Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SV9w7T4xy-6H4SV4NMGjnElN0eQ.roa
File: SV9w7T4xy-6H4SV4NMGjnElN0eQ.roa (raw, json)
Hash identifier: TO+pqVeb79blhvtVXY1zYvaQoraYvlVOaIDJVkNORG8=
Subject key identifier: 49:5F:70:ED:3E:31:CB:EE:87:E1:25:78:34:C1:A3:9C:49:4D:D1:E4
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9BFBE059438D83A4001DDEA3AAF4FD5B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SV9w7T4xy-6H4SV4NMGjnElN0eQ.roa
Signing time: Sat 16 Sep 2023 03:14:50 +0000
ROA not before: Sat 16 Sep 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9b:fb:e0:59:43:8d:83:a4:00:1d:de:a3:aa:f4:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=495f70ed3e31cbee87e1257834c1a39c494dd1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:f4:28:a4:2a:0b:ad:7c:71:5b:8b:1a:26:
de:16:78:ec:98:59:19:df:d5:b7:b1:8f:ee:f5:66:
09:f4:e2:ac:87:e6:07:6b:a3:22:7d:10:90:39:64:
26:5b:67:d6:56:d1:3f:bd:3b:6c:49:ea:fc:8c:dd:
99:03:29:f6:fd:4d:b4:0c:98:f5:4f:55:3f:93:82:
28:15:39:a2:c1:93:29:59:ea:3d:61:13:f9:35:53:
5c:f5:ba:34:d2:12:05:1c:be:68:ac:3a:5f:00:1a:
90:bf:a9:79:2e:f0:18:9b:51:1a:b2:3d:03:02:7a:
6e:6b:54:ab:ee:74:2b:65:f8:a7:cf:15:4f:a5:4c:
7a:af:36:ee:49:85:93:72:c7:20:b1:67:31:77:6f:
2a:32:83:a2:ac:a3:99:35:e1:93:96:5f:d4:33:87:
61:81:e0:25:ba:40:10:0f:61:be:aa:0a:3d:da:32:
90:ac:ec:61:54:e5:81:d5:0a:9b:ac:65:38:82:c1:
a0:85:f6:77:02:3b:53:d6:3c:b9:24:04:60:97:cb:
45:66:ef:6d:c7:d6:62:94:9b:5b:31:5b:fd:9e:cb:
14:39:31:ae:56:2b:1e:e1:6f:bb:9f:6e:df:17:bc:
4b:ec:18:6a:69:ae:55:b0:25:99:04:57:8e:17:27:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:70:ED:3E:31:CB:EE:87:E1:25:78:34:C1:A3:9C:49:4D:D1:E4
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SV9w7T4xy-6H4SV4NMGjnElN0eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:15:c9:ff:67:e3:97:a7:9a:c1:af:f9:d7:a4:ca:c9:57:1a:
55:3f:51:d9:ec:83:b3:22:cf:e1:b0:87:d8:d0:18:a7:2c:d1:
8b:f2:b2:0c:61:f0:ad:72:18:50:33:a9:57:b5:c6:85:b7:39:
96:e7:27:c2:ed:c2:5a:0f:55:ed:3d:08:c7:86:28:6a:51:db:
e9:11:0d:e7:f8:20:b2:33:96:a3:eb:9a:0c:0b:cf:b5:6c:be:
3f:76:87:54:f4:fe:ff:51:e8:f2:e7:fc:2b:ea:b4:ca:e7:cd:
a9:48:2d:4a:9e:a2:7f:a0:18:45:8e:14:45:83:1b:69:c7:6e:
07:9c:5b:60:cc:61:0e:09:12:45:5b:80:90:41:6a:ca:f9:c3:
de:ac:76:a8:3c:b7:d4:09:4c:63:5b:54:12:d1:83:d0:c8:17:
e6:b1:86:56:80:e9:73:ac:bb:38:1d:09:88:e2:11:d7:9b:e2:
0d:e8:87:bd:c0:e7:a0:4f:d7:6c:49:f1:f7:28:dd:18:93:69:
73:7e:a1:22:80:10:a4:cc:46:f5:55:81:82:26:16:a2:39:b3:
fe:be:54:53:bf:e0:fe:65:e3:47:dd:f1:aa:f1:1c:67:87:46:
0e:6e:74:05:8c:31:7e:83:36:4f:80:ed:84:61:80:35:11:37:
83:3e:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:51 2025 by rpki-client