Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GujsvwRJaYzgksf1rKhWo3DWCl0.roa
File: GujsvwRJaYzgksf1rKhWo3DWCl0.roa (raw, json)
Hash identifier: P4e3IyLr8cPQ28VTY2QfA401jNNBMEoH/0PhT/qiXfM=
Subject key identifier: 1A:E8:EC:BF:04:49:69:8C:E0:92:C7:F5:AC:A8:56:A3:70:D6:0A:5D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A683C2A05D9995CBBBCAB7323B48B08E9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GujsvwRJaYzgksf1rKhWo3DWCl0.roa
Signing time: Wed 06 Sep 2023 02:04:47 +0000
ROA not before: Wed 06 Sep 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:683b:b7c1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:68:3c:2a:05:d9:99:5c:bb:bc:ab:73:23:b4:8b:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae8ecbf0449698ce092c7f5aca856a370d60a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:ce:40:3d:2f:9a:34:52:b1:d0:87:3a:71:
a3:0e:b0:9d:ab:d1:f8:81:78:8d:03:1e:e7:2c:f6:
2a:93:5d:1a:bf:86:ba:46:8c:ef:1c:22:df:4c:51:
35:be:da:78:e2:96:eb:19:49:06:75:0e:5d:de:2d:
7e:c1:76:a1:ef:c1:28:a0:ea:44:82:78:c4:ac:26:
96:39:d4:b1:35:53:f7:a2:96:03:2c:89:e9:cd:34:
ee:ce:b9:d2:a6:ac:c6:22:40:2a:ed:42:39:a4:c3:
61:2c:06:f9:3f:33:ff:be:e2:75:78:ea:fc:16:bd:
a4:0f:b2:20:46:06:ee:43:ef:83:9a:f3:ef:4d:ef:
f1:7d:75:6e:e5:7e:dd:ae:c8:ed:0b:19:ec:70:6c:
84:f5:bf:c7:a0:82:5e:45:66:8c:1f:46:f1:f1:eb:
32:9d:72:ce:67:6c:bd:49:14:7b:ed:d9:7f:0b:d6:
6c:e7:5a:e2:9f:c0:43:c3:63:39:a0:bd:48:2c:07:
db:fc:d5:4e:82:88:43:53:62:48:81:d0:b9:4b:37:
8e:7b:80:86:37:78:cd:e7:26:73:3e:be:56:1c:b3:
93:98:80:79:79:3e:d4:ed:3b:58:e1:0b:71:b4:eb:
30:fc:04:7e:d8:81:0f:26:c8:f7:ad:41:ab:a6:05:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:EC:BF:04:49:69:8C:E0:92:C7:F5:AC:A8:56:A3:70:D6:0A:5D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GujsvwRJaYzgksf1rKhWo3DWCl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:36:fe:67:cd:6c:ea:07:21:dc:bd:5f:b7:da:36:cb:0c:e0:
ff:32:74:01:46:ec:dd:f5:ed:e6:05:18:28:21:84:6d:44:f0:
6b:6b:34:cf:2b:f5:6f:78:5b:5f:7b:f9:13:16:73:49:46:77:
b2:92:31:87:a3:bd:da:99:ce:c4:15:56:8c:e0:7e:4d:1a:a7:
19:3d:60:e9:26:40:c2:a5:eb:ca:ac:c0:8a:a2:72:2c:2f:c6:
9d:c0:bb:74:cf:d7:28:c9:71:3e:c6:c2:1e:00:70:36:fa:c6:
a7:aa:f0:ce:94:b2:4a:99:88:d6:e3:f8:6b:91:f7:6e:86:c7:
5e:83:c8:db:09:d6:74:98:f7:0f:05:eb:d7:87:c6:83:70:b7:
26:75:9b:88:6d:ba:14:db:57:80:04:d6:d6:25:f9:be:45:ec:
99:dd:6b:a8:31:e1:b3:10:70:62:51:6f:94:db:6d:87:19:9a:
4d:72:94:19:13:fd:1a:c5:cc:27:c8:58:fb:9f:31:6e:6a:d3:
60:0c:f5:80:5d:d7:ce:6f:53:b9:16:ad:49:02:99:dc:2a:e9:
95:bc:b2:22:3f:ab:40:70:ba:e0:0a:0f:26:3f:1a:15:49:a1:
bc:b6:b6:7c:c6:1d:01:12:16:fe:fd:87:14:24:78:07:42:44:
f7:55:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:27 2025 by rpki-client