Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Am1QX-8g5tfjqPtg4OBpqDArL3g.roa
File: Am1QX-8g5tfjqPtg4OBpqDArL3g.roa (raw, json)
Hash identifier: NWAtnFhKrEp6e0g3RgpbJwMMEdMXmPfy1Xj8Ambq9+o=
Subject key identifier: 02:6D:50:5F:EF:20:E6:D7:E3:A8:FB:60:E0:E0:69:A8:30:2B:2F:78
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A95C1F1ECF7405CD89A652BC5C7883737
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Am1QX-8g5tfjqPtg4OBpqDArL3g.roa
Signing time: Thu 14 Sep 2023 22:13:50 +0000
ROA not before: Thu 14 Sep 2023 22:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:c1:f1:ec:f7:40:5c:d8:9a:65:2b:c5:c7:88:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 22:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026d505fef20e6d7e3a8fb60e0e069a8302b2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:a7:21:10:f1:2b:d2:97:dc:44:07:51:f6:
05:3c:c7:4d:50:a5:17:04:e0:21:b2:48:39:97:0e:
5b:f6:1c:26:25:89:aa:22:f2:d6:5c:c2:db:8b:67:
2b:73:32:6f:26:82:6b:2c:eb:3e:da:a4:3c:4d:40:
c9:60:f0:c4:22:3a:d6:fd:05:50:ea:16:16:d4:3c:
97:33:53:30:f8:f4:9f:89:3d:47:59:a4:9e:4d:11:
63:7e:85:68:cd:be:47:bc:8c:b1:b2:8d:1e:64:a2:
51:13:07:d1:67:7c:d4:0e:09:5f:f8:01:5d:42:cb:
1e:1f:23:47:59:1e:6e:e6:30:81:9c:04:97:fb:81:
70:6d:19:0e:0d:ef:96:3f:c7:b8:22:8b:5a:2c:d4:
cb:1f:43:e8:05:8a:4a:3d:26:52:d3:45:60:b9:e7:
27:2b:dd:70:2c:45:23:1d:53:d6:a5:8a:06:16:0b:
1f:b6:5f:ad:ed:2a:3b:56:b9:64:6e:31:d7:0b:53:
c4:26:31:0c:92:62:78:de:38:e5:f9:b6:f4:ef:4f:
0e:7f:0c:4f:92:e7:46:f1:a9:c9:b7:8f:c3:c0:bd:
c6:30:ad:9c:de:94:72:38:d3:33:f5:01:54:71:07:
f8:97:65:13:24:36:1a:67:f2:0f:1a:16:17:a4:d6:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:50:5F:EF:20:E6:D7:E3:A8:FB:60:E0:E0:69:A8:30:2B:2F:78
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Am1QX-8g5tfjqPtg4OBpqDArL3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b8:9a:c1:95:3d:89:7e:74:c7:92:c5:54:18:56:9e:9d:1a:
b1:45:cc:f2:03:9a:28:ed:2f:e8:17:8b:9a:d5:b8:a6:40:66:
28:f5:f5:06:10:19:3e:8e:33:7a:79:b5:54:1d:1b:84:5c:63:
c5:cc:59:7d:cb:8b:22:e7:84:88:49:ad:72:a8:5b:d4:f4:3a:
a9:28:2f:d0:22:ae:cf:89:eb:1a:a3:b9:3c:a1:7c:a8:28:4f:
f0:33:b4:27:63:92:1f:bb:3b:d3:df:5a:d8:d4:63:f2:c7:92:
89:48:9d:d0:eb:42:7e:2c:91:d6:57:18:fb:17:65:c1:1e:43:
f5:8d:e7:41:c9:8b:2f:95:73:dc:2a:48:6f:29:a1:11:43:15:
30:f7:30:a0:03:d7:bd:af:87:5e:d6:01:29:dc:e2:fe:f0:9a:
a0:f7:9d:02:db:40:c7:0e:15:e7:de:24:95:40:b8:fa:bb:2c:
c5:c0:9c:3e:20:3d:b8:7c:42:b1:2c:84:30:85:1c:8b:c2:2b:
25:02:6b:5e:6f:6d:64:62:67:cf:b5:55:84:fc:f9:fc:17:ac:
7e:0e:4a:f9:5d:3c:33:09:c8:03:1c:05:ef:c1:3a:6b:6d:5c:
bf:13:21:18:86:50:98:d0:d6:6f:c9:cb:dc:64:e2:1b:6c:fe:
63:56:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:38 2025 by rpki-client