Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KO5R9_nr4wKt2O1LvQnLV6AkOUI.roa
File: KO5R9_nr4wKt2O1LvQnLV6AkOUI.roa (raw, json)
Hash identifier: JNFoXTFeH7IUfE4pY8s96u0lrbRWKt0jM87PR1Ps9jU=
Subject key identifier: 28:EE:51:F7:F9:EB:E3:02:AD:D8:ED:4B:BD:09:CB:57:A0:24:39:42
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A48F362AE10E649EC6C487D552BBA7DA8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KO5R9_nr4wKt2O1LvQnLV6AkOUI.roa
Signing time: Thu 31 Aug 2023 00:17:04 +0000
ROA not before: Thu 31 Aug 2023 00:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:48:f3:62:ae:10:e6:49:ec:6c:48:7d:55:2b:ba:7d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 00:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28ee51f7f9ebe302add8ed4bbd09cb57a0243942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:52:2e:23:df:15:04:53:0c:df:5a:3a:9e:
a0:d1:45:42:76:d3:20:91:e5:2f:20:80:f7:97:f5:
da:51:16:1d:14:ef:e6:6e:ea:a4:09:35:7b:39:8c:
8b:2a:f2:9a:a2:a7:bd:2c:bf:06:20:34:8f:c0:f7:
90:dc:24:6c:e8:4a:48:56:f3:5b:c9:d9:5c:0c:eb:
a9:82:18:32:77:d0:cc:87:59:52:80:24:34:91:bf:
b1:4d:a7:d5:e0:82:10:8f:4f:44:c5:8e:5d:1b:cc:
40:47:c8:2b:3d:14:de:4e:18:1c:16:01:e9:74:66:
c0:06:3a:ef:4a:e2:92:49:16:8c:d0:4a:a1:5e:07:
22:cb:b1:0b:51:d3:42:ce:65:4f:98:29:25:88:46:
e2:b8:ba:ae:9b:e7:ec:14:fd:83:65:72:f0:66:68:
85:df:e7:09:a3:8e:f0:10:b1:ec:53:b0:d5:67:02:
23:7b:9b:c4:8b:13:de:d9:13:49:8a:7a:9a:10:22:
8c:47:ff:14:08:32:17:eb:67:78:39:07:c0:15:40:
0d:6d:b4:53:22:55:e7:50:d8:6a:fd:dd:0f:35:98:
c1:8c:11:cc:11:1c:3a:5a:83:23:f9:7e:e3:84:13:
f4:48:e3:9c:54:c7:49:58:c4:42:a0:8e:61:33:33:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EE:51:F7:F9:EB:E3:02:AD:D8:ED:4B:BD:09:CB:57:A0:24:39:42
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KO5R9_nr4wKt2O1LvQnLV6AkOUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:74:2c:6e:40:93:b2:79:dc:d9:51:8d:88:cb:2f:81:08:55:
a5:17:4a:46:61:a2:61:b7:a4:2a:f4:72:e3:b3:f3:9f:39:26:
b1:18:b4:df:e1:93:fb:18:e6:3c:34:ed:b6:b4:59:a1:09:1b:
60:c9:3a:8f:96:10:0a:f0:b0:79:5d:34:7c:27:2f:6a:66:9d:
31:dd:bd:d2:27:0c:d3:5c:a3:73:0e:ec:50:5a:73:d0:84:e7:
eb:9b:b6:e6:1e:31:65:64:e9:27:b3:3a:cd:bd:a0:41:31:7d:
4c:47:d2:51:36:54:4f:ea:9e:8b:9c:7a:b2:2e:a7:23:80:65:
45:b3:dc:6c:2b:0b:3a:ec:d1:f6:a8:ef:47:ca:b3:e8:26:3f:
16:00:7c:16:7a:b0:da:87:79:70:08:a7:43:21:eb:c0:45:54:
0c:34:67:5b:87:73:4c:4b:f9:85:05:1e:19:0e:6f:9e:a0:c8:
40:c3:82:00:09:33:27:42:9a:9a:2e:ac:71:a3:ec:2c:4b:a7:
71:f5:85:86:fc:2d:01:28:91:6b:db:88:01:8d:f9:fc:72:b1:
33:73:c9:40:aa:0c:8a:18:c8:6f:d5:61:f4:d7:15:70:9b:2b:
e8:d1:1c:38:04:f9:df:18:e9:70:9e:c8:5c:d2:9e:f8:38:64:
35:af:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:04 2025 by rpki-client