Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CVvToftie_iyF9PQQZKxgbJe4iU.roa
File: CVvToftie_iyF9PQQZKxgbJe4iU.roa (raw, json)
Hash identifier: cqyaDUn9xf4azZmZD91KDQBk8dfibnmopkmRXrAY/S8=
Subject key identifier: 09:5B:D3:A1:FB:62:7B:F8:B2:17:D3:D0:41:92:B1:81:B2:5E:E2:25
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A86B47D5A47FD5E4616FFA6827EE3BFD5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CVvToftie_iyF9PQQZKxgbJe4iU.roa
Signing time: Tue 12 Sep 2023 00:04:50 +0000
ROA not before: Tue 12 Sep 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:86b3:f1ca/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:b4:7d:5a:47:fd:5e:46:16:ff:a6:82:7e:e3:bf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=095bd3a1fb627bf8b217d3d04192b181b25ee225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:4a:6d:58:92:d9:60:8e:58:24:cc:ff:fa:
07:95:4e:25:f2:45:12:ea:41:75:fc:7f:30:0d:81:
17:0c:1d:a1:59:9b:9c:d7:ba:92:8a:d6:da:e0:97:
ef:eb:73:72:af:ba:bc:51:2d:7c:c0:6a:1f:96:16:
d9:fe:bd:7c:4d:c5:0f:38:f0:91:57:40:5e:32:96:
62:17:fa:51:cd:8c:31:ab:bf:e8:c0:d9:d9:48:99:
d8:61:4c:33:fd:60:15:9c:6f:37:99:66:4a:d0:c5:
ce:79:98:c3:35:40:f5:d7:57:d4:14:35:04:4b:38:
6c:cb:72:91:8f:8f:1e:ef:89:37:4d:84:03:95:82:
1a:48:bc:73:c0:0c:4d:43:e5:1f:b6:e0:b2:fc:ce:
00:3c:1a:e9:03:df:6e:d4:87:9e:96:c5:bc:1b:44:
da:6c:3b:c3:ca:ee:16:c7:35:19:e1:67:e3:e7:37:
4a:d6:eb:57:a3:89:d6:48:77:23:7e:ff:93:72:a7:
11:37:67:b8:3d:01:d8:54:ca:9c:4c:bd:b9:dc:df:
09:9c:34:e4:83:eb:f4:4d:d5:a0:ab:49:c8:09:12:
f1:bd:41:74:13:94:f5:67:52:2b:a6:2a:f4:13:42:
6f:51:c9:7c:ce:99:bd:57:4f:84:30:0b:76:5d:7c:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:D3:A1:FB:62:7B:F8:B2:17:D3:D0:41:92:B1:81:B2:5E:E2:25
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/CVvToftie_iyF9PQQZKxgbJe4iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:ca:92:42:af:a0:4c:9a:22:c7:2f:92:77:31:56:d4:25:2b:
83:d1:f8:ac:90:32:6c:d5:1f:1f:14:71:f6:34:20:32:ab:33:
78:8b:bc:4a:27:58:55:7e:43:19:14:54:58:44:f0:e7:d4:ca:
2b:94:97:d1:bf:62:30:db:d2:36:02:b4:ec:22:c3:18:75:ed:
48:cd:41:41:46:d1:eb:8a:2d:c7:72:a5:2d:e7:64:67:52:43:
70:e9:48:8d:63:3e:f3:a4:36:70:67:f2:15:28:d5:1f:4b:ab:
26:a1:43:68:c9:58:37:fe:f2:24:ff:7b:3f:a4:f4:71:8d:fe:
dc:59:33:40:3f:61:02:d7:6a:5c:da:4d:c1:50:ac:54:7f:a8:
c7:b1:e6:21:27:b0:b8:a3:82:54:20:8d:ac:1c:d7:c0:7a:01:
ac:36:a8:59:a0:aa:40:0f:4e:6e:74:b6:ca:76:40:fb:c2:12:
51:c8:ba:87:8f:9c:05:a5:6b:63:40:3a:e8:f0:1d:1d:48:15:
8a:38:81:fa:a4:9f:1e:03:35:65:06:72:e2:5c:92:bf:df:17:
70:cf:0e:10:34:e5:58:7a:71:f5:4b:7a:64:4c:88:8b:02:e6:
0c:76:03:07:7d:46:4e:e5:3c:79:98:5d:5c:82:93:3e:66:84:
41:d9:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:18:39 2025 by rpki-client