Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G5s6ZkrYHrj7OCm6ajgBqgV5pxo.roa
File: G5s6ZkrYHrj7OCm6ajgBqgV5pxo.roa (raw, json)
Hash identifier: MdjJXmRVEXD8jqZBH3KL9GM1WVO4Ss8kt5pVuGsM6aE=
Subject key identifier: 1B:9B:3A:66:4A:D8:1E:B8:FB:38:29:BA:6A:38:01:AA:05:79:A7:1A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A815D883CF234A49E00C7715F6C327F46
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G5s6ZkrYHrj7OCm6ajgBqgV5pxo.roa
Signing time: Sun 10 Sep 2023 23:11:45 +0000
ROA not before: Sun 10 Sep 2023 23:11:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:81:5d:88:3c:f2:34:a4:9e:00:c7:71:5f:6c:32:7f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 23:11:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9b3a664ad81eb8fb3829ba6a3801aa0579a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:2d:aa:ec:44:22:3c:30:7a:b5:d4:1b:ae:
70:65:bf:ba:95:11:41:77:3d:56:04:c4:85:64:22:
eb:16:75:fb:5e:1a:2e:7a:ce:c4:45:37:2e:9a:b2:
d4:6b:21:5d:59:cd:3f:42:a2:a2:8c:c4:55:7d:bc:
82:05:99:0e:b3:55:cf:f0:fa:06:63:d5:fa:69:61:
70:36:31:e4:dc:82:d8:8a:c2:a5:cf:f2:d8:3f:cf:
43:72:fd:d0:8d:3d:80:e6:08:85:6f:33:88:34:1a:
46:3f:a4:6b:22:b5:02:5b:62:99:77:0e:a5:aa:e8:
5b:bd:db:bd:e0:62:3d:dd:a3:89:db:bf:de:c8:02:
99:b5:aa:6c:88:98:d4:a4:b7:28:1f:d4:70:46:b8:
de:16:d2:b5:d9:67:19:39:bb:91:06:1f:d2:18:55:
d9:e9:61:f8:6d:42:e1:b3:3d:85:e2:e9:e3:a4:ad:
c8:15:52:d3:cf:89:e7:e1:b2:67:da:02:ba:b6:c2:
40:e9:6d:af:14:83:17:6d:be:07:01:89:0b:87:47:
fd:82:09:b8:ee:fb:fb:82:29:2b:74:55:bb:39:fc:
18:c6:cc:96:79:90:6c:2b:28:a0:b4:84:e7:82:f7:
b7:f4:ff:0a:d8:90:44:db:87:79:92:0a:95:cc:e3:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:3A:66:4A:D8:1E:B8:FB:38:29:BA:6A:38:01:AA:05:79:A7:1A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G5s6ZkrYHrj7OCm6ajgBqgV5pxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:51:c0:bb:77:5a:6b:bb:b8:b2:d0:9b:f6:7f:ab:18:1a:20:
8e:1c:0c:51:44:e7:1f:ef:31:a1:b9:ed:50:20:9d:26:bc:29:
3f:e0:04:4c:a0:ca:37:76:71:95:8b:0c:1c:f9:ac:90:72:99:
f8:66:25:72:cd:e4:2b:37:a2:c2:49:8e:7c:fe:53:47:53:ee:
46:50:00:ec:2c:dc:56:94:52:a6:ae:59:5f:28:57:0d:85:08:
2c:33:2e:7e:85:4b:e4:a5:b5:7f:47:95:07:24:1d:3e:83:b8:
46:15:39:cc:82:24:2a:7a:22:3c:08:44:d8:1e:7a:2d:9a:92:
8e:d4:b5:0a:bf:3d:06:cb:b6:e9:12:c6:1c:94:dd:c0:c3:b5:
64:f3:72:d7:8a:cf:95:3c:26:47:92:12:51:fe:e1:d4:70:d2:
50:5b:71:dd:00:bd:8e:9d:66:31:0a:22:80:50:50:56:b6:ec:
86:49:f3:d9:dd:d6:ec:d2:ba:b9:46:0a:1b:84:2e:a7:66:f7:
7d:09:8b:a0:64:f2:fa:22:e8:32:bf:e3:2e:89:5b:98:ce:d8:
44:0e:9d:5d:dd:5e:4c:a1:5b:a9:ee:a8:02:3c:4f:9e:b7:5f:
1c:19:11:ad:3a:72:8c:52:3a:74:e1:61:ed:11:7c:6e:5b:f0:
33:2d:28:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqBXYg88jSkngDHcV9sMn9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEwMjMxMTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjliM2E2NjRhZDgxZWI4ZmIzODI5YmE2YTM4MDFhYTA1NzlhNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT0tquxEIjwwerXUG65wZb+6lRFB
dz1WBMSFZCLrFnX7Xhoues7ERTcumrLUayFdWc0/QqKijMRVfbyCBZkOs1XP8PoG
Y9X6aWFwNjHk3ILYisKlz/LYP89Dcv3QjT2A5giFbzOINBpGP6RrIrUCW2KZdw6l
quhbvdu94GI93aOJ27/eyAKZtapsiJjUpLcoH9RwRrjeFtK12WcZObuRBh/SGFXZ
6WH4bULhsz2F4unjpK3IFVLTz4nn4bJn2gK6tsJA6W2vFIMXbb4HAYkLh0f9ggm4
7vv7gikrdFW7OfwYxsyWeZBsKyigtITngve39P8K2JBE24d5kgqVzOOJKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBubOmZK2B64+zgpumo4AaoFeacaMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRzVzNlprcllIcmo3T0NtNmFqZ0JxZ1Y1cHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFBRwLt3Wmu7uLLQm/Z/
qxgaII4cDFFE5x/vMaG57VAgnSa8KT/gBEygyjd2cZWLDBz5rJBymfhmJXLN5Cs3
osJJjnz+U0dT7kZQAOws3FaUUqauWV8oVw2FCCwzLn6FS+SltX9HlQckHT6DuEYV
OcyCJCp6IjwIRNgeei2ako7UtQq/PQbLtukSxhyU3cDDtWTzcteKz5U8JkeSElH+
4dRw0lBbcd0AvY6dZjEKIoBQUFa27IZJ89nd1uzSurlGChuELqdm930Ji6Bk8voi
6DK/4y6JW5jO2EQOnV3dXkyhW6nuqAI8T563XxwZEa06coxSOnThYe0RfG5b8DMt
KJk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:08 2025 by rpki-client