Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8IELK_q9RPAKRsxbQRhIP2q-lrA.roa
File: 8IELK_q9RPAKRsxbQRhIP2q-lrA.roa (raw, json)
Hash identifier: Uc1f6tc/VVrVz5PT/084CWllrddxlXzlp0r4cgwMK70=
Subject key identifier: F0:81:0B:2B:FA:BD:44:F0:0A:46:CC:5B:41:18:48:3F:6A:BE:96:B0
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAA9165E094E45F2803ED2E580D064AFA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8IELK_q9RPAKRsxbQRhIP2q-lrA.roa
Signing time: Mon 18 Sep 2023 23:12:50 +0000
ROA not before: Mon 18 Sep 2023 23:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:91:65:e0:94:e4:5f:28:03:ed:2e:58:0d:06:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 23:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0810b2bfabd44f00a46cc5b4118483f6abe96b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:b6:90:93:33:f9:fd:1b:e8:7d:bc:27:c3:
e5:4f:37:f2:de:a8:83:60:ed:66:d5:69:87:07:89:
09:db:21:17:7d:d2:78:1e:d9:7d:02:0d:37:91:80:
fd:73:13:84:05:e8:33:83:b5:08:4f:63:20:aa:46:
d4:e7:60:6d:10:47:3f:96:4e:c3:5d:8e:3e:c3:7d:
3d:1a:00:13:87:5c:70:77:05:a1:cb:38:a8:68:12:
ea:35:53:d0:6c:13:49:e1:07:04:62:ce:36:67:1d:
c2:83:b0:a0:5b:7d:44:4b:0c:07:33:db:76:8c:04:
29:b0:c6:92:d8:be:89:07:7f:74:98:74:09:41:08:
05:63:70:16:3e:26:c7:04:bb:5d:a4:ce:11:53:f8:
d7:24:56:29:f1:ae:fd:4d:1d:75:4a:fc:8c:42:58:
ca:05:32:e6:8f:94:30:cc:4f:3c:28:2b:2c:a6:20:
d9:72:f7:e5:16:ba:48:05:99:02:52:15:14:31:88:
34:a9:71:d5:71:95:54:76:b7:81:5d:28:ed:9b:d5:
67:c6:e8:f3:a4:c7:2a:4c:a8:0b:62:22:c5:41:31:
c8:d6:49:6f:de:60:2f:65:c4:60:a5:00:a8:4a:f1:
fa:35:30:22:a8:24:67:8d:65:96:09:6a:32:50:c6:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:0B:2B:FA:BD:44:F0:0A:46:CC:5B:41:18:48:3F:6A:BE:96:B0
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/8IELK_q9RPAKRsxbQRhIP2q-lrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:14:b0:ba:0c:61:97:54:74:b2:89:5c:82:4f:28:ca:4d:45:
52:75:94:37:28:11:d9:00:a8:e4:d7:bf:15:b0:f3:cc:2d:d6:
1d:10:4e:e1:b9:e6:7e:9e:14:c3:e4:28:60:79:d2:6e:eb:5d:
f7:2e:e3:29:28:e0:7d:3a:69:e8:38:34:dc:04:88:5c:4c:00:
76:a0:66:b6:1a:b0:18:43:ed:5a:6f:07:78:4c:68:2d:b7:3b:
c3:1f:37:fd:38:a4:03:f2:59:64:ba:95:cc:67:1b:30:a5:a0:
a4:03:e8:1c:50:26:ad:51:2e:74:02:da:64:6b:a4:29:ee:70:
50:fe:c8:44:8b:e8:24:d3:12:8d:0d:ec:85:c8:cc:16:d0:e7:
75:ad:68:50:88:69:97:f5:ac:73:9d:3c:a4:b2:ff:66:7d:a7:
54:d9:26:a8:c4:bf:c8:84:41:f4:ec:81:32:04:6f:cd:60:72:
e4:9b:16:63:20:77:99:e4:f5:81:a8:18:1d:a2:26:ae:2b:c6:
0f:12:12:b8:9c:20:12:ed:f9:4f:05:da:4b:f9:75:49:03:48:
4f:fa:40:cf:2e:a2:48:84:55:58:35:3d:15:ef:b7:d8:9e:1a:
f1:d9:3e:ee:a0:34:4a:16:48:a9:ea:9b:dc:a3:d5:ea:fe:16:
d9:26:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:44 2025 by rpki-client