Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BsYFZIHTh-4TuX_pjCTv8imTrAQ.roa
File: BsYFZIHTh-4TuX_pjCTv8imTrAQ.roa (raw, json)
Hash identifier: Dol0HgeINW3ieFge8UzTh72dcwGu6KFU+CHslAHIJJI=
Subject key identifier: 06:C6:05:64:81:D3:87:EE:13:B9:7F:E9:8C:24:EF:F2:29:93:AC:04
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8B6CFC0EC99D173EB13E0ACBA9AB92BC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BsYFZIHTh-4TuX_pjCTv8imTrAQ.roa
Signing time: Tue 12 Sep 2023 22:04:50 +0000
ROA not before: Tue 12 Sep 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:8b6c:613d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8b:6c:fc:0e:c9:9d:17:3e:b1:3e:0a:cb:a9:ab:92:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c6056481d387ee13b97fe98c24eff22993ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:d7:38:13:ee:89:70:be:02:f8:67:44:63:
53:17:53:68:48:4d:49:a5:f7:8b:6b:ac:0c:77:5f:
84:5f:f5:aa:26:1b:ea:04:35:00:f7:48:9f:ca:46:
3e:d3:c1:b9:ab:92:a5:2d:77:bd:60:43:70:f0:f2:
5b:aa:b9:b3:9f:9b:50:21:03:99:91:fd:4e:9c:10:
c4:85:79:51:ac:06:89:32:a6:61:27:0a:44:c3:3a:
c2:a4:0b:38:5b:de:44:fc:99:df:b8:9c:a4:b1:64:
63:ce:94:83:c1:ee:cd:37:9e:29:5e:15:d0:3f:44:
36:38:43:15:e9:1c:78:4a:c2:4f:db:61:f7:a2:82:
0d:92:a0:77:b7:bf:33:35:b9:a9:1c:58:0b:35:84:
cf:98:16:a9:3e:ca:32:e1:5e:1b:31:06:2c:73:16:
d4:33:aa:00:53:63:16:ad:dc:61:fa:ea:f2:0a:4a:
f5:2f:4e:e5:6f:b6:e2:79:63:45:23:3e:df:af:92:
69:f5:d4:8c:04:c9:36:f6:da:f1:4d:62:8b:6a:f0:
bd:ec:99:a7:c9:57:33:90:cf:ec:a5:c9:89:6e:a3:
9f:9d:f8:e1:6b:4d:9b:e4:f0:3d:a7:b8:56:32:1e:
79:1c:cd:4e:e5:b6:4c:f0:33:96:db:08:87:f5:99:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C6:05:64:81:D3:87:EE:13:B9:7F:E9:8C:24:EF:F2:29:93:AC:04
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BsYFZIHTh-4TuX_pjCTv8imTrAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:d4:43:c8:80:34:99:f4:e1:f7:f8:af:98:54:f7:c8:b9:42:
da:34:3f:8e:a4:4f:44:78:7b:40:c7:23:66:15:42:85:ce:7d:
85:97:e1:89:c8:a1:ed:bb:d3:01:12:0e:8e:16:d2:fa:e4:83:
90:27:6f:09:3c:86:fe:a8:9b:54:16:94:d0:c7:a0:0b:eb:2c:
d6:06:6c:74:46:63:63:da:84:4a:b7:63:d0:27:f2:aa:9c:2b:
78:72:c0:ff:b0:21:2a:1b:bf:49:c9:f5:91:f3:2e:3f:01:f1:
f5:81:cf:ad:29:ef:13:4a:2f:34:06:29:eb:50:30:c6:d9:a0:
c9:cf:63:43:d3:57:0c:b0:8d:ba:70:0d:05:97:d8:31:42:a4:
d4:6b:58:ee:a9:c3:a1:4e:28:49:74:14:67:ba:9c:a2:73:46:
39:ec:be:ad:a4:a7:09:fc:71:41:56:a4:02:5c:86:ef:77:42:
a0:6f:91:f5:69:c7:8e:7a:0c:20:18:05:28:40:6f:1d:b9:44:
61:7d:8d:e1:5a:fb:12:96:4a:d2:3a:02:38:18:5c:c1:7d:d6:
42:06:80:92:d3:fa:ef:4e:e5:2a:af:31:21:ac:d7:bd:6d:12:
01:4d:fb:d7:59:05:3e:f2:ee:43:f1:f6:e5:ec:f7:ec:80:bb:
b0:55:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:59 2025 by rpki-client