Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UXrLsfJ9hwi8jNU9OsGBVdp4iQI.roa
File: UXrLsfJ9hwi8jNU9OsGBVdp4iQI.roa (raw, json)
Hash identifier: hJjoE8tWF6sNst62hA5EG18s1Qu32oGp4eAhJFzAdwk=
Subject key identifier: 51:7A:CB:B1:F2:7D:87:08:BC:8C:D5:3D:3A:C1:81:55:DA:78:89:02
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A72C9FB62ABF38E473BDD89574DC35FA5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UXrLsfJ9hwi8jNU9OsGBVdp4iQI.roa
Signing time: Fri 08 Sep 2023 03:15:54 +0000
ROA not before: Fri 08 Sep 2023 03:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:72:c9:fb:62:ab:f3:8e:47:3b:dd:89:57:4d:c3:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 03:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=517acbb1f27d8708bc8cd53d3ac18155da788902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:e6:91:52:57:af:08:64:cb:f7:da:07:6b:
7e:84:1f:72:79:64:17:a0:90:5d:73:f0:0a:0b:79:
5f:7b:b3:36:24:96:a3:d6:92:e4:f7:55:39:dd:5a:
0a:aa:c0:20:12:25:02:d5:fd:a1:9b:f3:d7:f6:7f:
1d:8c:b1:5f:06:48:f9:35:9e:a2:ac:47:de:6f:8c:
c4:45:24:7c:cd:40:85:85:af:b8:54:22:e1:39:e5:
ad:fa:77:63:c6:19:14:d1:d3:fd:d0:7e:fa:d4:fa:
af:fa:a5:08:b5:78:ca:50:b0:9c:cb:3c:40:c4:01:
8a:9c:e7:22:d9:97:0c:e2:83:29:db:89:57:f8:2d:
d8:64:4e:2f:b3:ef:c5:18:be:8c:59:02:5e:c2:e9:
1d:95:c1:ec:e7:11:14:3e:e7:4b:f8:d2:9d:f8:6a:
fb:4c:7b:33:1d:32:d0:b4:b6:85:17:c3:87:b9:d9:
ce:a2:2f:ce:d9:82:b1:4c:21:3e:81:17:84:7f:0a:
3a:ea:9e:00:fd:f9:bd:52:09:4f:ae:33:97:9a:ed:
8f:ff:cc:15:14:59:c6:37:b6:5f:47:cf:e6:de:8c:
21:88:69:1f:ef:f0:58:5f:22:a5:c3:a6:8e:64:89:
bb:87:a8:b8:61:56:b4:74:ef:e2:df:bb:df:e5:23:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:CB:B1:F2:7D:87:08:BC:8C:D5:3D:3A:C1:81:55:DA:78:89:02
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UXrLsfJ9hwi8jNU9OsGBVdp4iQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:df:c7:c3:e9:14:e2:c8:2a:d4:3c:88:72:ad:6c:49:db:94:
f9:5d:c4:e2:42:88:f5:13:4b:5a:2f:6f:f2:26:30:1b:70:d3:
2b:bb:ee:35:f3:f7:f1:dd:bb:b0:1c:98:1b:b6:b3:6b:b2:49:
1c:bd:66:42:5e:f4:1f:c5:ed:c9:81:a5:1f:98:59:c7:74:b3:
27:98:49:44:d8:dc:35:4b:88:9f:e1:7f:91:e6:95:96:95:9f:
fd:c4:20:ce:3d:18:83:ff:3b:c5:7e:3a:9c:81:28:01:78:6a:
7a:78:a4:57:bd:99:2b:65:e4:c8:63:d7:97:71:e8:29:ed:76:
19:a6:d7:06:3a:69:f1:e7:32:a0:b5:68:32:de:80:98:96:3c:
fd:05:9a:1c:0a:0d:f8:33:3d:38:30:81:37:ee:0f:ca:2f:53:
ab:2b:16:f5:4c:b8:af:d2:3d:97:2c:b6:bd:a1:eb:ff:f6:b5:
9a:86:a6:ec:0a:89:64:95:39:ec:dc:25:85:32:60:c6:73:91:
19:90:05:68:8b:fe:bb:f1:b3:6b:43:f8:d4:6e:19:44:54:e2:
b9:55:4a:72:21:fd:74:fb:4d:ab:8a:dc:89:c3:91:e5:65:13:
b8:77:54:8c:00:5a:ea:65:f4:f1:fe:14:73:90:1c:bd:8a:ff:
40:01:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:22 2025 by rpki-client