Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SojEX2MZ9ugVEBdnPWlqmw1Kbt0.roa
File: SojEX2MZ9ugVEBdnPWlqmw1Kbt0.roa (raw, json)
Hash identifier: +eEeO3dS6VikuOB+eiGI4alm8Bz9/296q/lrKZ+FUtA=
Subject key identifier: 4A:88:C4:5F:63:19:F6:E8:15:10:17:67:3D:69:6A:9B:0D:4A:6E:DD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA53505DF2771109EAF6177086624ADB0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SojEX2MZ9ugVEBdnPWlqmw1Kbt0.roa
Signing time: Sun 17 Sep 2023 22:13:50 +0000
ROA not before: Sun 17 Sep 2023 22:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a5:35:05:df:27:71:10:9e:af:61:77:08:66:24:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 22:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a88c45f6319f6e8151017673d696a9b0d4a6edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:9e:83:a2:dd:ef:b8:27:a6:88:ae:34:c5:
a4:85:92:81:82:05:ce:9a:da:5a:db:0d:22:93:7f:
38:99:f9:72:f5:83:7a:49:a0:ae:4c:77:bf:50:f3:
0a:f5:75:92:3d:dd:e9:9e:50:58:9f:5e:ff:79:2d:
e6:54:f4:6c:87:f4:75:b0:43:09:8d:0c:b0:c9:4c:
90:03:ba:17:77:26:2a:ef:0c:c1:76:70:ea:1d:b0:
6c:7d:af:71:7c:c1:d4:cf:31:63:f9:e5:4a:d8:bc:
b2:f1:55:a7:83:63:6c:b5:39:1a:9f:4d:4d:57:17:
3f:22:ad:f0:f7:35:b8:b7:c9:82:ff:bd:e5:bb:7c:
4b:38:88:b5:e5:71:ca:ee:a2:7e:86:b5:b1:ab:d0:
1b:be:8d:bf:b6:29:39:91:ee:63:b3:34:c6:77:d5:
cf:51:43:46:ca:19:61:60:bc:d8:d8:3e:69:11:3b:
06:b2:bf:74:c8:61:88:08:d1:f4:e0:db:f7:45:c3:
c4:c8:8a:a4:56:a7:eb:dc:03:b6:b3:12:f4:73:3c:
27:55:f4:7a:35:3b:89:b4:a3:61:22:37:9e:eb:37:
3b:f4:1f:84:7e:06:da:34:6f:6a:59:83:f8:77:2e:
29:b1:ab:63:1e:86:ad:66:84:ac:5b:50:2a:17:da:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:C4:5F:63:19:F6:E8:15:10:17:67:3D:69:6A:9B:0D:4A:6E:DD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SojEX2MZ9ugVEBdnPWlqmw1Kbt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:a8:83:a8:05:9c:53:ec:5b:79:00:9e:26:01:a3:d8:99:5e:
96:46:e0:17:ed:e3:81:aa:4a:c1:4b:18:7d:65:ab:fe:f1:d5:
b2:f5:98:e3:c0:b8:72:0c:4a:a7:e9:77:78:5e:c4:cc:22:df:
2c:32:69:ca:1c:b0:29:0c:c3:fd:ea:2d:e4:2f:d1:ee:36:5c:
09:72:6f:b5:a0:9e:9a:83:b7:b4:9c:5b:6c:5a:d0:19:e6:da:
ef:86:c4:af:64:bd:34:36:5d:df:7c:84:a8:0a:b7:07:c3:38:
4e:64:fc:72:8f:bf:a3:2c:00:1f:d3:78:bd:54:87:a9:f2:0f:
da:09:e4:d7:b2:99:bf:60:27:4d:b0:0d:89:1c:83:a3:93:f9:
4b:d8:5c:6f:72:ed:7d:66:00:4d:3a:5f:ae:c9:21:d9:20:b1:
68:1a:4b:53:38:11:d4:61:42:2c:61:9d:5c:a4:17:97:f9:d9:
36:b3:91:9d:77:f6:87:20:08:fb:0c:e3:74:0b:fc:d3:b2:b5:
b5:f4:53:20:fd:6e:e9:c0:95:31:1f:69:63:d9:9a:72:aa:dc:
85:b0:55:32:7d:c4:73:62:bf:89:74:70:a6:38:e9:e7:67:ae:
9f:68:4f:d7:45:94:8e:50:b4:bb:e0:05:af:db:bd:0d:19:25:
ab:71:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:02:41 2025 by rpki-client