Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EoZqw1BsI6JSPSJ_By_jK3Yr81c.roa
File: EoZqw1BsI6JSPSJ_By_jK3Yr81c.roa (raw, json)
Hash identifier: 6veMIQ/HCvWoC4iZfdXf0P71xCF81K9+r/ezY8jb2Yc=
Subject key identifier: 12:86:6A:C3:50:6C:23:A2:52:3D:22:7F:07:2F:E3:2B:76:2B:F3:57
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A970A9EE9F96F0C4055A8BE5B8530E93E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EoZqw1BsI6JSPSJ_By_jK3Yr81c.roa
Signing time: Fri 15 Sep 2023 04:12:50 +0000
ROA not before: Fri 15 Sep 2023 04:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:0a:9e:e9:f9:6f:0c:40:55:a8:be:5b:85:30:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 04:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12866ac3506c23a2523d227f072fe32b762bf357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:11:46:c3:55:d3:1d:93:ad:3e:d2:c7:44:
f6:9e:86:09:1e:81:e7:d9:09:9a:a1:de:4f:b9:bb:
04:93:be:4f:ac:aa:75:a4:b6:36:42:19:6e:99:05:
ad:04:83:88:d6:6a:1e:2f:7a:88:15:c9:04:17:1b:
48:24:4a:cb:19:c2:d2:52:51:c1:ef:34:5a:15:df:
7c:83:ec:4f:16:35:7a:de:c5:16:e4:e0:a8:21:33:
e3:14:cb:13:59:82:37:c4:43:02:e4:cc:f9:7a:5b:
53:1e:07:61:e2:ba:31:cb:ef:3a:ab:92:ae:bd:75:
db:91:eb:92:f8:d6:dc:ed:0d:fb:40:37:08:8c:24:
d3:32:29:1f:98:8e:b5:bc:cc:e3:d5:2b:b0:c4:47:
85:0d:c0:1c:71:4a:d2:3b:52:b6:6b:5e:4d:67:da:
12:8a:fe:c2:90:9d:3c:e5:6e:ce:52:33:65:38:ad:
5f:82:b2:b5:80:81:38:b2:13:f1:f6:37:5e:80:d3:
24:b4:d8:e0:7f:28:21:a2:46:a4:31:00:19:5f:43:
43:6c:58:5b:58:e6:b1:14:85:ab:52:9a:93:0e:dd:
0c:69:f8:74:80:3f:16:36:72:d7:de:69:fd:4f:aa:
37:1f:58:b6:4b:c8:c9:bf:c4:b0:31:f5:5f:76:a7:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:6A:C3:50:6C:23:A2:52:3D:22:7F:07:2F:E3:2B:76:2B:F3:57
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EoZqw1BsI6JSPSJ_By_jK3Yr81c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:77:af:15:3f:8e:f7:7c:10:db:ea:d3:b1:5b:45:1e:71:a2:
f7:d6:b7:76:3a:92:c4:73:28:ea:b2:c9:6d:b7:d9:bc:44:4c:
85:40:37:bc:60:e9:3f:6c:da:67:64:ac:2f:45:7b:d9:fc:78:
a9:48:57:64:06:3f:03:92:8b:a9:f0:95:f4:c7:e4:55:c6:6c:
75:c6:11:12:cb:06:64:11:e9:b3:8f:10:63:71:60:ab:dd:1b:
66:4f:83:b0:04:86:02:b5:53:63:1c:39:0e:70:f2:68:f7:6c:
2e:29:6e:2c:ea:20:ef:1d:96:15:14:80:90:23:7d:cd:ae:39:
2e:f1:91:bc:f3:9c:ea:80:bf:76:c7:74:1e:cd:87:e5:bf:4f:
10:37:3d:cd:3d:47:3d:cc:df:b2:bf:ac:e5:84:49:3f:bd:6f:
de:3f:8d:fa:1d:bb:99:e6:39:75:f5:7e:b8:d9:97:5d:ee:00:
d8:f0:87:8e:40:94:ea:9b:12:8b:9a:31:bc:23:01:5b:20:ee:
3f:1b:15:b6:e1:4e:9f:9a:b5:19:b7:2e:46:ae:e0:6a:5d:72:
0c:de:cb:68:a4:fe:e9:fe:1f:36:b8:6f:e6:26:2d:da:7b:aa:
e7:f3:2e:cc:e2:6b:95:8f:87:9c:72:e9:86:16:bc:bc:b0:cc:
2d:d0:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:48 2025 by rpki-client