Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/INjJDvpQtWsO4pbgaHmijf72yBA.roa
File: INjJDvpQtWsO4pbgaHmijf72yBA.roa (raw, json)
Hash identifier: uGV0Z5PVVm/4JKoT0DPbOTcDrwX1oKunaMPbqs/ZMw0=
Subject key identifier: 20:D8:C9:0E:FA:50:B5:6B:0E:E2:96:E0:68:79:A2:8D:FE:F6:C8:10
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A59004626E3854C16208BD3B8C0A93810
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/INjJDvpQtWsO4pbgaHmijf72yBA.roa
Signing time: Sun 03 Sep 2023 03:05:04 +0000
ROA not before: Sun 03 Sep 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:5900:13ae/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:00:46:26:e3:85:4c:16:20:8b:d3:b8:c0:a9:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d8c90efa50b56b0ee296e06879a28dfef6c810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:4c:fc:cc:51:bb:90:94:2d:c6:7f:a2:4b:
97:d8:f0:6e:9b:54:ae:ac:44:b4:76:41:46:64:31:
96:b3:10:c8:a7:0f:2c:5c:e1:03:ad:4d:9f:f8:d4:
0f:5d:f6:06:f2:36:9a:14:c9:85:76:d4:54:1a:36:
a7:fe:ed:5e:cd:fc:a7:cc:bf:8a:f9:62:4a:a5:96:
29:0c:9d:b5:a1:e0:d3:a1:70:15:34:2e:b2:c6:53:
3c:1b:04:e9:15:b1:08:7c:ca:91:1c:1d:e1:46:55:
c4:f7:1e:07:7c:63:03:a8:7b:00:5c:36:f9:05:49:
20:77:2b:b6:f6:32:98:32:d4:81:fb:5a:d1:a2:11:
c9:1d:69:bf:d4:fe:9f:1e:b5:3f:e2:41:2e:24:da:
e1:be:c2:b7:26:50:f0:c8:b9:2a:e9:53:33:ba:4c:
f9:7c:1c:bc:1d:74:6a:da:13:17:ba:ce:97:76:af:
06:de:63:2e:fe:f2:a8:cd:d0:69:44:00:15:95:25:
c4:76:7d:7a:ec:4c:09:f1:39:85:81:f6:f7:b4:08:
c3:14:d0:f9:2c:ca:fa:da:f6:1d:3c:d2:15:3e:5e:
9e:a0:63:cb:7f:ec:38:71:80:a0:36:19:88:72:6d:
4b:a2:0d:92:09:b9:18:b8:26:6e:8d:1e:5b:4b:a9:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:C9:0E:FA:50:B5:6B:0E:E2:96:E0:68:79:A2:8D:FE:F6:C8:10
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/INjJDvpQtWsO4pbgaHmijf72yBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:b1:56:96:63:79:0c:41:a8:14:ee:7a:e5:0e:8e:26:29:d7:
6a:4a:f2:e1:21:5f:44:d7:a7:8e:ad:f9:a7:77:5d:d5:a6:07:
4b:be:bf:cd:45:7d:77:8d:a9:0d:be:f2:f3:cb:0d:00:64:68:
48:49:40:4c:17:d0:40:6f:b8:ed:d7:59:ff:e2:ad:56:40:d7:
6b:d1:56:ab:73:b7:85:65:72:cd:0c:49:5e:cc:96:22:e4:ee:
d1:c7:69:54:5e:c8:bc:eb:70:80:f6:40:96:1a:ba:29:9d:5e:
f3:c7:0e:4e:86:4a:ce:bf:bf:e0:bc:4e:2c:73:ce:74:d1:17:
77:0a:9f:81:5b:9f:06:b6:98:3b:9b:4c:ab:4e:7f:da:6a:72:
9f:0f:32:e2:fd:eb:56:9a:33:d8:ea:bd:4b:2b:ef:f2:55:37:
5e:5e:4c:ad:a3:40:dc:e1:58:1f:08:6a:d3:06:de:43:c8:05:
6f:df:16:e8:c7:4a:5a:52:fa:47:b5:7b:65:4a:94:dd:57:07:
49:3a:4b:52:93:61:bc:bf:b9:0c:96:c0:a9:13:07:ab:92:6c:
e4:d5:ad:72:91:bc:2c:85:87:34:e8:1e:2a:db:e1:d2:e3:1e:
c0:bc:47:19:7e:04:36:80:b7:26:57:c7:de:c0:9d:fb:af:7e:
6d:c4:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:39 2025 by rpki-client