Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QbVgRDekp8cWUWh9l95XzVHOwcU.roa
File: QbVgRDekp8cWUWh9l95XzVHOwcU.roa (raw, json)
Hash identifier: 2n3H+wZ3MlzpWcYKVnUiZQBxkz/0aUooXPsOwRBoC5U=
Subject key identifier: 41:B5:60:44:37:A4:A7:C7:16:51:68:7D:97:DE:57:CD:51:CE:C1:C5
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8D24704FA6847AACC428A85C149D5A68
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QbVgRDekp8cWUWh9l95XzVHOwcU.roa
Signing time: Wed 13 Sep 2023 06:04:50 +0000
ROA not before: Wed 13 Sep 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:8d24:114a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:24:70:4f:a6:84:7a:ac:c4:28:a8:5c:14:9d:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b5604437a4a7c71651687d97de57cd51cec1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:7b:bb:a2:67:8e:db:dc:85:0f:0b:b6:6f:
f8:cc:34:75:02:b6:76:1c:bd:83:8e:26:b2:97:20:
4a:35:6d:4e:9f:a0:04:9a:7b:16:eb:28:e2:50:10:
2b:92:09:fb:d0:80:a3:62:07:bf:0e:a3:00:3a:97:
d4:8e:63:d2:92:8a:04:f0:9d:7e:c9:d1:43:52:fb:
54:05:a0:94:8e:e9:72:fb:ef:bd:15:9d:d2:2e:e9:
9f:e1:dd:51:ba:5e:73:7e:de:fb:dc:74:0b:10:5b:
42:c5:e8:3b:a7:50:3f:ff:c7:c9:6c:93:c5:84:f2:
81:ae:53:f5:fd:3c:d6:44:9a:18:a0:7c:dc:61:6a:
5f:9c:7d:76:a9:f0:37:93:12:65:c3:07:8f:db:0d:
3b:2b:d9:a6:49:1c:42:3c:f4:44:e9:8d:8e:10:65:
29:34:91:d5:42:2b:81:aa:12:d4:64:a3:5c:72:ae:
b7:58:e1:61:97:aa:db:80:5b:71:94:0a:a5:96:2e:
ef:a9:96:bf:be:cf:f8:fa:10:bb:fc:00:6b:8a:9b:
15:98:d0:22:c2:51:4f:af:42:a1:48:07:80:af:62:
19:f1:89:e6:d2:aa:43:3a:74:15:9b:88:80:d6:d1:
a3:91:f6:ba:3e:fc:1f:44:fb:ef:b3:6a:16:f8:70:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:60:44:37:A4:A7:C7:16:51:68:7D:97:DE:57:CD:51:CE:C1:C5
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QbVgRDekp8cWUWh9l95XzVHOwcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:2a:f1:21:a1:29:57:8e:34:6f:74:5a:4a:36:20:30:04:bd:
94:4b:f8:e6:cd:48:db:4e:f4:7c:f5:9d:3f:d1:47:f3:82:16:
4b:03:c8:b1:29:be:a1:47:f7:00:8d:01:93:d4:1c:5a:52:00:
d4:e6:86:3b:23:04:60:86:41:20:16:cd:63:73:7c:89:08:54:
fc:5c:d8:e9:17:41:3f:76:55:00:67:1c:ca:a1:d7:a1:f6:65:
14:a9:fb:e5:d1:9b:31:4d:1d:63:af:51:b6:04:ae:19:9a:a3:
42:9c:6a:99:e8:7c:d6:54:35:f2:39:2e:66:41:46:8f:87:77:
ab:2f:43:46:13:0e:cc:f7:c9:e2:b0:aa:d4:23:8e:ff:57:3f:
29:ff:6c:d0:5f:5a:49:c8:97:42:4b:77:7c:b8:15:89:d4:a4:
d9:24:b0:8c:5c:34:1a:ab:dc:31:57:28:3c:0f:f3:f6:57:86:
15:12:46:52:c5:8e:7f:2a:bc:a7:29:2a:e2:0b:22:22:71:05:
be:5e:fd:a3:4b:a4:c2:77:1a:c2:31:9a:07:07:3b:a4:53:b9:
7f:6c:50:e9:0a:f6:28:ce:5f:2c:ed:6c:d6:35:ea:bb:e7:d9:
50:21:fb:a8:56:c7:58:db:57:04:7b:42:98:81:a8:f8:01:41:
04:7c:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:05:52 2025 by rpki-client