Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ad9GrwGQERNWxAzL3B_8DRDlAaU.roa
File: Ad9GrwGQERNWxAzL3B_8DRDlAaU.roa (raw, json)
Hash identifier: GrVvDFtDKGKyLVQgooyMtzwDYwocz/ADm1mgdqDInvU=
Subject key identifier: 01:DF:46:AF:01:90:11:13:56:C4:0C:CB:DC:1F:FC:0D:10:E5:01:A5
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A86161AEA8516F8225B94408E896BAD09
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ad9GrwGQERNWxAzL3B_8DRDlAaU.roa
Signing time: Mon 11 Sep 2023 21:11:50 +0000
ROA not before: Mon 11 Sep 2023 21:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:16:1a:ea:85:16:f8:22:5b:94:40:8e:89:6b:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 21:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01df46af0190111356c40ccbdc1ffc0d10e501a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:b2:b3:eb:d2:52:05:3b:71:a4:31:88:2a:
76:77:a8:f2:50:04:c0:52:b6:24:ff:70:cc:7a:d4:
2c:3b:ba:0e:46:12:0c:69:40:36:33:96:c8:2e:65:
d8:ac:bc:5d:79:ac:c5:f5:37:84:b9:0e:7e:04:28:
dc:f4:a5:e6:5a:b6:33:c9:60:e8:d0:1b:69:7f:06:
f8:3a:53:4f:74:17:28:2b:5d:c1:a7:32:2c:75:cc:
8c:6f:08:0a:a7:d6:34:a5:14:30:06:b5:5c:d7:51:
64:06:18:0b:a5:fb:a7:70:12:9d:fc:a4:68:56:00:
3d:9d:ff:19:0f:1d:96:c6:30:1f:04:da:bb:20:dc:
44:e3:7d:54:96:a8:98:6f:4d:f5:33:31:35:98:06:
f8:62:ec:75:4a:c9:39:06:39:a9:47:41:95:f0:02:
10:87:47:39:c8:19:06:e7:ea:e8:41:fd:cd:c6:29:
5f:8e:1a:59:e2:06:44:ca:64:a7:e9:e6:9a:9e:d6:
99:ca:96:87:9f:06:57:c2:35:ae:ef:e6:53:19:39:
b5:ed:e9:28:7a:11:65:bb:ff:77:43:d4:ac:06:65:
95:da:86:ff:dd:20:31:0b:58:39:a0:c4:1a:c4:45:
26:ca:2f:8a:59:e7:9b:b4:f2:b7:77:74:bf:94:29:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:46:AF:01:90:11:13:56:C4:0C:CB:DC:1F:FC:0D:10:E5:01:A5
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ad9GrwGQERNWxAzL3B_8DRDlAaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:5b:09:37:43:d5:8a:96:15:d9:08:e9:fc:dd:6c:cd:9a:91:
dc:b9:ec:0b:92:8d:09:39:a0:27:f1:86:8a:66:23:2b:0f:46:
59:fb:bf:a1:b9:1a:3a:da:05:f0:75:8c:e8:6a:b3:91:ed:12:
f0:f8:01:13:8a:fa:0b:63:1b:df:ec:ba:1d:5d:47:e5:fc:67:
b7:57:c9:f3:57:a3:9d:0d:25:6e:ea:69:36:25:72:da:72:aa:
62:92:d6:02:34:56:5e:3c:92:3a:f8:9e:57:9e:24:af:ea:78:
ea:18:ea:3e:b8:42:ab:af:f3:39:13:9a:63:78:91:4e:fc:f0:
32:30:30:30:88:7e:95:82:94:51:8b:88:5b:e3:62:13:09:c8:
f8:a8:52:c2:7a:24:7e:27:45:00:3a:ce:83:4f:31:2e:0a:6e:
6f:69:e7:3f:2d:a3:20:e3:06:c8:d9:a2:25:2b:d7:0b:2c:07:
6c:d5:21:c7:33:09:9a:71:0f:fe:b9:52:45:cb:23:05:62:fc:
02:a4:fb:59:be:6c:a8:af:b5:e8:e0:20:b6:fc:af:b3:2c:56:
9c:a8:55:92:05:fb:56:0c:31:96:03:ee:93:88:19:76:d6:fc:
d9:05:bf:34:8b:0f:7c:73:b2:a5:f7:70:92:b3:94:ba:1e:7f:
89:d8:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:54 2025 by rpki-client