:f3:d9:87:16:
f1:d7:96:ca:e8:67:69:62:6f:3e:08:a7:10:e5:8f:
db:40:0f:51:99:d2:89:7f:9e:da:02:7d:9b:1d:68:
51:71:16:7f:24:72:2c:c4:4a:5d:3e:2d:e4:b0:a7:
19:1b:c9:87:2a:9d:8e:59:05:3d:4c:9c:94:e6:a4:
11:01:53:65:33:11:29:d0:e1:d4:ac:ff:ae:f9:5d:
25:50:6b:1b:8d:15:07:ab:7d:5c:9a:d2:8b:96:02:
55:c5:7b:e5:13:bc:f4:ea:9d:a8:72:76:b5:ad:ea:
17:c6:39:9f:64:99:3f:9c:33:ee:a9:e0:00:87:38:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:48:D8:12:52:23:56:8F:77:88:22:E3:10:7E:22:C0:F6:CD:D0
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8FFI2BJSI1aPd4gi4xB-IsD2zdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:34:74:50:97:53:3e:90:8f:e0:54:5d:99:75:bd:d0:82:4c:
14:4b:b7:f3:4a:14:da:06:5b:a6:bd:9f:56:c5:2a:29:da:75:
99:2d:9d:eb:a0:39:da:55:60:9d:ff:14:ab:d7:ff:4c:20:e2:
21:ca:ff:ee:d8:db:3a:e7:7c:c2:d5:23:a9:a5:89:28:ab:92:
06:9e:40:65:aa:17:9c:e9:fe:3d:3b:11:d5:d6:20:e9:a4:ef:
af:7b:22:73:3f:69:4b:6f:3b:f5:2b:af:bf:9f:a0:ef:e9:8b:
9a:b1:8c:88:cd:dd:87:19:b3:3d:7c:ac:e2:3b:bb:a4:d4:39:
34:e5:e8:46:ef:b2:4a:88:c3:d4:d9:3a:7e:6c:a6:27:51:12:
76:5d:a6:d3:f3:42:2e:c5:4c:d0:33:b6:a3:89:d8:56:1a:d0:
1f:25:20:27:43:82:06:78:58:5c:5d:76:8d:4c:d9:07:c0:7f:
b9:f0:8a:00:4c:7d:7e:18:2a:c2:d5:3d:5a:b5:db:dd:b2:2d:
f0:a9:02:31:ef:a4:49:6f:a1:f2:72:39:0a:48:26:ae:bf:b5:
29:98:e4:33:f2:0f:d2:3f:c0:39:0b:bb:c0:45:b8:4d:96:81:
6f:7f:53:74:2e:ea:37:28:f0:ee:d2:49:a5:07:90:1d:80:ae:
c6:78:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:18 2025 by rpki-client