Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FIGuRGeQiz6rXXw1oJoRiab9iv0.roa
File: FIGuRGeQiz6rXXw1oJoRiab9iv0.roa (raw, json)
Hash identifier: PXeB49VKOC4sZuXeTX0Zr2vZ+dbuA/w72EvmzApHBk0=
Subject key identifier: 14:81:AE:44:67:90:8B:3E:AB:5D:7C:35:A0:9A:11:89:A6:FD:8A:FD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A687402D2451F4731FDBF51580272D537
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FIGuRGeQiz6rXXw1oJoRiab9iv0.roa
Signing time: Wed 06 Sep 2023 03:05:47 +0000
ROA not before: Wed 06 Sep 2023 03:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:6873:79b7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:68:74:02:d2:45:1f:47:31:fd:bf:51:58:02:72:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 03:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1481ae4467908b3eab5d7c35a09a1189a6fd8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:93:4e:c7:0f:ef:d9:bb:1d:81:de:92:1b:
d6:9b:79:f2:16:97:92:f1:8a:81:98:2b:7a:0e:b7:
80:f4:55:61:f3:2d:13:3e:fe:3d:ac:b3:c6:af:1f:
10:10:84:bd:0b:cc:3c:9a:05:3d:16:db:bc:1d:73:
4b:c6:70:40:9c:12:45:22:94:9a:37:8a:ee:12:7f:
0f:bd:ed:e5:c1:62:be:50:af:d9:43:2a:db:d7:c6:
d0:93:7e:dd:3d:5f:f5:10:19:d7:02:53:53:2a:37:
dc:d2:73:f9:92:a9:ea:c1:b0:6c:01:91:85:89:dc:
6c:e5:0c:8e:9b:00:2b:18:a6:7f:23:cb:e6:42:7b:
6b:fa:cf:3a:59:92:3f:85:21:dc:be:9f:c3:95:6c:
4e:86:67:df:0a:29:4e:a1:7a:c6:3d:dd:20:f7:9c:
e7:8f:a6:92:30:ef:12:69:c6:45:6b:7d:1f:09:7e:
d0:2f:7a:f0:a3:00:2a:c6:b7:44:df:d1:c9:4e:43:
a6:d5:98:fd:d3:9c:bf:e7:9f:83:ce:56:ca:dd:e6:
44:1f:51:40:ea:70:3b:46:45:00:2a:fd:22:b5:0b:
2f:40:09:94:63:09:8a:85:92:bd:09:88:1f:b5:b1:
41:54:c1:cb:2a:f2:28:29:27:1f:2a:df:b5:08:33:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:AE:44:67:90:8B:3E:AB:5D:7C:35:A0:9A:11:89:A6:FD:8A:FD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FIGuRGeQiz6rXXw1oJoRiab9iv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:08:49:a5:db:76:77:9b:d4:f8:4d:2f:69:4d:e9:01:c2:38:
df:3c:1f:79:e0:63:bb:c0:c2:88:18:54:ab:b9:a3:f3:e9:75:
1f:4f:1c:45:c9:bf:3b:b8:fa:cb:bc:00:dc:7d:32:6c:b0:59:
87:e7:8a:31:5e:af:67:59:db:a6:48:85:bc:e7:59:7a:1c:ce:
0b:91:97:08:0a:31:75:f6:a6:56:df:47:92:f8:61:f2:34:86:
7b:57:ac:b0:7b:33:43:55:54:38:34:5a:dd:ac:0b:45:be:08:
7f:b3:37:05:0f:7f:ff:e5:8b:31:7f:cc:8d:87:4c:19:ca:c0:
0b:34:8e:5d:2e:dc:f7:8b:a3:0e:57:ef:e3:ec:6c:2c:09:98:
38:af:ed:df:64:56:fa:af:48:41:5a:6a:8c:b8:b6:76:4f:f0:
98:4d:8f:62:c9:28:1c:24:35:7e:71:26:6a:8c:76:d1:19:43:
e1:7d:0d:fd:27:16:2a:c0:a6:fd:85:b3:f1:71:11:61:5f:86:
30:82:fd:a3:9b:a6:12:a0:fe:f6:b9:1e:b7:79:45:e8:64:9d:
d0:fd:19:ec:dc:98:c0:26:ad:b3:1a:d8:8e:54:22:ec:fa:98:
9f:68:24:89:e5:36:fd:bd:9e:c9:68:36:e4:a1:6d:5d:6a:b8:
21:07:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:08:33 2025 by rpki-client