Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TvX2pYmtfWt5p5T-zn7Pgfwgkf8.roa
File: TvX2pYmtfWt5p5T-zn7Pgfwgkf8.roa (raw, json)
Hash identifier: hTqPWsnEpdmm/+mzyuLf99bY4iZMo32viTH90u2l4D4=
Subject key identifier: 4E:F5:F6:A5:89:AD:7D:6B:79:A7:94:FE:CE:7E:CF:81:FC:20:91:FF
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A608A33A90BBEAA33D106EA922FA254C4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TvX2pYmtfWt5p5T-zn7Pgfwgkf8.roa
Signing time: Mon 04 Sep 2023 14:13:04 +0000
ROA not before: Mon 04 Sep 2023 14:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:8a:33:a9:0b:be:aa:33:d1:06:ea:92:2f:a2:54:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 14:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef5f6a589ad7d6b79a794fece7ecf81fc2091ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:f0:bb:72:50:2e:6c:12:e3:25:6b:ff:02:
2e:08:42:cb:40:be:d7:45:09:80:6a:bc:c9:3b:4c:
c6:5c:04:f4:12:cf:3a:03:de:47:3d:7b:a4:d1:e5:
97:b1:c9:8b:f5:1b:c6:8f:82:65:0c:f1:a2:ac:b0:
72:fa:87:bc:00:1b:6a:36:42:e3:ef:bf:3c:5d:a0:
46:f8:9b:5d:d1:cd:6b:8d:84:a1:82:8b:22:d7:64:
db:1b:f2:61:e5:19:f6:46:21:67:81:3b:ee:9c:c2:
53:c8:10:11:5f:41:8b:f4:2a:f8:31:52:c6:4c:31:
d0:33:25:32:70:57:59:e3:65:b0:99:ab:a2:4e:3b:
97:99:a8:e6:6f:42:db:fc:4c:fa:2e:46:66:62:3d:
8c:a9:68:7a:40:37:72:07:45:56:b2:07:27:b6:01:
3d:27:88:a7:61:a8:b0:29:4f:c7:98:b8:ea:35:7a:
31:95:c2:11:17:8b:d4:04:9c:96:9c:b7:d5:34:2c:
1e:35:17:34:68:3a:2b:17:c2:3d:9e:0b:90:bd:14:
d4:8b:20:f8:75:70:e6:de:09:42:28:27:00:00:17:
f6:2e:12:2d:78:03:17:1d:20:67:67:de:78:c7:5b:
e0:3f:6a:02:d9:fc:ef:14:ef:2c:a2:e6:cb:f5:1b:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F5:F6:A5:89:AD:7D:6B:79:A7:94:FE:CE:7E:CF:81:FC:20:91:FF
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TvX2pYmtfWt5p5T-zn7Pgfwgkf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:df:93:9b:9d:c1:e4:6e:e8:e2:aa:d3:26:2d:67:7a:39:7a:
f9:d1:f5:c6:70:d5:bb:ef:ff:6b:84:16:c6:25:0a:7c:8f:8a:
ec:ad:89:ce:c7:78:80:ff:f1:52:5c:93:b7:5e:d4:76:e2:8a:
20:0f:e7:6b:11:3c:2d:a4:1a:71:bb:ab:61:e7:36:ba:1e:70:
aa:b0:96:25:ef:2f:05:9b:3e:f7:b1:11:23:54:bb:41:6d:9a:
fc:e1:ce:e2:eb:71:44:47:db:41:10:0d:9d:0a:0b:e0:4e:51:
95:44:4e:3e:83:58:1b:a2:b9:ec:65:27:d5:70:fa:78:41:27:
ce:43:82:62:cf:d1:71:6e:82:c0:d7:d6:e8:02:54:38:d1:1f:
60:28:bb:87:81:32:17:32:4b:e9:ab:35:7f:b6:c8:4f:92:a6:
0d:b0:8f:04:25:62:15:92:9f:83:be:63:d8:df:cb:63:63:28:
ed:3d:ed:fe:a6:56:64:0a:f9:f6:0b:b1:f7:11:61:b5:5e:70:
b3:c4:14:49:87:43:e4:b8:96:af:5f:84:fd:1e:32:4f:a9:26:
35:21:79:ff:28:a5:ce:a4:b2:81:8b:10:1f:1e:bf:c2:b6:9e:
88:d4:8c:cb:03:09:a5:aa:14:72:5a:06:be:70:82:d6:07:25:
a9:a8:f7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:59 2025 by rpki-client