Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HeEVlaUggGh66KfVLE2ZawdlGZA.roa
File: HeEVlaUggGh66KfVLE2ZawdlGZA.roa (raw, json)
Hash identifier: jAFZTm7Wa1sY8m4B1HwRVdKFexPT76abF6uqr1IEujc=
Subject key identifier: 1D:E1:15:95:A5:20:80:68:7A:E8:A7:D5:2C:4D:99:6B:07:65:19:90
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A917924A39B446261BB36B891893F93FF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HeEVlaUggGh66KfVLE2ZawdlGZA.roa
Signing time: Thu 14 Sep 2023 02:15:50 +0000
ROA not before: Thu 14 Sep 2023 02:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:79:24:a3:9b:44:62:61:bb:36:b8:91:89:3f:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 02:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1de11595a52080687ae8a7d52c4d996b07651990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:c1:65:b9:e0:b7:cd:62:bd:ae:30:4a:85:
48:9c:6c:0e:3c:ba:38:87:eb:38:fd:33:2a:e9:05:
06:14:54:98:d7:3f:51:69:27:2d:25:1a:20:bb:b3:
f2:ee:76:0b:9d:89:c2:14:6e:e2:cc:12:73:d5:ad:
59:97:78:ac:64:89:c5:d4:4f:92:cc:f7:f1:10:a8:
a7:2c:89:41:55:f7:44:7d:3f:ba:82:ca:dc:17:e2:
f5:96:53:d7:73:0e:7b:d4:2b:47:dd:a7:c7:9b:b5:
11:4a:57:c8:fc:51:f2:0f:e7:c0:22:e9:3a:65:17:
7c:d8:35:f2:94:d3:f4:4d:15:75:4a:10:d3:11:c0:
3f:b0:63:fd:b0:5f:22:3f:c5:b2:ad:7f:13:74:a1:
0c:84:0e:45:9f:f9:bf:75:ef:af:62:1a:d0:0e:83:
80:bb:6b:41:21:9d:23:08:71:70:b6:61:4e:ad:01:
96:3f:23:6f:84:ff:f8:67:83:db:48:fa:85:7e:61:
3b:c7:15:0d:f6:7c:dc:8b:f3:94:f9:c8:4f:30:d8:
3f:07:cf:56:c3:02:77:2c:64:44:df:37:2e:99:49:
9e:82:e0:ad:17:f3:5c:cf:9e:c4:3a:95:74:22:f0:
6f:77:21:e3:6c:a9:ed:20:65:ad:10:fd:31:fa:b4:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:15:95:A5:20:80:68:7A:E8:A7:D5:2C:4D:99:6B:07:65:19:90
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HeEVlaUggGh66KfVLE2ZawdlGZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:83:60:a6:fb:b3:02:23:18:14:2c:e6:28:2f:3b:ff:ce:85:
ef:59:8d:72:f0:b4:00:47:fa:38:f4:ea:90:0c:e7:ad:1e:17:
4f:53:ad:11:c2:a2:36:b6:77:e6:0a:68:48:42:4e:43:75:ef:
77:03:60:57:b2:02:8f:b2:48:d8:0b:86:0e:c8:8b:79:9c:de:
2d:61:af:3c:a6:98:91:23:da:f0:b6:52:ea:e9:8f:51:c4:2f:
53:ed:9a:81:b2:af:a1:5f:e6:8d:ec:93:70:b5:38:c6:f9:18:
de:69:9d:d7:a0:50:34:5c:e5:62:a4:1d:25:10:6a:00:4d:9a:
0d:71:9f:b3:e2:13:3e:b2:1a:3d:e8:77:6e:c1:09:60:00:13:
9a:62:29:33:2a:d7:fc:8e:c2:54:23:56:b0:f7:c5:5c:3f:c3:
bb:a2:c4:61:87:c4:c8:53:d0:c9:cb:9c:54:b7:95:5e:99:08:
32:ee:c4:01:8e:71:8c:54:f9:a3:02:93:ef:2a:32:1d:30:34:
76:46:88:fb:07:83:63:08:71:d8:76:ba:fb:8c:64:94:cf:7d:
84:82:79:54:d2:5f:00:4d:48:b9:83:8f:de:d5:09:ab:ae:75:
10:31:ef:eb:6e:41:cf:74:5f:e2:6a:aa:39:a6:1b:c5:d3:b3:
6c:be:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:55:56 2025 by rpki-client