Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BC6AFKnz2hQvDEK7Owou9VE7SLE.roa
File: BC6AFKnz2hQvDEK7Owou9VE7SLE.roa (raw, json)
Hash identifier: pFudN9HJsZmI6pLeqhPfVR1BQLrSIQutslvFR82koBg=
Subject key identifier: 04:2E:80:14:A9:F3:DA:14:2F:0C:42:BB:3B:0A:2E:F5:51:3B:48:B1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A73659EFA7276367837E0AA1D854652AC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BC6AFKnz2hQvDEK7Owou9VE7SLE.roa
Signing time: Fri 08 Sep 2023 06:05:54 +0000
ROA not before: Fri 08 Sep 2023 06:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:7364:12aa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:65:9e:fa:72:76:36:78:37:e0:aa:1d:85:46:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 06:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042e8014a9f3da142f0c42bb3b0a2ef5513b48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:9a:69:fa:32:fd:ef:e9:01:d6:4f:63:e6:
73:ec:11:7c:6e:fd:6d:9f:11:84:68:69:04:cf:42:
59:19:ab:cf:ae:fa:cd:3f:c4:66:bc:03:99:de:51:
75:2b:a5:68:04:e8:34:54:63:1e:40:db:f1:be:9c:
71:9a:41:cd:61:c0:b8:99:0c:8d:dc:cc:e0:79:35:
94:0c:07:c1:dd:85:7f:10:96:20:3e:9e:ff:49:82:
40:64:62:ab:a6:11:3e:6c:55:97:5a:c8:2a:99:e4:
a2:06:bd:af:93:9f:01:d1:8c:9a:d7:85:ce:1b:3d:
ca:16:84:7b:43:23:ed:ff:76:b7:a4:f3:ed:f8:35:
d1:3d:63:47:98:a1:4e:80:34:9a:02:a0:80:62:26:
70:4a:fa:a7:36:88:62:7e:eb:fb:e8:79:87:11:c4:
0c:2e:be:31:22:6b:b9:5b:5c:21:6c:94:07:5f:60:
c8:f1:66:65:be:28:3c:0f:11:92:42:ea:93:aa:62:
bb:c9:d6:29:d3:95:a5:63:eb:cf:23:7d:f2:a5:fa:
2f:3a:89:8d:2e:a0:ea:ae:53:75:e0:27:b5:16:42:
1d:3d:ec:9f:6f:d7:09:b0:58:e6:49:26:09:53:ba:
51:66:de:5d:67:f4:c7:1f:dc:fe:d4:97:a4:4f:c8:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:80:14:A9:F3:DA:14:2F:0C:42:BB:3B:0A:2E:F5:51:3B:48:B1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BC6AFKnz2hQvDEK7Owou9VE7SLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:9e:70:4a:6f:ab:56:b1:37:cb:22:7a:87:30:72:fe:f0:24:
e6:25:d1:96:bd:43:fc:00:eb:32:a0:c8:67:ba:9e:27:d4:5c:
dd:ef:21:7a:53:b4:bb:b1:4d:01:8b:6e:12:76:35:9a:ef:e5:
ec:0a:c9:31:f1:9c:bb:8d:05:19:51:18:8c:53:4a:93:6f:15:
2e:97:be:69:73:ea:2c:f3:83:b4:ff:68:52:0e:66:44:35:54:
a5:5f:83:8e:04:0f:02:5f:8b:84:2e:32:40:f0:c7:65:d1:a6:
40:6f:62:be:26:ff:38:54:43:2b:33:17:23:82:66:1c:a7:f5:
9c:cb:f0:b2:8c:f8:be:58:9a:c9:a7:7e:0d:e5:70:20:bb:f7:
9d:47:a6:c2:0a:a8:50:98:46:86:29:ce:c3:74:da:52:4a:91:
62:74:3a:a7:97:12:3b:03:34:d6:c6:ed:36:5d:76:2f:63:2e:
38:e8:36:50:61:5b:b6:4f:ef:7b:65:dc:15:8e:d4:6f:1e:67:
6d:14:29:24:88:29:6a:24:53:59:c2:7e:2f:dd:76:53:ea:74:
89:e2:af:8f:2e:85:47:2b:75:5a:04:39:26:4d:e4:72:ce:e5:
aa:b6:12:ec:f3:34:69:34:0d:19:99:f7:81:56:98:78:45:01:
8c:f8:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:09 2025 by rpki-client