Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A7_1-cZtOZZ7pp04XQ_ZbRDCpzE.roa
File: A7_1-cZtOZZ7pp04XQ_ZbRDCpzE.roa (raw, json)
Hash identifier: 89YMV4e4tAsF0TK9u1vk0LmJ5WJAizJrqelIDsEpQkc=
Subject key identifier: 03:BF:F5:F9:C6:6D:39:96:7B:A6:9D:38:5D:0F:D9:6D:10:C2:A7:31
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA00DBFD696468667A009D4613F668277
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A7_1-cZtOZZ7pp04XQ_ZbRDCpzE.roa
Signing time: Sat 16 Sep 2023 22:12:50 +0000
ROA not before: Sat 16 Sep 2023 22:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a0:0d:bf:d6:96:46:86:67:a0:09:d4:61:3f:66:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 22:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bff5f9c66d39967ba69d385d0fd96d10c2a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:b2:8d:b7:82:95:e9:ef:64:cf:73:ce:9f:
52:21:a7:c1:58:54:83:84:21:ea:fb:0b:ed:01:37:
31:d2:7f:07:81:b2:82:69:c0:be:b9:31:2a:82:6e:
70:b5:05:9b:0e:78:e1:3d:20:95:27:1b:aa:11:33:
02:ca:72:11:4a:94:df:29:b9:87:3a:3e:ac:13:82:
a6:b0:bf:a1:80:f3:72:95:32:bc:0b:da:2d:82:5f:
29:d1:9d:fb:c4:ae:4e:92:4c:14:2d:7e:77:12:9f:
4c:76:ce:56:b1:6e:f2:6e:11:a7:56:a0:a7:9a:4e:
00:94:11:b4:77:ed:f5:d1:8d:66:b0:e3:84:55:57:
55:c3:c2:56:1a:bd:a1:67:84:a7:dc:0e:5a:80:54:
06:bf:25:5d:97:bb:03:9a:da:22:0f:e8:99:ed:3d:
1d:64:79:5b:79:9c:cf:ac:63:43:52:30:7d:a8:88:
7c:1e:9c:17:3c:28:a1:8c:ef:fd:7a:ea:b7:cc:7e:
98:2b:ff:63:bc:e0:9d:59:1c:98:db:30:f0:38:f3:
4e:13:dd:7c:b2:3c:1e:23:4d:0c:62:1a:19:65:af:
ab:04:cc:ef:e9:44:a9:c7:59:24:5e:1f:e8:2e:2f:
1f:81:eb:39:25:a2:46:59:a8:6f:83:c9:4f:96:53:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:F5:F9:C6:6D:39:96:7B:A6:9D:38:5D:0F:D9:6D:10:C2:A7:31
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A7_1-cZtOZZ7pp04XQ_ZbRDCpzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:df:b4:c0:a5:bb:92:e4:22:4f:c5:e3:bb:ce:73:1c:04:b3:
d2:ae:13:7a:64:07:e3:8c:f9:ad:32:cd:23:62:fc:59:88:25:
72:e4:26:40:4b:6f:9a:0d:27:49:17:33:00:f7:e3:2e:ea:d5:
c4:34:c1:b7:b0:f1:f3:5b:e3:40:0d:ef:0a:69:5b:70:6f:93:
0b:2a:b4:1b:bd:19:91:85:15:3c:90:db:02:79:5a:41:ca:88:
3a:c1:6e:c7:33:ce:c8:67:17:39:06:6b:aa:fa:e2:c2:9b:3c:
fa:a2:cd:fd:19:98:9a:63:10:a6:27:12:1f:05:b4:b2:ad:c2:
17:b0:47:ee:61:c1:d2:f1:b0:11:19:89:c0:f3:fd:29:18:52:
d5:7c:c7:43:be:84:1a:63:be:18:95:e6:1f:fc:df:36:08:d2:
30:7b:fc:ca:ca:07:0c:ca:a1:7b:c3:6e:b2:0a:65:07:77:21:
46:8b:14:34:6c:0b:99:99:74:a6:0d:33:87:d0:64:1e:32:8d:
14:e5:e7:32:2c:69:0f:71:a2:6c:5a:3f:1d:7d:29:4b:1b:50:
89:08:8c:4d:55:6d:df:f4:64:36:3f:25:99:c8:04:f2:ce:07:
5b:b5:19:de:06:7c:cf:9a:73:a7:2c:03:22:f1:14:39:23:82:
c1:22:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:59 2025 by rpki-client