Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NOexFLqus6YrhvGSzqqoi5WLgYw.roa
File: NOexFLqus6YrhvGSzqqoi5WLgYw.roa (raw, json)
Hash identifier: Zod8z7Cam2moOso4UlIKNmvudv8vJmuRIArmNx4mxbk=
Subject key identifier: 34:E7:B1:14:BA:AE:B3:A6:2B:86:F1:92:CE:AA:A8:8B:95:8B:81:8C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8EE5F6DDEEAD321CD6A4C4A61F6A9084
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NOexFLqus6YrhvGSzqqoi5WLgYw.roa
Signing time: Wed 13 Sep 2023 14:15:50 +0000
ROA not before: Wed 13 Sep 2023 14:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:e5:f6:dd:ee:ad:32:1c:d6:a4:c4:a6:1f:6a:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 14:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34e7b114baaeb3a62b86f192ceaaa88b958b818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:bb:bc:79:03:2a:b6:73:d6:16:10:31:0d:
7f:01:e8:a7:23:a0:75:74:84:8a:43:ec:b9:1d:a7:
76:45:da:34:a2:38:7a:18:66:98:6b:30:b6:29:32:
03:c6:e2:89:70:86:13:8f:b4:d7:1c:7d:bf:76:a3:
6c:87:54:02:41:7f:83:b0:5c:40:7a:15:d3:3c:3b:
f1:7b:65:e5:94:9e:8b:21:8d:18:df:96:66:b7:51:
65:cc:b8:32:7e:a9:ee:1d:50:ae:eb:60:e6:19:fd:
c6:5e:31:4b:6a:92:46:ea:40:3c:e6:52:ba:00:b8:
8e:0d:ee:9e:62:c7:30:57:4c:66:31:08:15:cf:a6:
4e:20:4e:eb:4b:f8:72:a6:dd:8d:db:bc:af:07:15:
80:72:3c:33:ca:46:46:b7:e8:5a:ad:04:b1:b7:70:
e4:20:7e:5c:66:32:85:3c:76:44:9e:51:cb:4f:41:
76:10:0f:3f:03:a2:5e:c0:33:f7:6c:f2:55:ee:84:
ab:9f:fa:84:3c:07:61:39:2d:b7:51:7b:4e:3c:17:
c4:db:9a:08:17:f5:d6:65:f4:7d:c1:6f:04:2b:50:
2d:e9:e6:02:1e:3e:84:0b:13:cf:c3:19:72:b3:4d:
54:39:16:75:10:df:a8:34:d8:98:ee:14:0e:11:4d:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:B1:14:BA:AE:B3:A6:2B:86:F1:92:CE:AA:A8:8B:95:8B:81:8C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NOexFLqus6YrhvGSzqqoi5WLgYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:97:bb:05:b9:d1:dd:4c:b0:35:cf:bb:ae:29:a6:d9:94:41:
0c:b5:83:cd:d3:c8:77:09:ca:56:62:2d:6f:af:30:8e:cf:b9:
f6:c8:ca:54:3a:a0:d2:99:f8:3b:1f:f6:79:ca:c2:43:f4:26:
3e:a7:df:51:4f:74:93:c1:56:73:5e:1d:01:dc:a5:7e:93:6b:
16:62:09:53:8a:a0:19:6a:18:f7:a9:fa:6c:70:4d:c0:cb:20:
24:86:f9:f7:e4:4e:a8:90:46:a2:28:02:74:e1:64:4b:47:aa:
50:bd:72:e6:91:05:3c:ec:34:1b:5f:dd:cb:4c:bd:42:78:3f:
b2:6d:2a:38:18:3b:1a:6f:83:e0:74:a4:d7:95:dd:e3:65:79:
c1:af:ab:48:ca:a6:6e:0d:37:2a:31:b8:0b:ce:ab:d7:65:99:
08:61:c7:97:9a:40:d9:88:e9:a3:c1:22:d3:e9:27:dc:d6:5c:
10:1d:0c:6e:45:e6:1b:cb:1e:9a:f3:31:c1:16:b7:fd:b1:b0:
96:16:e3:52:c4:d2:58:d3:e7:37:81:8c:b0:3e:4c:15:af:18:
c6:df:38:66:a6:f2:e0:b4:2a:b1:80:fb:61:7b:92:14:be:bf:
4f:b9:f2:b3:80:e6:5b:6e:20:9b:ae:1d:ec:26:82:8b:03:67:
13:0f:35:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqO5fbd7q0yHNakxKYfapCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEzMTQxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGU3YjExNGJhYWViM2E2MmI4NmYxOTJjZWFhYTg4Yjk1OGI4MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbS7vHkDKrZz1hYQMQ1/AeinI6B1
dISKQ+y5Had2Rdo0ojh6GGaYazC2KTIDxuKJcIYTj7TXHH2/dqNsh1QCQX+DsFxA
ehXTPDvxe2XllJ6LIY0Y35Zmt1FlzLgyfqnuHVCu62DmGf3GXjFLapJG6kA85lK6
ALiODe6eYscwV0xmMQgVz6ZOIE7rS/hypt2N27yvBxWAcjwzykZGt+harQSxt3Dk
IH5cZjKFPHZEnlHLT0F2EA8/A6JewDP3bPJV7oSrn/qEPAdhOS23UXtOPBfE25oI
F/XWZfR9wW8EK1At6eYCHj6ECxPPwxlys01UORZ1EN+oNNiY7hQOEU1GywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDTnsRS6rrOmK4bxks6qqIuVi4GMMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvTk9leEZMcXVzNllyaHZHU3pxcW9pNVdMZ1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIeXuwW50d1MsDXPu64p
ptmUQQy1g83TyHcJylZiLW+vMI7PufbIylQ6oNKZ+Dsf9nnKwkP0Jj6n31FPdJPB
VnNeHQHcpX6TaxZiCVOKoBlqGPep+mxwTcDLICSG+ffkTqiQRqIoAnThZEtHqlC9
cuaRBTzsNBtf3ctMvUJ4P7JtKjgYOxpvg+B0pNeV3eNlecGvq0jKpm4NNyoxuAvO
q9dlmQhhx5eaQNmI6aPBItPpJ9zWXBAdDG5F5hvLHprzMcEWt/2xsJYW41LE0ljT
5zeBjLA+TBWvGMbfOGam8uC0KrGA+2F7khS+v0+58rOA5ltuIJuuHewmgosDZxMP
NXM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:42 2025 by rpki-client