Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K_SGsKxuVf3CC8kRNkF4HK_EB4A.roa
File: K_SGsKxuVf3CC8kRNkF4HK_EB4A.roa (raw, json)
Hash identifier: QAS1J2U5IviSV28dHc95lGnZ9jxPHNlqGZ11BfmMRVc=
Subject key identifier: 2B:F4:86:B0:AC:6E:55:FD:C2:0B:C9:11:36:41:78:1C:AF:C4:07:80
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A59431AF55296B2892B2C8D1C4C365556
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K_SGsKxuVf3CC8kRNkF4HK_EB4A.roa
Signing time: Sun 03 Sep 2023 04:18:04 +0000
ROA not before: Sun 03 Sep 2023 04:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:43:1a:f5:52:96:b2:89:2b:2c:8d:1c:4c:36:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 04:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bf486b0ac6e55fdc20bc9113641781cafc40780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:d6:0a:4a:54:46:a0:12:c0:8f:41:43:e7:
37:9d:15:2b:71:a6:77:de:6b:10:33:b2:73:57:74:
f6:71:21:18:9f:a2:71:5e:a8:1d:e6:3b:69:3b:3b:
d8:78:20:39:12:00:10:b1:f8:83:61:61:af:89:b3:
42:69:6e:c9:e8:0a:4f:08:90:7a:e5:5e:d7:1b:9f:
16:7f:41:32:8c:84:4b:dc:ef:eb:7c:cf:37:9d:2e:
07:d3:a3:d1:64:2e:f0:ba:3e:45:4e:d7:c1:32:94:
cf:d3:be:dd:17:3e:3d:e6:d5:32:0c:98:7d:94:40:
2e:fb:be:6d:ad:d4:16:2a:ad:9c:f3:a0:5a:75:d8:
bf:c5:e3:c4:86:40:b3:f6:b3:f7:6e:93:99:b3:ac:
56:af:23:ed:36:46:a1:32:bd:fb:5a:c9:9a:08:22:
d4:7e:11:a7:f8:ea:60:1d:f9:12:9f:dc:6a:75:d8:
b0:54:ac:d5:db:f0:30:24:77:31:7f:28:65:b9:0d:
9d:43:31:82:38:57:1c:80:46:ce:0f:4e:2f:7f:12:
5d:8a:78:09:b9:b3:84:7d:13:79:83:78:28:aa:0a:
fd:c3:57:2c:86:b6:72:d6:1a:06:45:f3:32:b9:3f:
3e:43:47:62:7c:0d:47:13:fd:8a:b5:f9:cf:46:d4:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:86:B0:AC:6E:55:FD:C2:0B:C9:11:36:41:78:1C:AF:C4:07:80
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/K_SGsKxuVf3CC8kRNkF4HK_EB4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:0b:c6:9c:38:98:21:da:63:c5:f7:c7:6c:70:b4:16:0d:91:
2a:65:2d:ba:e7:a9:8c:83:db:07:53:d8:95:08:bc:10:e7:68:
e0:39:90:6b:7b:da:e3:86:63:09:21:99:10:49:80:d6:e4:d4:
a6:64:94:83:43:1f:6f:bd:7d:e0:ce:33:11:b2:73:ac:9e:fa:
1f:e6:bf:72:4e:61:22:0b:b3:ac:d8:aa:1b:9e:2c:64:2b:f1:
a1:36:b4:f4:9e:e3:60:7b:25:70:42:6b:21:cb:17:4b:11:fa:
6c:61:ce:df:90:fd:39:c9:02:07:5a:b5:a2:a1:6e:55:69:55:
80:05:d5:e1:d1:33:ec:cf:54:6d:aa:fe:ba:08:5e:f6:44:c9:
b1:49:a9:8d:75:c5:b6:b0:90:c1:26:0f:ed:d7:f5:f2:60:68:
a2:4b:31:54:17:ce:82:41:90:f1:12:b3:44:8d:71:8e:7c:97:
7a:85:72:f7:ce:07:a8:71:35:24:b6:01:5b:3d:52:b4:67:71:
75:41:84:93:73:09:c4:72:d0:17:5b:1b:60:d7:17:7b:5b:fc:
73:3c:4a:dc:ed:7a:d6:d0:4a:db:3a:72:96:a3:00:be:2c:9e:
de:b8:23:ae:f6:6d:34:3e:61:9b:da:b0:79:21:ab:33:27:87:
53:37:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:56 2024 by rpki-client on console-fra.rpki-client.org