Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UEpOYt2MPqJuJ9cfI83PQwGyiS4.roa
File: UEpOYt2MPqJuJ9cfI83PQwGyiS4.roa (raw, json)
Hash identifier: m9/QXNM8Fiy6MXHPz4B7f6hVRSmSH4KeFS/4ByhRiQo=
Subject key identifier: 50:4A:4E:62:DD:8C:3E:A2:6E:27:D7:1F:23:CD:CF:43:01:B2:89:2E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4D39702ECD744F7A50F8DF20F16D83C4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UEpOYt2MPqJuJ9cfI83PQwGyiS4.roa
Signing time: Thu 31 Aug 2023 20:12:04 +0000
ROA not before: Thu 31 Aug 2023 20:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:4d39:1852/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:39:70:2e:cd:74:4f:7a:50:f8:df:20:f1:6d:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 20:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=504a4e62dd8c3ea26e27d71f23cdcf4301b2892e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:13:96:40:87:85:74:8d:e4:da:85:08:a8:
8a:53:96:54:84:79:43:ff:7d:36:d4:b9:eb:5b:1f:
b8:9e:33:e4:a4:08:51:c0:2e:c6:d4:86:ca:21:98:
ea:44:4c:bf:70:74:90:d6:d4:91:40:21:35:c9:97:
39:ef:4f:cb:b4:ee:72:7f:57:be:5b:38:2a:6d:b8:
c4:14:1a:1b:56:35:ac:14:b4:b3:51:3c:6e:bf:4d:
6b:4c:22:31:8d:bb:9f:02:92:71:07:53:7f:8a:86:
3b:76:d8:a8:88:44:a0:b0:0d:67:48:42:91:49:37:
82:dd:bd:ad:bf:20:63:c3:10:ad:89:92:90:87:39:
ae:e1:de:df:aa:a6:f9:fd:4b:9b:bf:e2:c6:ef:84:
4f:45:56:05:ac:d2:9a:8f:34:7f:50:c4:78:25:4c:
12:7e:28:db:d2:0a:31:5c:9e:3f:63:30:d6:95:98:
9e:c1:6f:59:6e:71:17:59:54:55:17:54:17:51:98:
39:93:12:f6:42:cb:e0:b6:f4:81:00:be:2a:a1:bc:
b8:90:05:09:f5:f0:e3:60:b4:1f:26:03:30:f7:dd:
32:6c:7c:34:2b:9d:79:92:21:95:8f:d1:cd:c4:1e:
fb:62:ce:dc:85:61:69:17:b2:0b:27:f6:7d:54:f6:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:4E:62:DD:8C:3E:A2:6E:27:D7:1F:23:CD:CF:43:01:B2:89:2E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UEpOYt2MPqJuJ9cfI83PQwGyiS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:9d:0a:de:66:6d:c3:5f:74:14:a2:b5:3f:56:ea:2d:18:d3:
cb:8d:d5:9b:7c:c7:29:35:e2:f1:a1:9d:63:e2:95:72:a0:4f:
86:4a:3b:a5:bc:ae:43:4c:0b:2c:e2:45:c1:08:09:51:fa:4b:
da:0b:f4:79:4f:00:75:fc:d4:17:4a:b2:d4:0b:c8:0c:94:e5:
78:09:05:1f:b5:8f:bb:40:86:0e:f7:35:22:eb:b2:73:8f:59:
22:b7:5c:8c:5a:dd:63:47:9b:66:f4:e2:77:47:e6:ce:2c:08:
5b:38:30:a9:43:9f:ce:ce:99:a1:23:44:01:7f:2d:93:57:8f:
bb:9e:c7:43:28:aa:86:eb:6d:3d:7c:6e:a6:f5:1c:37:6b:6a:
b3:d8:f0:92:21:14:34:e8:32:07:2e:88:b7:5e:12:36:76:26:
6c:c0:70:49:d1:66:fe:4b:08:9a:31:67:6e:a0:50:11:b7:03:
b7:0a:bc:df:bc:f0:78:af:d0:c2:9e:2b:4d:47:d0:ad:ea:78:
e9:d9:da:9f:fb:40:8b:88:0b:77:c0:3b:25:33:9a:26:f1:2f:
d3:94:02:f4:ce:1b:d0:63:45:0e:3a:2d:2c:0d:d5:6c:79:3a:
b0:32:9a:42:8d:67:e3:ca:fe:de:15:25:06:53:af:e6:bf:96:
09:e0:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:50:03 2025 by rpki-client