Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GZkjDapKGTGrsarQ28dK5Q5CiWc.roa
File: GZkjDapKGTGrsarQ28dK5Q5CiWc.roa (raw, json)
Hash identifier: nzajRkiBKYVkF/Xf7iZI6qGzNyST5LJJDJ6PGn3X1ZY=
Subject key identifier: 19:99:23:0D:AA:4A:19:31:AB:B1:AA:D0:DB:C7:4A:E5:0E:42:89:67
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A902EA2F2490666643FD9B66067ACD387
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GZkjDapKGTGrsarQ28dK5Q5CiWc.roa
Signing time: Wed 13 Sep 2023 20:14:50 +0000
ROA not before: Wed 13 Sep 2023 20:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:2e:a2:f2:49:06:66:64:3f:d9:b6:60:67:ac:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 20:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1999230daa4a1931abb1aad0dbc74ae50e428967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:45:ae:73:3c:ed:18:db:5e:d7:e4:0b:c3:
58:f1:4f:9a:f8:1b:a3:fb:2e:a9:25:5c:17:4a:a4:
0d:7b:77:6b:45:40:65:7d:ca:37:47:89:bb:69:ff:
fb:85:ff:dc:38:e6:51:e0:86:d6:be:3a:e6:c0:a3:
db:5e:54:f4:33:f4:ac:d4:7b:7e:67:cc:52:50:e1:
88:17:ee:1f:17:ff:ec:df:31:ea:7b:55:17:ce:9e:
db:20:68:51:b6:61:f9:c0:13:85:6e:b7:12:e5:23:
78:85:1b:9f:07:d5:09:86:60:9e:72:f7:01:24:ed:
0e:69:2b:7a:26:bc:81:55:32:a1:9a:14:04:6d:69:
b7:eb:3f:90:19:c5:f8:11:ee:df:eb:73:ed:72:f5:
90:10:f8:08:e0:a3:79:b2:90:70:51:20:26:d5:63:
0e:8e:eb:61:b9:72:5a:12:27:59:cb:8f:f8:f2:16:
e2:9e:74:0b:60:c3:51:5a:96:c2:8f:b5:a1:fb:22:
bd:a0:31:4e:2a:a9:da:23:36:b9:f5:b9:d3:98:3a:
21:f6:48:94:e8:dc:16:db:29:cf:01:1d:3d:28:74:
86:14:69:01:6f:e8:ad:a6:f3:54:a7:74:d0:7d:91:
af:7c:8e:0a:75:78:3c:6a:08:c1:f3:6b:86:ad:e9:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:23:0D:AA:4A:19:31:AB:B1:AA:D0:DB:C7:4A:E5:0E:42:89:67
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GZkjDapKGTGrsarQ28dK5Q5CiWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:a3:7e:89:27:84:ac:1d:7a:9c:ca:ad:82:77:3c:b7:b0:de:
10:24:16:9c:f3:96:b1:1f:f7:9f:3e:b3:23:e0:3f:f8:2e:87:
d2:a2:ac:1b:ec:6d:2f:cd:a2:73:55:68:16:09:96:03:00:e4:
42:0b:61:55:27:57:15:0a:da:3c:8e:c9:b1:d5:a1:c4:7c:66:
0c:b0:85:c8:80:b7:45:b1:00:48:6c:25:be:27:9d:f2:dc:57:
bf:96:86:bf:ce:ce:20:3a:0a:0f:44:2d:99:cb:27:55:e3:66:
04:1f:12:93:73:11:da:be:54:f3:43:df:b1:69:96:2d:10:b1:
c7:11:55:c7:10:dc:4a:53:e6:d8:4b:ea:dd:04:d6:c2:72:b6:
80:a5:33:b4:3c:5a:92:20:5d:e4:a2:37:aa:0c:4e:53:98:0f:
48:f8:d0:0b:f4:46:9b:ff:86:23:3f:93:d6:e1:13:de:57:76:
e3:23:97:44:38:6c:c2:a6:fd:f8:86:07:82:08:88:30:04:76:
e3:88:05:df:f8:0c:37:a1:93:0c:cf:dc:46:59:79:aa:6e:18:
a6:f5:37:30:9f:22:3b:f8:0a:7c:2c:9e:ea:96:61:f0:41:94:
19:f5:47:a7:1e:9d:ef:84:96:f1:dd:85:94:3d:49:5b:4f:64:
ac:ab:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:03 2025 by rpki-client