Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KrTuOPHwpS3_jjyEUnQR4dzZGM0.roa
File: KrTuOPHwpS3_jjyEUnQR4dzZGM0.roa (raw, json)
Hash identifier: nOE4zf8Bc6U0z4aIaxqop69mzkGPYI855P08h/Gyp+o=
Subject key identifier: 2A:B4:EE:38:F1:F0:A5:2D:FF:8E:3C:84:52:74:11:E1:DC:D9:18:CD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA52CC8CE550E3105C2D55BE24CA99534
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KrTuOPHwpS3_jjyEUnQR4dzZGM0.roa
Signing time: Sun 17 Sep 2023 22:04:50 +0000
ROA not before: Sun 17 Sep 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:a52c:57c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a5:2c:c8:ce:55:0e:31:05:c2:d5:5b:e2:4c:a9:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ab4ee38f1f0a52dff8e3c84527411e1dcd918cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:2c:e3:e8:4e:e8:f8:2d:79:14:68:bc:45:
ad:8d:a6:66:ed:c0:5c:10:71:e4:8f:3b:39:cb:d8:
a0:b0:84:bd:d1:c8:09:f8:3c:f4:5d:f5:b9:fb:02:
0b:c1:c9:ca:eb:ad:81:d7:7e:2b:b0:f2:8e:69:5f:
8a:ec:94:c7:cb:ab:66:7c:ea:5e:be:31:90:bb:41:
a3:dc:86:83:44:3a:8d:52:b8:54:8f:40:54:ab:30:
7e:4b:f7:45:3a:31:97:fe:46:9c:23:21:cd:c5:95:
1a:2c:f3:bd:a4:32:7d:4b:d1:ba:57:2f:e3:f8:36:
b8:b6:c4:92:42:12:fc:52:1a:f7:c4:a0:7b:3c:d4:
93:ea:34:00:f9:e7:f1:9f:8e:57:47:f1:fc:69:87:
77:e7:b8:75:4e:df:84:d8:93:b9:66:7f:3a:7f:a4:
1d:40:55:ef:8a:6c:fa:9a:67:b1:2a:20:96:6f:97:
48:4e:49:a2:aa:3b:cb:b0:d5:a7:e2:4a:63:0f:78:
89:60:20:52:b6:80:bf:3c:a7:24:ea:82:40:9d:a1:
98:94:82:bc:ef:9b:26:c8:48:d8:86:57:1d:e1:51:
9b:2a:30:9b:ee:82:c6:db:e2:77:85:0d:ed:93:08:
b2:c5:2e:be:19:91:13:b5:4d:a7:bc:f3:1f:75:bf:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:EE:38:F1:F0:A5:2D:FF:8E:3C:84:52:74:11:E1:DC:D9:18:CD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KrTuOPHwpS3_jjyEUnQR4dzZGM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:38:39:ba:93:74:db:4d:f8:97:d8:fb:c3:8e:c0:94:2e:40:
06:5b:d1:f2:4e:6f:02:91:43:c2:52:35:24:27:93:97:c8:f6:
45:76:e3:48:a2:49:33:aa:15:11:8b:1a:36:28:ca:84:43:01:
e0:36:07:52:3c:b1:ec:59:68:b1:c9:95:3c:8d:4d:1d:ce:74:
50:5e:03:df:d3:bc:7d:bf:24:ab:85:55:2f:09:ec:5c:e5:2e:
12:9c:2a:5c:fc:18:10:6c:3e:d3:b1:f1:29:c5:d5:06:88:8f:
7a:08:8c:47:78:c3:02:b2:ea:6e:3e:2d:85:86:0a:53:78:ff:
24:f5:bc:43:3c:80:bc:2a:45:0a:62:b9:d7:88:53:e9:be:69:
14:23:b5:cc:f1:6a:8f:f2:cb:8b:d1:60:e1:11:05:01:b9:ac:
1e:19:f5:d2:63:08:3d:ba:ad:2b:ea:43:07:49:8d:70:88:0a:
56:5b:fc:f5:d9:3e:8c:79:d3:26:a3:43:5b:0c:38:2e:9c:7c:
5d:b0:08:04:3c:2f:1b:6f:76:0b:d5:7f:c0:c7:73:e0:67:53:
60:cf:6e:b6:0f:8d:27:30:9d:30:4e:f4:c4:c1:d6:17:a9:55:
8a:37:69:79:ae:d8:87:bb:7b:5c:0f:a4:8f:83:23:d9:dd:99:
79:92:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:55 2025 by rpki-client