Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PfyQ3alBH3tdiMVo6dPBNY_trjo.roa
File: PfyQ3alBH3tdiMVo6dPBNY_trjo.roa (raw, json)
Hash identifier: WxeBxKNs9G9en0x7aFl4DcWGFGwIJat2iy8SLonrz2o=
Subject key identifier: 3D:FC:90:DD:A9:41:1F:7B:5D:88:C5:68:E9:D3:C1:35:8F:ED:AE:3A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A643393ECD8F94A2C61133BA7CE64B3D5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PfyQ3alBH3tdiMVo6dPBNY_trjo.roa
Signing time: Tue 05 Sep 2023 07:16:56 +0000
ROA not before: Tue 05 Sep 2023 07:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:33:93:ec:d8:f9:4a:2c:61:13:3b:a7:ce:64:b3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 07:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dfc90dda9411f7b5d88c568e9d3c1358fedae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:39:f0:0d:4e:d0:4a:93:bd:b8:82:b5:e1:
a4:c7:04:f6:3d:48:5f:03:ea:47:c3:89:a7:7e:a9:
41:66:b8:fc:47:95:08:f3:88:c8:5b:32:0b:f8:51:
dc:6d:84:1e:15:05:2f:b3:be:1a:0e:82:82:79:3c:
e1:b1:12:ce:16:50:ce:d6:cc:66:80:19:8c:2f:a3:
a3:da:d5:ba:e1:80:46:d1:29:30:e5:61:b8:24:64:
ec:69:dc:0b:b6:a3:f2:ca:a5:f6:e2:66:cd:6e:df:
01:fe:c7:0d:a0:0a:8a:6d:e0:fa:17:bb:63:1f:aa:
36:f3:b0:1e:da:0f:d3:11:48:c1:e4:f5:7f:f0:d0:
7f:1c:db:0c:fe:95:e0:34:fb:4d:7d:43:00:bb:64:
ba:96:9c:42:3d:cb:d6:66:a6:f4:f4:96:cc:2f:ab:
50:db:d9:59:78:f7:34:52:cb:10:90:01:f2:6e:28:
f5:40:10:2c:02:48:8b:49:07:a6:55:08:a5:43:3d:
4f:11:4e:b5:94:54:9d:f1:fd:da:1a:ab:55:a7:5d:
75:1a:d1:2a:c9:5c:be:cd:9a:23:d7:d9:4a:0d:bb:
47:61:f4:60:6f:c4:f1:f2:c0:64:24:4e:af:2e:3f:
99:34:cf:65:46:3e:0d:45:cb:fc:44:59:22:a2:3d:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:90:DD:A9:41:1F:7B:5D:88:C5:68:E9:D3:C1:35:8F:ED:AE:3A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PfyQ3alBH3tdiMVo6dPBNY_trjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:e7:92:dd:5b:8a:3c:f4:b7:7e:eb:fb:d6:36:2b:09:6b:3e:
51:eb:69:83:ef:3d:36:f7:0b:86:0c:c9:8c:99:94:fb:d7:83:
fd:a9:e4:29:98:9e:c4:44:64:c5:66:71:3e:c3:9e:73:7f:ba:
0e:95:3c:19:8e:f2:5f:4d:b4:51:da:f6:22:0d:2e:bf:78:f3:
38:18:26:77:51:d1:c4:3e:7c:66:c5:a2:da:ef:64:62:6a:9b:
f2:9c:15:d5:21:13:aa:69:3e:f3:34:23:82:d5:80:78:bc:70:
27:e2:dd:37:e0:39:23:51:3c:b6:d1:d9:82:cd:03:2f:82:2d:
ac:64:72:09:19:b5:6c:c2:79:65:8b:e1:c5:42:33:e9:00:01:
39:76:b0:9d:e2:58:de:df:c9:42:5e:ab:25:89:11:b7:1a:fd:
43:26:55:3c:bd:65:65:72:f5:59:dc:92:4a:c1:99:28:2f:b6:
25:ae:4f:80:23:2c:b5:4a:c2:9c:be:c2:35:4e:de:04:03:8a:
51:cc:3a:5f:8d:0f:81:83:dd:38:23:34:dd:20:79:93:af:4b:
a4:76:37:1b:4f:da:f9:33:76:4b:9c:94:88:5e:0c:3b:1b:2a:
9b:15:31:9f:9d:d2:7f:58:a3:a1:a8:05:0e:ca:9a:cf:f4:59:
2a:64:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:42 2025 by rpki-client