Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L43i6kqJZ6jvB2qBGJays_Rh3Pc.roa
File: L43i6kqJZ6jvB2qBGJays_Rh3Pc.roa (raw, json)
Hash identifier: DeynCwrNaryRDcBim7VBAnS4DeI26o9/GrT9vOIc7XI=
Subject key identifier: 2F:8D:E2:EA:4A:89:67:A8:EF:07:6A:81:18:96:B2:B3:F4:61:DC:F7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A91A6EB61EA4C31A071077D13124AD595
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L43i6kqJZ6jvB2qBGJays_Rh3Pc.roa
Signing time: Thu 14 Sep 2023 03:05:50 +0000
ROA not before: Thu 14 Sep 2023 03:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:91a6:39fa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:a6:eb:61:ea:4c:31:a0:71:07:7d:13:12:4a:d5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 03:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f8de2ea4a8967a8ef076a811896b2b3f461dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:32:36:ac:56:49:b3:1b:8c:71:1d:6d:7b:
a9:10:11:92:82:b7:86:86:27:6d:c7:04:c5:af:0f:
32:9b:0d:97:bf:45:d9:c4:ea:83:70:1d:dd:75:51:
89:d2:a0:54:55:77:8c:29:44:fe:64:d0:ce:cf:c9:
34:76:8e:54:dd:05:17:66:51:3e:f5:d5:38:9e:4a:
f7:70:bf:6d:1c:34:42:c0:ec:11:40:d0:3b:dd:24:
bd:e1:53:c8:fe:bb:00:7b:12:50:0d:61:ac:3e:c3:
82:2e:f3:18:12:b0:5f:d9:7a:e6:c2:22:c9:dd:6e:
38:7e:1a:93:4c:7c:fe:61:87:a9:60:2f:3f:b5:fc:
75:b7:3f:d1:a5:07:5e:01:fe:3d:64:f1:83:7d:5a:
b5:d5:55:63:da:7e:dc:df:a1:cc:f6:1e:55:dc:db:
5b:d6:f5:b1:f4:1d:cd:16:87:fc:8d:18:50:fa:7b:
70:d1:93:c9:de:01:ed:99:92:59:ba:16:c0:f4:67:
92:19:42:f5:e1:0d:55:d2:ba:a1:f9:61:52:d1:00:
29:a2:84:6b:ca:df:fb:85:8f:1d:87:cf:2c:66:d7:
fc:a3:13:ae:59:94:17:fa:33:2f:7f:48:1e:d8:8d:
e9:40:cf:51:c9:c2:db:4d:96:4f:7a:36:57:5c:b5:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:E2:EA:4A:89:67:A8:EF:07:6A:81:18:96:B2:B3:F4:61:DC:F7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L43i6kqJZ6jvB2qBGJays_Rh3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:4b:24:c2:e3:08:1f:b7:6c:00:b1:97:75:2c:10:c3:aa:60:
90:17:1d:a8:b4:b1:ea:ea:a4:25:73:e9:01:5b:e9:8f:78:95:
c8:63:6e:e9:f7:27:f8:58:32:da:74:01:f3:bc:dc:b3:d9:f0:
00:e7:dd:2e:b4:d2:69:ca:f7:82:06:9a:9c:cc:70:d7:d7:c3:
15:7a:2f:c7:81:0d:61:0a:f2:86:25:01:7b:51:da:f6:6f:69:
89:27:a5:ea:53:4d:27:6c:26:03:9a:1f:40:84:22:93:0f:8d:
9e:3c:34:cd:b2:d2:9b:5b:94:c7:14:5b:99:1e:ba:b3:98:05:
20:58:14:7a:2c:b6:4d:98:19:53:0c:9d:88:e9:94:96:10:54:
ef:6d:1a:23:04:72:13:e6:ed:42:83:29:d8:81:40:38:fc:38:
a6:78:5d:50:91:ef:bb:76:46:64:b8:9c:10:0f:14:f8:dc:3a:
e2:e1:ac:ac:c3:8c:65:9e:0c:46:b6:3c:52:c8:89:55:f7:85:
e6:5a:c8:dd:8b:0c:54:a3:fb:16:1c:f8:df:4b:23:cb:c8:07:
58:6f:d5:36:d7:4b:8f:e5:72:c5:ca:dc:db:90:bf:99:eb:79:
5e:00:a7:5f:5e:03:1b:7c:86:81:a0:e0:86:cf:06:2d:5d:6a:
04:0c:31:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqRputh6kwxoHEHfRMSStWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDMwNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjhkZTJlYTRhODk2N2E4ZWYwNzZhODExODk2YjJiM2Y0NjFkY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGYyNqxWSbMbjHEdbXupEBGSgreG
hidtxwTFrw8ymw2Xv0XZxOqDcB3ddVGJ0qBUVXeMKUT+ZNDOz8k0do5U3QUXZlE+
9dU4nkr3cL9tHDRCwOwRQNA73SS94VPI/rsAexJQDWGsPsOCLvMYErBf2XrmwiLJ
3W44fhqTTHz+YYepYC8/tfx1tz/RpQdeAf49ZPGDfVq11VVj2n7c36HM9h5V3Ntb
1vWx9B3NFof8jRhQ+ntw0ZPJ3gHtmZJZuhbA9GeSGUL14Q1V0rqh+WFS0QApooRr
yt/7hY8dh88sZtf8oxOuWZQX+jMvf0ge2I3pQM9RycLbTZZPejZXXLXNxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC+N4upKiWeo7wdqgRiWsrP0Ydz3MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvTDQzaTZrcUpaNmp2QjJxQkdKYXlzX1JoM1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIZLJMLjCB+3bACxl3Us
EMOqYJAXHai0serqpCVz6QFb6Y94lchjbun3J/hYMtp0AfO83LPZ8ADn3S600mnK
94IGmpzMcNfXwxV6L8eBDWEK8oYlAXtR2vZvaYknpepTTSdsJgOaH0CEIpMPjZ48
NM2y0ptblMcUW5keurOYBSBYFHostk2YGVMMnYjplJYQVO9tGiMEchPm7UKDKdiB
QDj8OKZ4XVCR77t2RmS4nBAPFPjcOuLhrKzDjGWeDEa2PFLIiVX3heZayN2LDFSj
+xYc+N9LI8vIB1hv1TbXS4/lcsXK3NuQv5nreV4Ap19eAxt8hoGg4IbPBi1dagQM
Ma4=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:16 2025 by rpki-client