Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FPKrIzITKLwQWEdaMbUcnN7W8E4.roa
File: FPKrIzITKLwQWEdaMbUcnN7W8E4.roa (raw, json)
Hash identifier: i8/rZ3YUyE8FHge/Du4l9z+NjHfmoXtDS7oeNlt5UgY=
Subject key identifier: 14:F2:AB:23:32:13:28:BC:10:58:47:5A:31:B5:1C:9C:DE:D6:F0:4E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A85DF2C30F7E5F23D7E664DAAE273D91B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FPKrIzITKLwQWEdaMbUcnN7W8E4.roa
Signing time: Mon 11 Sep 2023 20:11:50 +0000
ROA not before: Mon 11 Sep 2023 20:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:df:2c:30:f7:e5:f2:3d:7e:66:4d:aa:e2:73:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 20:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f2ab23321328bc1058475a31b51c9cded6f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:bd:ea:6c:fe:62:bb:18:28:81:b0:7f:17:
71:3b:7c:f3:bf:b7:17:bb:49:87:e8:8e:74:5b:27:
d5:be:d1:42:40:de:ec:fb:08:e6:64:51:40:6e:04:
63:08:b2:b7:da:c3:8e:d1:74:c8:00:47:31:05:f8:
5b:b7:76:38:9d:b3:ab:fc:03:91:6e:cb:af:03:da:
d2:54:de:40:a2:08:06:24:cf:31:a5:96:6b:42:ba:
98:f7:36:f2:f5:1a:f7:27:79:8b:c7:0a:9e:15:75:
64:d7:36:cf:fd:6d:c0:89:9d:e6:71:1f:b6:fc:03:
ba:10:52:33:07:d7:09:26:b8:ec:be:27:66:d6:66:
79:f0:6c:de:92:21:53:40:15:e3:6b:68:ff:c6:5c:
17:5b:6c:70:a4:ea:07:49:0b:0f:5a:a2:63:17:ff:
08:d5:2a:b8:42:d9:dd:88:a4:7c:52:53:0d:09:56:
72:3b:59:ea:26:65:56:89:ed:da:d0:74:a9:f2:93:
81:65:e8:0d:49:1c:05:ce:23:57:8d:0c:e4:1e:5d:
d6:c0:c8:d1:04:97:8e:88:6b:66:5d:c0:fb:99:33:
ed:16:d9:f3:6d:7a:f9:6e:f4:be:b4:43:75:72:13:
0d:5a:2d:43:0e:ff:a7:a5:e7:40:2a:b0:54:ed:2e:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:AB:23:32:13:28:BC:10:58:47:5A:31:B5:1C:9C:DE:D6:F0:4E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FPKrIzITKLwQWEdaMbUcnN7W8E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:3a:d9:da:15:85:34:4c:b6:4c:ae:d2:9a:6e:32:3d:a1:f7:
62:b7:cb:6b:7a:b6:12:f7:54:18:b4:0d:28:cc:0b:81:27:ec:
17:ca:f8:2f:7d:65:78:49:27:50:bb:99:4f:f0:66:1e:05:08:
f3:ce:fa:22:87:2a:73:df:17:d2:72:fc:b2:96:d0:b1:6d:16:
14:0b:a0:78:b8:02:22:80:eb:70:e4:68:51:95:d6:15:51:36:
8d:46:a6:12:7e:7a:d6:31:59:b0:0c:d2:f0:a9:17:ce:02:3e:
e0:d6:e5:00:fd:e9:89:f8:82:2d:57:05:c4:2a:26:83:77:28:
5b:23:e7:56:b5:04:cf:c7:32:e1:98:30:ea:07:40:14:ef:38:
62:b9:18:b9:ca:c8:8b:63:cc:e8:84:8d:b2:ae:83:f2:9e:52:
46:a7:24:88:e6:a9:d3:af:03:76:7a:b1:5c:53:cd:4d:e9:20:
30:35:e3:14:22:99:62:38:97:5a:8c:3d:dc:16:03:1f:b3:4f:
01:1d:3a:50:a4:32:d9:86:83:93:6e:30:cc:f0:bc:25:37:a3:
91:43:51:af:ec:53:ed:d2:bb:e9:e2:67:c6:06:eb:ea:cd:22:
a5:bf:70:8e:a2:5c:40:c8:e4:6c:68:e2:4e:c0:09:32:ef:ee:
43:98:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:36 2025 by rpki-client