Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A199k0vALtQXPNwd-QAzqDZhCZo.roa
File: A199k0vALtQXPNwd-QAzqDZhCZo.roa (raw, json)
Hash identifier: 6cSkp1fQNzbNvq3ye0s9kFV8tU+v21KcSKRLVH6/rgg=
Subject key identifier: 03:5F:7D:93:4B:C0:2E:D4:17:3C:DC:1D:F9:00:33:A8:36:61:09:9A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7D4CAF9D193A19404E67AD9242E12594
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A199k0vALtQXPNwd-QAzqDZhCZo.roa
Signing time: Sun 10 Sep 2023 04:14:52 +0000
ROA not before: Sun 10 Sep 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:4c:af:9d:19:3a:19:40:4e:67:ad:92:42:e1:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=035f7d934bc02ed4173cdc1df90033a83661099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:bc:b1:c3:93:6e:f1:5d:86:38:3b:9e:06:
03:fc:18:25:a1:9d:48:65:2b:eb:e2:6f:1a:ff:3f:
15:f8:a9:22:56:d6:de:4b:a6:1a:10:36:0c:25:bc:
02:51:98:3d:58:24:92:40:63:c2:66:1c:80:56:6a:
4d:88:46:62:92:0d:dd:25:3c:c5:61:34:03:65:2a:
72:db:72:a1:d2:9d:7d:d3:4a:b4:88:2b:38:af:c5:
48:3e:6a:05:2c:be:ed:1f:87:69:51:b5:3c:47:f1:
21:69:75:03:fe:d8:45:4c:1c:da:86:88:07:39:a1:
2f:5b:25:04:77:7e:76:c0:d5:49:72:a3:38:db:58:
29:9b:04:3e:41:29:1b:81:9d:e1:03:b4:cb:ba:7f:
5d:a7:18:90:ca:9f:40:af:3e:7b:9a:d5:b5:80:11:
2b:2b:02:45:32:28:a8:4d:95:d5:19:38:fa:bb:7e:
9b:2e:e8:f8:19:5b:9c:3c:18:96:fc:66:bd:ce:a3:
6e:85:19:33:96:8e:3a:9d:df:30:ac:8d:f5:ba:f0:
a2:e2:d5:dd:78:2b:06:5d:74:45:da:b7:64:63:84:
77:18:b2:e4:9b:aa:16:b0:83:f8:b1:0e:bd:de:ab:
c7:3e:40:a8:23:71:8a:1f:58:31:df:f0:b5:d9:0f:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:7D:93:4B:C0:2E:D4:17:3C:DC:1D:F9:00:33:A8:36:61:09:9A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A199k0vALtQXPNwd-QAzqDZhCZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:24:15:1a:63:13:1a:cb:98:7b:92:b8:96:c4:c9:ca:63:37:
ac:a1:c6:68:c0:e7:9f:f2:27:a9:bc:cb:ee:c9:80:78:75:b9:
bf:7b:15:78:7d:f7:76:57:14:b0:31:83:2e:c7:e9:d9:83:d0:
73:4c:4a:cf:d6:b6:a5:a4:a0:da:17:7d:ea:45:6d:c9:b8:db:
28:cc:d7:29:36:09:a8:d8:5b:88:00:15:6c:e3:05:d4:3d:a9:
eb:ab:be:ac:6f:45:9e:7b:d0:dc:ce:67:1b:13:0d:26:79:2a:
50:73:dc:7b:f2:9c:77:23:b6:e0:f4:98:1a:1c:12:3e:15:d4:
bd:c8:46:7a:89:ae:80:0e:0b:d5:ab:00:0c:2a:fc:83:e5:56:
54:b1:a9:1a:26:87:f3:fe:49:8c:95:86:1f:cc:a5:6f:88:80:
64:d5:dd:b9:75:f8:94:43:fe:09:c8:72:0c:bc:b6:d6:3b:00:
07:a7:28:8d:35:dd:90:55:6a:99:66:08:92:9f:0a:89:0a:35:
fa:2e:c5:b9:6f:44:64:2f:cf:1b:fb:78:92:d1:de:05:3b:73:
58:99:fb:6d:a0:5a:ae:cc:d7:82:62:fc:6e:b6:3a:cc:08:0d:
bb:ef:24:da:57:ee:f1:01:99:cc:a0:cb:70:70:b5:da:91:d0:
d2:a6:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:07 2025 by rpki-client