Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DP7C9O-dMZV4EZyyGLVSEyF-q6o.roa
File: DP7C9O-dMZV4EZyyGLVSEyF-q6o.roa (raw, json)
Hash identifier: nsCeAXw6HXjFJJN87Gi2YQlXmeW1JSu996tHRLmHYAA=
Subject key identifier: 0C:FE:C2:F4:EF:9D:31:95:78:11:9C:B2:18:B5:52:13:21:7E:AB:AA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4CD94F5AC97D24B4DC89C096941E146D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DP7C9O-dMZV4EZyyGLVSEyF-q6o.roa
Signing time: Thu 31 Aug 2023 18:27:04 +0000
ROA not before: Thu 31 Aug 2023 18:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:d9:4f:5a:c9:7d:24:b4:dc:89:c0:96:94:1e:14:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 18:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cfec2f4ef9d319578119cb218b55213217eabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:26:4d:06:b8:af:21:45:e9:92:ad:4a:34:
3c:6d:73:99:0e:78:5e:51:91:df:70:46:20:44:5a:
1d:da:bb:2c:85:62:36:aa:d6:60:ea:2d:76:aa:5d:
8d:fd:18:be:e4:39:9b:b0:e0:27:00:5b:93:5c:4a:
35:d0:b8:fb:d2:24:55:9c:66:dd:dc:e8:f2:3c:c1:
4f:81:b6:96:fd:1c:ee:e1:04:a2:c8:98:40:b6:eb:
d1:e3:b3:7e:47:d3:50:3f:7f:8c:86:78:b8:eb:b0:
70:1a:63:8b:fe:00:29:37:79:f0:82:c4:8c:f7:f8:
c1:52:3a:2e:55:8d:40:4f:04:1d:df:0e:f3:f3:d9:
3c:f9:7e:b0:41:25:e6:76:eb:61:05:3d:2c:b3:c7:
74:cb:c0:85:1a:a8:db:a5:90:73:ec:07:be:d2:07:
dc:f5:65:f0:99:4c:b1:cb:87:0b:90:bd:62:1d:38:
64:f4:fe:28:4c:88:61:d8:9a:52:ff:43:3c:6f:3b:
cc:0f:80:92:06:13:da:f6:20:af:e0:24:5c:ef:42:
23:f3:10:5c:bc:79:1b:24:df:9f:e1:b5:79:b3:1d:
17:54:61:34:94:db:ae:0a:b4:df:a8:0c:79:83:5d:
3a:f1:03:e9:1d:a2:fa:e9:db:ac:b4:e6:a4:b4:6b:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:C2:F4:EF:9D:31:95:78:11:9C:B2:18:B5:52:13:21:7E:AB:AA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DP7C9O-dMZV4EZyyGLVSEyF-q6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:15:19:38:45:cc:25:9a:d0:12:a2:e6:ec:78:e7:ab:16:de:
e0:12:54:f1:e2:9a:8d:9d:41:c6:67:5d:6e:45:4e:8b:ee:ef:
9c:35:71:8e:72:6a:22:8a:13:21:84:bf:ce:00:8a:fd:7c:67:
21:d9:8f:6c:5c:64:0a:c0:e6:6a:ae:7d:58:d1:3d:ce:b5:af:
58:d0:43:2c:11:77:f1:82:a6:35:e5:8d:bd:0f:e5:2c:e9:42:
80:98:5b:e4:9f:9f:b3:aa:0c:5c:2a:20:f5:dd:d4:dc:6a:4d:
3c:27:f4:16:0f:61:0d:4e:c1:b2:3c:57:19:a1:40:50:2b:d5:
b4:c4:22:3a:0b:62:8a:13:f4:5e:fa:f3:1d:7c:4d:37:53:72:
b7:92:d7:d6:b0:1e:5b:49:1e:cb:3f:d8:aa:da:45:c1:6f:e9:
f5:1b:b5:5e:0e:10:24:a2:35:ae:48:dd:c4:56:99:96:3a:42:
7a:94:fa:05:cf:9d:65:55:b3:a2:b9:fe:99:2f:15:ce:44:d9:
2a:96:40:b3:01:c0:50:0b:91:07:e3:99:1d:5f:0d:a1:3e:44:
36:1e:b1:cf:c1:e0:ff:04:33:81:44:75:98:1a:0d:90:f6:a2:
06:06:d3:f6:4f:59:bf:e9:c8:b2:0b:9c:3e:ed:3a:3f:a1:f6:
f9:61:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:28 2025 by rpki-client