Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K2-4GzWCVSsKvF9NV2z455ChBfQ.roa
File: K2-4GzWCVSsKvF9NV2z455ChBfQ.roa (raw, json)
Hash identifier: uCMWJ9bWBHmgKW1C/xVTaBSLYAVg/lse23ddhBRnEvY=
Subject key identifier: 2B:6F:B8:1B:35:82:55:2B:0A:BC:5F:4D:57:6C:F8:E7:90:A1:05:F4
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A56B2AC13D0C383721AE687D5B0581A0A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K2-4GzWCVSsKvF9NV2z455ChBfQ.roa
Signing time: Sat 02 Sep 2023 16:21:04 +0000
ROA not before: Sat 02 Sep 2023 16:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:56:b2:ac:13:d0:c3:83:72:1a:e6:87:d5:b0:58:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 16:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6fb81b3582552b0abc5f4d576cf8e790a105f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:1e:ac:74:e3:8a:ba:e4:c5:b7:bc:e0:b9:
7e:76:a1:3f:d1:ca:36:e4:36:fb:6f:7c:1b:d0:7c:
c3:c3:4b:5d:53:ac:c6:50:d3:80:bb:a5:08:a0:86:
c5:f8:a4:46:6a:4e:bb:4b:2d:71:bd:eb:65:46:de:
5a:20:3c:f4:ce:fb:d4:a2:34:6e:cb:57:36:fe:75:
60:d6:37:cc:63:8b:7b:0d:31:d8:0b:1f:7b:09:54:
c1:65:3a:07:6a:f5:fd:88:41:40:e7:33:c7:09:57:
50:4c:a3:77:33:48:2e:0a:60:1a:e3:e2:e2:6d:23:
72:7f:8a:71:33:63:35:b1:45:d8:9c:26:f5:aa:0d:
9a:d1:6c:69:3e:5c:d8:bd:ef:2b:fa:02:8e:50:99:
1c:4d:35:a2:60:c4:02:38:15:c4:e6:2e:e2:09:ea:
47:af:68:e0:20:8e:a7:5b:86:aa:87:9c:76:d7:b5:
b0:a7:f9:f7:92:78:47:32:0f:a6:b8:b8:bb:8f:7f:
6e:09:36:cd:f3:3f:54:63:42:b9:1d:0a:38:4b:48:
17:de:bc:58:5d:7c:16:e2:58:e5:01:1c:cf:91:52:
b0:d6:91:58:28:20:4f:43:fc:a6:47:50:52:4a:9b:
ce:a9:25:96:a4:39:8c:29:88:b7:03:4b:49:e0:63:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:B8:1B:35:82:55:2B:0A:BC:5F:4D:57:6C:F8:E7:90:A1:05:F4
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K2-4GzWCVSsKvF9NV2z455ChBfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:63:97:a8:45:9d:8a:77:b6:ff:05:86:e8:fe:7f:26:22:fd:
f9:ae:f7:ee:d3:af:c8:92:82:27:f9:ce:8d:bd:30:59:bc:0d:
2a:41:6c:bd:5e:9c:31:c1:df:fd:04:ea:3c:aa:f8:27:90:8d:
00:9a:46:fa:60:a5:b0:5f:fd:01:f1:62:83:54:c9:df:1c:47:
94:d8:e7:16:9e:ff:dc:e8:71:42:82:4e:8a:17:81:e9:62:b5:
9c:05:4b:4f:86:90:84:8c:0f:66:11:83:2b:a8:e5:a6:99:c6:
53:12:52:b9:ca:fc:5e:c2:9e:5a:f3:cc:6c:0c:ee:c4:21:6b:
48:7a:95:cd:58:ed:91:dd:14:7b:0c:69:0c:85:44:10:b8:8e:
41:ed:f0:bc:67:30:9e:71:d1:10:59:d2:10:32:e0:50:5b:c9:
7d:eb:62:7a:b2:c3:16:a5:95:57:5c:ba:a4:03:b7:9e:0e:19:
ec:da:6f:27:5d:cb:eb:9b:36:e5:9a:52:0e:ee:2b:cd:6a:44:
6d:38:d1:86:09:c7:ea:95:6f:20:e6:b6:61:0c:f4:40:8a:12:
0a:ec:f4:c4:d0:bc:ae:a0:4b:2a:44:26:1f:23:20:96:d0:85:
a5:59:c1:b9:f2:e5:47:6a:7b:7d:09:e6:8a:38:8f:e4:ec:84:
c6:c5:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:46 2025 by rpki-client