Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFZkPInkVo-PkijvECl6fV-uBqM.roa
File: DFZkPInkVo-PkijvECl6fV-uBqM.roa (raw, json)
Hash identifier: +N3ZK+l+kJpIPn5Qq1Dq72XtdxoRrus9UFAAKHtQyd8=
Subject key identifier: 0C:56:64:3C:89:E4:56:8F:8F:92:28:EF:10:29:7A:7D:5F:AE:06:A3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9D7A91C28D65EAB6760756FF9A5A9528
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFZkPInkVo-PkijvECl6fV-uBqM.roa
Signing time: Sat 16 Sep 2023 10:12:50 +0000
ROA not before: Sat 16 Sep 2023 10:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9d:7a:91:c2:8d:65:ea:b6:76:07:56:ff:9a:5a:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 10:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c56643c89e4568f8f9228ef10297a7d5fae06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:8c:c4:84:84:49:4d:20:54:6a:be:79:a8:
64:fc:94:96:30:34:cb:96:a0:22:97:5b:34:31:78:
dd:42:6e:75:86:de:00:78:ae:88:9c:3d:0b:e2:34:
a7:3a:54:a4:c3:9e:1d:38:29:01:5e:9b:a1:aa:4b:
d7:e0:36:0c:28:3f:5d:83:33:cc:75:14:c5:f4:4e:
ca:c8:59:de:4c:5c:f9:2d:31:b1:9a:8f:ea:00:07:
1e:ce:4c:c4:9c:9c:4e:c4:cc:57:8b:7f:a4:50:26:
3f:4c:c4:6b:30:41:79:56:6f:b9:cb:6e:d2:6d:76:
62:23:ec:21:ce:cb:9b:ef:99:06:5d:78:51:b7:6a:
11:cf:a5:40:58:d2:63:17:09:f8:cf:c3:6d:92:8a:
8a:4a:5e:5f:a1:26:f3:9d:e0:32:3f:78:e4:c6:bc:
37:19:47:d5:ad:03:02:4c:73:0c:59:da:96:e6:f9:
de:49:67:c4:3c:0d:cf:8b:3d:98:9d:03:ea:24:28:
6c:be:07:19:23:29:45:8d:84:a4:5b:f0:b8:a1:d1:
58:bb:56:dd:a5:98:ba:14:a5:1f:33:e9:15:90:fe:
46:dd:9d:41:a6:3b:66:b6:43:f8:3d:7e:4b:f2:f8:
e4:88:fb:c0:23:ff:bb:f8:7a:0c:9c:cc:c3:3a:36:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:64:3C:89:E4:56:8F:8F:92:28:EF:10:29:7A:7D:5F:AE:06:A3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFZkPInkVo-PkijvECl6fV-uBqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:6d:36:79:7f:7b:27:c0:79:60:41:05:fb:f2:5b:04:88:7b:
a7:ca:eb:6d:a9:5e:be:4c:43:9b:c8:68:a5:7f:68:30:b0:55:
21:62:05:d5:a6:02:fb:e1:8d:c8:1b:54:bb:e4:78:c6:ae:e8:
35:13:d2:f4:12:69:c6:88:6d:34:c5:77:18:d0:94:f0:8b:e2:
36:22:8c:0a:89:22:29:e0:78:20:2f:1e:f3:6c:59:fe:70:38:
35:6d:c1:57:58:8f:a5:7a:31:b3:74:68:ad:eb:df:1c:66:5d:
5f:41:73:90:27:da:f9:07:f9:ee:9d:ec:76:3d:ed:89:c9:42:
4d:42:cc:7d:d2:36:7e:da:98:5b:c0:b7:a0:36:5a:9a:fb:0f:
28:b7:bf:2a:07:85:a2:46:2e:f3:46:90:0e:4a:b0:68:5f:63:
a7:87:25:87:e6:a8:af:85:6b:2b:20:ef:00:d4:7b:4e:0f:48:
02:d3:37:27:82:c8:e6:ec:b0:63:2c:64:1b:cb:5b:26:1c:33:
86:73:df:cb:4f:87:49:70:2b:fe:f4:5b:15:f7:9c:55:ca:19:
53:10:0c:b8:41:c5:6d:45:07:91:5c:4e:1d:6e:61:69:68:1d:
e2:c9:1a:cf:e3:6a:30:6a:f7:cf:62:49:19:fe:c4:f5:fb:06:
05:11:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:21 2025 by rpki-client