Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OMNCTKZgc0bWxppdfeCgngx4nx4.roa
File: OMNCTKZgc0bWxppdfeCgngx4nx4.roa (raw, json)
Hash identifier: uWJqltbr2oEyavO1IafmIVllnlN0SNUKudguUHHflng=
Subject key identifier: 38:C3:42:4C:A6:60:73:46:D6:C6:9A:5D:7D:E0:A0:9E:0C:78:9F:1E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A883C56751CEC5B103E3F0CF37C42D2B7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OMNCTKZgc0bWxppdfeCgngx4nx4.roa
Signing time: Tue 12 Sep 2023 07:12:50 +0000
ROA not before: Tue 12 Sep 2023 07:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:3c:56:75:1c:ec:5b:10:3e:3f:0c:f3:7c:42:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 07:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c3424ca6607346d6c69a5d7de0a09e0c789f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:a6:81:63:58:a2:41:e4:b7:b7:92:ac:3b:
85:7c:47:f8:5d:00:63:7b:01:df:0b:80:75:59:1b:
c1:f5:71:e1:23:a5:a4:51:98:d5:fb:a4:41:3d:82:
06:7a:c0:5b:bd:3a:cf:0a:de:98:a8:2f:1e:47:af:
71:29:43:a1:6e:67:01:29:4a:31:59:55:12:1b:70:
f1:f0:70:cd:e8:c2:33:4a:9c:e6:c8:28:15:59:25:
b7:4d:04:eb:7c:5a:c8:ce:6f:68:67:af:e7:99:99:
5c:78:43:5d:7a:3b:c5:16:dc:66:6f:20:94:79:0f:
89:85:78:44:ea:dd:9a:61:7a:a2:b9:96:1f:ba:48:
a0:04:3a:cf:8a:e2:14:48:ae:2d:11:18:9a:77:da:
71:a8:68:e4:b1:91:43:4e:00:20:76:d9:aa:24:b0:
c0:71:b9:88:3d:95:56:e5:dd:86:af:a9:08:f4:f3:
76:00:f2:34:e3:f0:b8:d3:12:d0:e0:5a:59:f0:e1:
62:7d:9b:73:22:90:6b:3a:9e:dd:d2:f0:e8:28:77:
4b:71:27:9d:16:ba:87:56:9b:f7:2a:80:a2:ff:91:
d2:24:ed:f8:7c:09:70:b8:4c:ab:26:04:b5:9d:ab:
d5:56:16:40:d6:f4:b4:1a:76:ac:3a:eb:2a:52:c4:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:42:4C:A6:60:73:46:D6:C6:9A:5D:7D:E0:A0:9E:0C:78:9F:1E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OMNCTKZgc0bWxppdfeCgngx4nx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:42:d0:30:4a:4a:ef:a3:70:89:a6:45:24:bb:61:c4:a7:98:
cb:f4:d1:b3:8b:bc:e3:9e:ea:e5:ce:34:c8:05:05:d6:e2:e1:
90:2b:10:52:97:fb:7b:d9:fc:f3:34:e2:8e:46:79:ba:04:9c:
3f:e8:34:5b:b8:ed:0a:25:a9:cb:d1:19:cf:5b:82:85:7b:47:
7c:5a:80:62:d5:ea:20:12:3c:9e:98:96:b9:24:4d:5d:2b:24:
91:db:56:44:9e:d0:e0:aa:ca:10:d1:82:0f:bf:31:a6:90:af:
34:f7:11:b0:65:bd:d5:c0:67:a8:66:9f:44:08:63:67:ae:93:
02:97:32:23:a3:b3:84:73:3e:1f:d9:57:94:53:4b:cf:02:a1:
d3:2f:10:39:aa:ab:ac:77:05:26:96:3c:6c:21:31:a6:f9:13:
96:da:29:bf:af:7f:b5:2d:d3:5b:f3:b1:69:bd:49:65:40:1a:
20:83:25:26:15:50:4b:3b:81:f8:63:52:77:21:0a:c4:37:8b:
d0:9d:6c:68:a6:9a:aa:de:99:91:01:22:19:7c:d4:33:cd:0d:
5b:5a:f1:a9:b0:81:45:ce:65:bf:b2:d6:ce:12:90:3f:47:31:
71:e9:71:0c:10:d6:28:15:d7:f1:ba:e4:0d:54:74:87:fa:e3:
9d:90:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:42 2025 by rpki-client