Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A8sYn0tnjKJskQt_VrM8S0Oo7F8.roa
File: A8sYn0tnjKJskQt_VrM8S0Oo7F8.roa (raw, json)
Hash identifier: fBeNC1krRriXMLCo3qhqQvYvO0Xcl4BThainXciEgHg=
Subject key identifier: 03:CB:18:9F:4B:67:8C:A2:6C:91:0B:7F:56:B3:3C:4B:43:A8:EC:5F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A830EAF78F07F0AAF35C967888F247557
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A8sYn0tnjKJskQt_VrM8S0Oo7F8.roa
Signing time: Mon 11 Sep 2023 07:04:52 +0000
ROA not before: Mon 11 Sep 2023 07:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:830e:4858/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:0e:af:78:f0:7f:0a:af:35:c9:67:88:8f:24:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 07:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03cb189f4b678ca26c910b7f56b33c4b43a8ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:e0:ab:26:4d:0d:d1:33:0d:cb:35:79:e2:
aa:1c:75:64:cb:8b:fc:78:31:64:b7:e0:df:54:8c:
a2:90:aa:ac:92:0a:3f:3b:09:24:5f:50:63:b7:c4:
71:2b:70:65:66:9e:f9:75:66:a9:fd:c7:71:31:c3:
eb:07:47:2c:fb:3e:c3:91:1a:e0:1a:ff:08:92:0b:
f3:e2:45:8d:e7:b6:0f:06:86:55:96:a3:14:03:a4:
f1:a3:6b:f8:16:c7:4d:d0:1a:2d:6d:b4:c2:73:85:
e6:00:1e:ab:b4:7c:cd:e5:6f:7b:19:5e:73:c5:0b:
c2:ff:2d:96:9d:a0:34:8a:7d:2f:dd:35:7f:9a:c5:
b3:66:6f:83:57:d1:94:a9:8e:be:b6:e8:ce:07:2a:
96:d7:ed:d6:28:95:b3:33:0a:b9:f0:e1:16:c3:6b:
88:e1:df:88:b1:2b:3b:50:12:eb:5d:17:6e:4e:da:
6f:b9:69:26:43:d5:81:02:ea:a9:14:fc:58:80:0a:
78:6a:5b:5a:f9:3b:b3:d6:d8:d7:61:0a:1f:51:65:
59:2a:19:29:5c:75:03:b6:ed:13:c1:d1:39:48:dc:
4a:f5:5e:92:31:a8:66:e6:0e:e7:d8:37:29:03:53:
8b:ec:b9:06:ae:36:eb:50:b8:60:85:3c:0d:65:cc:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CB:18:9F:4B:67:8C:A2:6C:91:0B:7F:56:B3:3C:4B:43:A8:EC:5F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/A8sYn0tnjKJskQt_VrM8S0Oo7F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d3:d8:42:e7:21:41:eb:ec:f0:d2:8f:d2:d4:4d:13:d1:ae:
b2:29:92:2f:ef:4d:1c:53:3c:b0:25:2e:c5:da:bf:79:eb:82:
97:de:03:83:4f:45:bf:f8:c8:18:ea:e7:9f:e4:b1:73:2c:70:
32:6e:30:fe:ca:73:ea:61:72:ed:dc:5d:07:8b:8e:f4:d8:9b:
ab:7c:ca:5a:3e:dc:37:06:be:de:04:02:5e:4e:76:2f:69:85:
40:aa:98:6c:30:14:d2:7a:36:72:d7:b9:de:75:15:38:4b:ef:
3f:0e:a4:92:d4:df:c3:3b:b1:23:4a:ff:6d:49:73:80:49:60:
f6:9c:b9:b3:9c:27:16:78:19:bd:cb:d5:b0:14:33:d3:f1:d8:
3d:12:68:a5:67:24:1c:ea:7c:2e:cb:9c:68:75:d7:35:68:dd:
f2:b9:22:69:d7:27:50:b7:eb:0e:df:05:43:54:66:f3:3b:10:
18:9f:80:69:f7:b7:48:53:f7:a8:64:4a:ea:32:e0:14:13:ac:
a4:ba:55:1b:92:f9:87:d3:6e:46:47:f8:ee:85:00:56:0d:41:
18:03:74:7e:63:88:b9:9f:b9:a9:e9:ce:c3:0a:29:f5:de:17:
47:17:3e:7c:e5:f2:70:0a:24:71:2a:12:6a:63:3f:29:17:1b:
3e:4e:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:55 2024 by rpki-client on console-fra.rpki-client.org