Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DRnMMl0sgxkXoXP4ZIC2OYbCKwM.roa
File: DRnMMl0sgxkXoXP4ZIC2OYbCKwM.roa (raw, json)
Hash identifier: c/hr6SBiDtIhOKG0JNZxeyiOitc/bZYqWl2ysj63REI=
Subject key identifier: 0D:19:CC:32:5D:2C:83:19:17:A1:73:F8:64:80:B6:39:86:C2:2B:03
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7CDC13641FC153C6AC953CA07522ABE7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DRnMMl0sgxkXoXP4ZIC2OYbCKwM.roa
Signing time: Sun 10 Sep 2023 02:11:52 +0000
ROA not before: Sun 10 Sep 2023 02:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7c:dc:13:64:1f:c1:53:c6:ac:95:3c:a0:75:22:ab:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 02:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d19cc325d2c831917a173f86480b63986c22b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:b5:27:53:8c:09:4f:ae:9f:1c:f9:52:cd:
ba:52:dd:0f:a0:78:31:7a:c9:55:63:40:3f:ac:00:
0b:96:87:12:b1:1a:23:46:70:d7:90:8e:50:3e:6d:
47:77:d5:d2:67:11:98:e0:09:c8:8c:8f:45:73:0b:
e3:b4:87:95:90:d3:64:09:1f:7a:e4:dd:74:fd:6b:
8c:8a:ba:4c:f6:35:15:f3:e2:40:0b:06:72:9c:ef:
de:94:c9:b5:a4:ff:b4:58:16:e7:55:cc:04:6e:ba:
8e:23:52:23:77:67:22:de:87:ba:31:2d:82:8d:53:
9e:b6:3d:59:ce:44:8c:e6:6c:7d:3e:88:e0:2f:e7:
38:f9:8b:88:26:7d:58:3f:c1:4b:77:21:5f:06:0e:
bb:a2:f8:d9:d7:b2:9a:e9:4f:ec:79:39:ca:ae:e8:
e8:d5:9e:2a:e9:69:7e:f5:a3:6e:1d:3b:a3:a9:06:
8c:ec:30:dc:ab:66:63:51:75:75:67:c4:89:da:2e:
2c:6b:75:69:00:0f:7f:6c:a8:93:33:60:85:90:87:
f9:02:ac:75:54:84:21:b2:d0:fd:27:a4:e7:e5:35:
84:92:7e:30:d6:e8:b9:86:b1:a5:8e:fe:ef:43:38:
12:9a:53:e2:28:7a:a9:c3:db:34:14:21:49:3e:9c:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:CC:32:5D:2C:83:19:17:A1:73:F8:64:80:B6:39:86:C2:2B:03
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DRnMMl0sgxkXoXP4ZIC2OYbCKwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7c:1c:5a:d7:1d:cf:1b:78:c3:07:91:1c:35:9a:e1:99:59:
8b:45:1e:1f:c3:1c:6c:31:bc:d6:70:d2:99:de:6a:cb:13:5b:
a7:c3:e9:77:c3:cd:0e:41:26:32:bb:24:2e:7e:52:83:8c:ec:
a8:11:43:7c:6b:9f:bd:10:88:74:50:f2:39:08:32:80:6a:17:
06:e9:2e:2b:9d:ae:08:9b:cd:40:a3:02:ef:72:06:e1:21:66:
b8:d0:d5:4d:71:98:ea:08:b3:7f:9d:54:a0:b2:e8:ce:80:10:
f0:a7:65:4a:80:d2:8a:c3:b0:d5:f9:8a:54:7d:d7:40:9b:e9:
79:c5:3f:bc:51:6e:29:fc:9c:8e:18:71:ec:2d:c5:7d:f1:1c:
75:ca:6d:27:e4:7b:a0:8a:61:ba:d0:8b:97:92:a3:dd:25:67:
38:11:d1:e6:f5:36:f0:8e:fd:ef:70:8f:84:f1:a0:d6:4b:37:
75:23:72:11:ae:33:a4:2c:10:e6:d4:7c:ca:45:a4:e1:79:b0:
72:f0:14:21:28:45:fa:e9:78:9e:9b:2e:9b:e7:37:9c:9f:9f:
5c:11:30:90:65:d5:03:fd:23:99:a5:a1:d7:73:d6:e7:fb:64:
99:04:dc:cf:bf:f6:5d:52:e5:b7:cf:33:69:f5:fe:7e:a7:5c:
41:5a:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:06 2025 by rpki-client