Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OCt0u8YBVIv0_ELlmwWJ5jb-_yo.roa
File: OCt0u8YBVIv0_ELlmwWJ5jb-_yo.roa (raw, json)
Hash identifier: YP6rfIx5s03Xuwn5bBbN/2jHWbqI+7/FEkAvMYJFWfM=
Subject key identifier: 38:2B:74:BB:C6:01:54:8B:F4:FC:42:E5:9B:05:89:E6:36:FE:FF:2A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A522F4647859A6FB57124E5E25F5AFEC1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OCt0u8YBVIv0_ELlmwWJ5jb-_yo.roa
Signing time: Fri 01 Sep 2023 19:19:04 +0000
ROA not before: Fri 01 Sep 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:52:2f:46:47:85:9a:6f:b5:71:24:e5:e2:5f:5a:fe:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382b74bbc601548bf4fc42e59b0589e636feff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:f3:f1:51:43:d6:67:a9:6d:ba:11:15:7c:
d3:b0:2c:c7:52:c5:ff:78:e1:d2:55:26:93:92:2d:
1e:07:3b:da:4e:16:dc:a1:e6:4b:0b:fb:ab:3c:ec:
34:c3:2a:6f:31:ee:83:34:97:45:8e:9e:9a:15:b4:
df:e1:1a:4b:23:43:dc:02:5c:ad:3c:36:98:e1:08:
43:9c:25:91:52:10:1d:21:cd:5a:20:12:3a:cd:ce:
2e:9b:6b:45:50:c2:8c:07:ce:47:7e:70:fd:30:7f:
2d:f6:94:e0:c5:5b:09:9d:ae:8b:8d:04:d7:cc:39:
e0:56:bf:91:74:10:53:58:57:5f:85:a1:d1:37:61:
c4:72:1e:56:3d:76:bc:24:24:2f:e8:82:86:bf:09:
ef:dc:ef:6e:a4:4c:16:b5:76:9d:72:49:c0:0d:ca:
de:bb:de:92:a9:af:db:70:6c:55:f7:33:24:d9:63:
04:74:c9:28:0f:e8:a3:3f:f9:4a:f8:4d:b9:21:cf:
89:8b:3e:f0:3f:6e:33:b0:5d:5d:a8:65:83:af:af:
db:8e:38:8c:b6:b9:be:4f:f7:2d:ff:13:64:33:09:
f0:7d:25:bb:1d:34:be:29:e6:bc:2c:91:c1:c8:4c:
6e:c0:36:00:1d:63:fb:a2:5d:cc:69:29:81:ee:3c:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:74:BB:C6:01:54:8B:F4:FC:42:E5:9B:05:89:E6:36:FE:FF:2A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OCt0u8YBVIv0_ELlmwWJ5jb-_yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3d:dc:91:3b:1b:e6:8c:1e:8b:f7:f4:77:09:58:d6:4f:55:
74:bd:1e:4f:6e:34:1f:3c:c0:aa:3a:af:fe:07:26:10:8f:56:
81:0c:8c:7d:39:ca:dd:dd:91:61:dd:e5:1e:53:da:72:cb:e6:
0a:5c:8b:99:95:21:77:8f:f7:d3:ee:18:8a:e9:bb:68:fb:38:
69:c9:b8:44:e5:f5:8d:37:df:34:04:98:9d:75:0c:fd:25:4a:
cc:81:04:2c:d5:9e:b0:75:8d:ca:f7:76:c8:16:2c:57:a3:4a:
e3:e4:ff:52:06:56:f4:9b:35:c7:60:0b:cd:a2:78:55:28:bd:
37:e3:f3:3a:31:6b:83:ad:7a:04:f3:d6:a0:70:58:d8:73:bc:
f0:d6:17:5c:2c:1e:e3:69:71:ba:c8:7b:23:21:6f:fb:89:84:
68:73:90:3a:f1:fa:f5:e3:d9:ac:51:44:02:f5:b2:af:95:47:
40:1e:1b:54:f8:c3:1b:4d:55:10:dd:0e:3d:3a:a9:5c:b3:5c:
73:c9:64:19:5d:b5:24:5f:4d:7f:ed:56:42:ad:ed:ef:fb:a3:
e7:81:2e:91:0e:c2:95:bf:9c:ae:bb:67:bc:ed:87:4b:07:e5:
18:17:56:d8:38:50:dc:20:bd:14:b0:e6:62:81:f9:52:ad:69:
c1:48:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:51 2025 by rpki-client