Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Kgs9TJZW4wDjutQicSjRXMZSXqo.roa
File: Kgs9TJZW4wDjutQicSjRXMZSXqo.roa (raw, json)
Hash identifier: ERohX7vOqJET9bQuED6yTHOH7BWkVpYHI2AchrSx/FM=
Subject key identifier: 2A:0B:3D:4C:96:56:E3:00:E3:BA:D4:22:71:28:D1:5C:C6:52:5E:AA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9E1F5D432646C49E70301355FFC7FE85
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Kgs9TJZW4wDjutQicSjRXMZSXqo.roa
Signing time: Sat 16 Sep 2023 13:12:50 +0000
ROA not before: Sat 16 Sep 2023 13:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:1f:5d:43:26:46:c4:9e:70:30:13:55:ff:c7:fe:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 13:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0b3d4c9656e300e3bad4227128d15cc6525eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:95:5d:8b:30:e9:81:2b:aa:09:25:47:44:
eb:57:93:5a:03:b6:1a:ab:e1:3d:b5:2d:70:32:60:
c3:83:49:71:e4:41:49:8d:43:bd:66:83:7a:c1:04:
fe:8e:05:ab:b1:df:06:4d:5d:0c:2f:12:38:a7:a5:
dd:9b:2e:d1:19:0f:ab:a2:07:c0:0e:85:94:1b:ba:
2d:32:bf:f6:04:dd:e7:3c:e0:3a:46:88:dd:c0:e7:
59:05:82:b7:80:55:86:e1:dd:21:9c:08:40:82:ec:
ec:76:52:3f:d8:f5:63:9b:bb:ec:2b:c4:dd:11:db:
47:66:7f:6a:1e:e7:a9:02:c5:73:7a:40:49:4c:5a:
44:b9:07:6e:2a:71:f3:57:e6:53:df:f4:56:d9:1e:
51:8a:37:ad:84:86:e9:21:f7:07:8a:b9:c2:8d:c9:
95:83:d6:f8:36:af:1b:fe:d5:13:39:3c:76:03:58:
57:97:15:4a:a9:77:70:0f:f7:3c:28:50:69:83:7e:
99:75:0d:2c:b1:0c:09:12:c9:cd:42:2a:c4:32:07:
20:35:25:21:f5:14:44:8b:06:5e:90:58:11:fd:59:
0e:5d:e1:2a:51:cd:16:73:b8:52:da:af:95:a6:e7:
14:6d:1e:1b:50:a4:9c:c1:57:96:fe:9b:06:c7:b2:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:3D:4C:96:56:E3:00:E3:BA:D4:22:71:28:D1:5C:C6:52:5E:AA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Kgs9TJZW4wDjutQicSjRXMZSXqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:5c:5f:4c:f6:0a:81:f0:7b:45:21:4b:95:6d:f6:b0:ec:2a:
bf:0f:1b:a9:3b:7d:bf:4c:0a:2a:92:3f:05:7f:c1:fa:4c:27:
ca:a6:ea:e1:5b:76:18:ac:32:97:8b:df:4a:ab:d0:54:6f:d3:
3c:46:c1:47:1d:f1:ff:c3:af:c9:19:08:71:34:1a:40:1c:e3:
5f:83:05:c5:b2:a4:e5:d4:e1:a5:f1:ef:aa:f5:63:6b:ad:13:
27:fb:7b:0a:b1:6c:ee:0e:49:bf:29:5c:4f:d9:a9:e7:4a:5e:
22:c9:12:cc:11:38:9f:58:7f:10:5d:b8:30:89:2e:53:ab:c2:
99:1b:2f:31:7f:df:0b:89:1c:a9:00:55:44:ba:fd:a4:bd:3a:
4d:f5:f4:6d:91:01:16:65:30:b1:cf:3f:ca:08:d4:98:9d:0d:
58:9b:89:7e:ee:5c:5a:42:5e:ed:ec:71:4d:c8:5b:78:cc:ed:
8b:52:f6:f0:58:e6:3f:f1:cc:93:c1:17:b3:fc:e6:d3:06:55:
eb:8b:27:51:f1:c6:5e:88:03:74:c8:38:61:a7:c9:74:4f:58:
46:ce:43:b4:3a:1d:40:f3:e8:c5:60:25:bf:ac:a0:a8:22:90:
eb:76:bd:15:06:9f:e6:91:e6:b2:7b:4c:95:45:88:ce:94:d2:
55:09:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:31 2025 by rpki-client