Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C6DAi5YdUk9ztpNXSnE2v2qGKb0.roa
File: C6DAi5YdUk9ztpNXSnE2v2qGKb0.roa (raw, json)
Hash identifier: GZ3AgSw7T7V1a5LDfvIx9GrR50rUUsJ7UdncEPTM2oo=
Subject key identifier: 0B:A0:C0:8B:96:1D:52:4F:73:B6:93:57:4A:71:36:BF:6A:86:29:BD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9289F87626075B5490533413D2684185
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C6DAi5YdUk9ztpNXSnE2v2qGKb0.roa
Signing time: Thu 14 Sep 2023 07:13:50 +0000
ROA not before: Thu 14 Sep 2023 07:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:89:f8:76:26:07:5b:54:90:53:34:13:d2:68:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 07:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba0c08b961d524f73b693574a7136bf6a8629bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:e2:ea:db:56:33:1e:38:d6:22:b5:13:37:
7b:a5:0f:48:00:39:15:1e:80:f3:4e:2b:c8:43:d2:
3e:07:5e:58:99:5a:64:9e:f7:89:1d:f8:d1:ec:eb:
21:cc:e0:b6:a7:3f:40:52:b7:70:f6:e4:26:08:cd:
e7:23:e3:18:d2:39:0d:b7:1e:34:f2:02:8e:6c:8d:
82:95:11:50:b7:91:b4:e7:15:68:48:74:5a:c3:c7:
2e:3d:f2:62:b2:6b:11:9d:6e:9f:b7:2c:95:70:ac:
e4:45:8a:35:97:61:e1:6e:9e:5c:27:df:7b:9f:87:
8a:56:d8:c4:2a:af:3c:8d:0f:3b:58:49:6c:fa:eb:
31:01:d0:ac:62:14:f5:f8:36:df:3a:39:4a:d2:80:
4f:ea:3d:66:c4:1a:6c:18:7f:39:d3:d7:98:c8:20:
4f:e9:be:2a:3a:69:e5:63:26:60:e1:48:76:ec:58:
5a:f7:d0:e8:d7:f4:c1:49:0f:72:42:af:55:7a:90:
ef:b6:99:e4:88:2c:4a:0f:92:4d:5a:12:63:38:dd:
7f:87:27:88:34:60:70:81:46:d0:47:ff:77:b4:0c:
83:4b:f4:61:fb:1a:f1:fa:72:bb:99:40:94:b4:a5:
fd:75:fb:6b:db:80:6d:6b:1a:34:8e:dd:6d:1d:12:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:C0:8B:96:1D:52:4F:73:B6:93:57:4A:71:36:BF:6A:86:29:BD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C6DAi5YdUk9ztpNXSnE2v2qGKb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:03:ba:45:03:3b:fc:be:cd:82:68:b9:ce:30:c7:c4:b4:b5:
8f:e5:ea:22:e6:b5:d6:19:de:d5:f6:77:65:34:81:36:f9:c7:
9f:98:85:e2:63:11:1a:66:93:38:2a:50:46:1b:c8:bf:ed:a3:
4a:35:9b:55:f4:80:5f:fc:67:9f:35:83:dc:f3:53:5a:77:30:
65:c5:79:a4:73:d8:96:a0:93:18:90:a6:3c:d7:2e:aa:57:cb:
5e:4d:87:e7:52:56:60:f1:41:51:4f:56:6c:5a:11:b0:db:cf:
bf:7b:c9:4a:0c:b9:b1:c2:62:05:6a:7b:47:4f:f6:67:73:5e:
1a:ea:7e:08:aa:02:2a:91:25:d0:8f:dc:a6:82:28:a3:53:57:
f1:c9:ed:78:f3:92:3d:38:a8:0a:61:3d:9c:83:e7:17:7c:69:
d8:f1:be:f6:5a:b0:1b:df:d0:59:bb:5d:a9:13:f2:63:43:51:
6b:05:6c:23:e4:d3:bf:69:e9:18:a2:c6:86:62:73:ef:0a:fd:
e8:ef:9e:fb:ff:ac:6b:3a:6b:c2:7a:77:82:16:2d:76:d1:f2:
53:a2:82:db:2a:2f:10:93:9b:4f:c7:08:92:21:54:96:13:1d:
fd:75:3e:64:74:8d:37:a6:a8:3d:8a:ca:b6:e3:26:8d:c0:41:
9c:98:03:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqSifh2JgdbVJBTNBPSaEGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDcxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmEwYzA4Yjk2MWQ1MjRmNzNiNjkzNTc0YTcxMzZiZjZhODYyOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSXi6ttWMx441iK1Ezd7pQ9IADkV
HoDzTivIQ9I+B15YmVpknveJHfjR7OshzOC2pz9AUrdw9uQmCM3nI+MY0jkNtx40
8gKObI2ClRFQt5G05xVoSHRaw8cuPfJismsRnW6ftyyVcKzkRYo1l2Hhbp5cJ997
n4eKVtjEKq88jQ87WEls+usxAdCsYhT1+DbfOjlK0oBP6j1mxBpsGH8509eYyCBP
6b4qOmnlYyZg4Uh27Fha99Do1/TBSQ9yQq9VepDvtpnkiCxKD5JNWhJjON1/hyeI
NGBwgUbQR/93tAyDS/Rh+xrx+nK7mUCUtKX9dftr24Btaxo0jt1tHRJZywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAugwIuWHVJPc7aTV0pxNr9qhim9MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvQzZEQWk1WWRVazl6dHBOWFNuRTJ2MnFHS2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG0DukUDO/y+zYJouc4w
x8S0tY/l6iLmtdYZ3tX2d2U0gTb5x5+YheJjERpmkzgqUEYbyL/to0o1m1X0gF/8
Z581g9zzU1p3MGXFeaRz2JagkxiQpjzXLqpXy15Nh+dSVmDxQVFPVmxaEbDbz797
yUoMubHCYgVqe0dP9mdzXhrqfgiqAiqRJdCP3KaCKKNTV/HJ7Xjzkj04qAphPZyD
5xd8adjxvvZasBvf0Fm7XakT8mNDUWsFbCPk079p6RiixoZic+8K/ejvnvv/rGs6
a8J6d4IWLXbR8lOigtsqLxCTm0/HCJIhVJYTHf11PmR0jTemqD2KyrbjJo3AQZyY
A40=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:52 2025 by rpki-client