Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KOhUbOcDq_HbBe1L1ISem5MYpS0.roa
File: KOhUbOcDq_HbBe1L1ISem5MYpS0.roa (raw, json)
Hash identifier: HHY62ILVzmHJ2mtvKwODrS5qn9jiBPNgrvojwE6iCOQ=
Subject key identifier: 28:E8:54:6C:E7:03:AB:F1:DB:05:ED:4B:D4:84:9E:9B:93:18:A5:2D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A75C0ECDB88B9B87FE3D7DFB08FE18F28
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KOhUbOcDq_HbBe1L1ISem5MYpS0.roa
Signing time: Fri 08 Sep 2023 17:04:52 +0000
ROA not before: Fri 08 Sep 2023 17:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:75c0:62bf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:c0:ec:db:88:b9:b8:7f:e3:d7:df:b0:8f:e1:8f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 17:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e8546ce703abf1db05ed4bd4849e9b9318a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:a8:74:e7:26:8f:9b:0c:29:2b:13:c0:4d:
8f:24:1a:10:63:91:49:e7:6d:7a:65:ce:a8:16:18:
ea:c1:e4:4f:4f:6b:79:17:4e:ea:1e:db:3b:34:a2:
73:9e:ae:40:78:a7:e6:d7:b2:20:f6:71:8f:d5:1c:
ca:4f:38:fa:a7:a8:d2:22:af:08:f0:92:13:66:ee:
95:b4:b9:02:5a:a7:01:05:f7:a1:3b:ce:2f:65:d7:
49:dd:f8:1d:b6:3b:1d:82:4e:0e:7f:83:af:f5:a9:
05:97:f6:cf:b4:8c:bb:4c:fe:aa:98:95:67:b6:9e:
f1:6e:ac:c8:d8:89:91:b1:06:3d:53:06:b3:74:bb:
d8:b9:a5:45:0f:06:7a:69:09:ca:5c:0b:57:04:17:
1f:4e:9f:ca:f1:c5:e9:35:c0:ae:5e:dc:dd:9a:c8:
d6:32:a5:2e:90:88:73:a6:66:d3:2c:7b:8b:40:77:
28:77:f4:03:66:ad:1c:fe:bd:54:08:bc:7d:e6:f9:
68:4e:8b:dc:eb:d5:74:23:45:2e:7e:1c:3c:f3:2f:
b1:9e:b0:7d:64:02:cd:b6:d3:58:0d:dd:78:ed:bd:
64:42:8a:c9:b0:e6:48:d7:6c:6f:95:e5:2f:3a:d2:
4c:f8:bb:e7:aa:15:7b:33:c6:5a:51:ae:d9:5c:60:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:54:6C:E7:03:AB:F1:DB:05:ED:4B:D4:84:9E:9B:93:18:A5:2D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KOhUbOcDq_HbBe1L1ISem5MYpS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:0c:f9:93:e3:fb:97:58:4e:03:3c:6c:c5:4d:23:db:d4:7c:
33:c6:ff:e2:f6:9a:58:eb:e5:41:af:a7:b8:da:dc:cc:48:3d:
3d:f1:6f:1a:88:9d:29:11:7f:98:e7:29:a6:b6:c4:a0:43:7e:
7d:13:3c:a3:47:b7:d4:c9:19:6d:ce:14:3b:a6:6f:5d:9d:a1:
42:0c:90:35:99:d7:f2:62:33:ee:62:f2:28:1e:dd:8c:81:91:
10:06:bf:e9:5f:d7:cd:3d:b8:c2:5f:67:05:b0:09:49:0a:ff:
d4:4f:06:92:2d:c5:27:8b:4f:06:39:75:3a:17:db:ea:7f:22:
6e:c8:60:46:8e:90:18:e8:39:64:9d:98:12:49:b7:bc:39:f4:
81:84:c3:dd:2b:48:02:1f:94:4a:f3:da:21:a3:a4:6d:58:dd:
fc:0e:1d:20:bb:23:ab:df:46:f6:6f:50:23:e6:13:d6:a0:64:
05:ff:23:3b:63:d5:18:21:6c:aa:0e:65:b2:ed:89:72:1c:a0:
a8:0e:a8:9d:0b:bd:14:95:ce:05:39:a8:cd:f8:c4:0c:a1:2d:
ff:6e:a6:83:19:fa:1a:70:ff:44:b4:04:ca:19:06:44:06:64:
ac:54:c3:c1:53:71:16:f4:d0:4c:f9:ae:e8:58:28:60:74:1a:
45:e7:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:16:27 2025 by rpki-client