Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IgYnJoDN2gndHr2zGg2QDMoEWhs.roa
File: IgYnJoDN2gndHr2zGg2QDMoEWhs.roa (raw, json)
Hash identifier: nWwpOL4ws25yeFmoHb4IPkokX6pDDjcxZhYLtzOBXl8=
Subject key identifier: 22:06:27:26:80:CD:DA:09:DD:1E:BD:B3:1A:0D:90:0C:CA:04:5A:1B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A958BEE13461176FBFC0484B29F0B0BA1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IgYnJoDN2gndHr2zGg2QDMoEWhs.roa
Signing time: Thu 14 Sep 2023 21:14:50 +0000
ROA not before: Thu 14 Sep 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:8b:ee:13:46:11:76:fb:fc:04:84:b2:9f:0b:0b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2206272680cdda09dd1ebdb31a0d900cca045a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:d4:fa:55:6a:ac:e2:25:af:3c:73:e0:8d:
bd:fe:d0:3b:5c:33:69:0c:6f:52:b3:85:e2:81:f3:
ae:8f:63:17:19:4d:e7:81:2f:9c:63:57:f6:9a:38:
db:10:b5:b7:a6:ef:94:38:3a:dc:4f:d6:2a:6f:51:
72:7b:7d:ff:b0:6e:f2:9a:ac:14:a9:21:3c:28:32:
6e:53:d9:dd:d6:fa:a5:74:7a:86:cf:23:40:9d:0d:
81:26:8d:39:65:24:03:78:c0:5f:11:d9:2e:67:3c:
fb:c2:30:02:5e:62:a0:d0:1c:13:d6:7d:f7:18:00:
19:7f:44:3b:2e:36:fb:9c:61:dc:be:8f:ad:97:23:
fc:6f:3e:4d:7b:92:be:3b:51:06:86:4b:9f:07:94:
9c:fa:a7:0f:b1:51:85:48:9d:cc:dc:56:d4:b0:a9:
90:a3:4c:c6:6b:3a:d5:41:14:60:9b:6d:96:44:c8:
94:0e:0b:16:57:86:55:af:fd:33:5f:9a:56:11:ac:
19:f4:7e:8d:71:b5:20:4d:fe:df:09:e8:0d:6a:c0:
c4:2d:f8:50:73:3e:a5:1d:a0:47:d9:fa:4c:d3:af:
8e:c2:8f:c1:01:a9:f8:1c:d8:81:da:bb:f9:e5:7a:
4b:e6:38:c2:ff:be:4f:54:db:1b:80:06:08:8a:ed:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:27:26:80:CD:DA:09:DD:1E:BD:B3:1A:0D:90:0C:CA:04:5A:1B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IgYnJoDN2gndHr2zGg2QDMoEWhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:6c:79:fe:00:5b:92:3e:90:98:ef:e2:db:7d:3d:c5:a5:54:
94:98:86:83:9e:b5:bd:0f:53:bb:db:0a:95:b8:e3:b6:db:d3:
11:ea:5a:b1:94:43:ba:46:6f:ad:84:88:64:f9:29:3a:6b:4d:
e9:b4:91:0b:b6:72:03:65:4d:9c:cf:0f:56:a8:d2:6e:b5:2a:
21:f8:dc:3e:62:33:1a:a4:ed:34:91:69:4a:dd:d9:8a:09:56:
20:f0:8c:5d:71:1c:33:c2:da:e2:ca:d8:9d:05:44:12:61:c3:
47:25:5c:b6:95:5e:61:ac:d9:2a:31:31:82:58:ef:d9:fb:8d:
ed:ca:64:32:72:c6:47:96:27:c5:f0:4c:5b:58:ec:68:02:23:
82:13:73:7c:2d:cf:66:8d:c2:fe:8a:97:4f:b1:6a:00:e7:04:
0d:4e:ee:1b:e3:64:e5:b8:e7:f7:9c:c3:cf:0f:17:b4:5b:1d:
42:fb:24:3c:d3:29:b2:2e:fd:3f:5f:dc:fd:cb:82:8d:dd:fb:
fc:34:67:13:bb:a5:3c:62:0f:d0:94:0c:70:9a:ae:4c:3f:31:
17:68:0d:72:03:3b:4a:63:1d:70:48:b9:0f:30:d2:67:c5:4c:
29:3f:f3:a2:7c:60:ee:d9:14:4d:ee:6b:49:19:4a:a4:a3:a9:
14:1d:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:00 2025 by rpki-client