Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UYRDDCRfV7H1Np9zBHe_bk_uLGk.roa
File: UYRDDCRfV7H1Np9zBHe_bk_uLGk.roa (raw, json)
Hash identifier: XYYvpwTKl9zdTdp3yNRBG2JLJnACHFQYwrKZ68c58qM=
Subject key identifier: 51:84:43:0C:24:5F:57:B1:F5:36:9F:73:04:77:BF:6E:4F:EE:2C:69
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA37E7C16BD21C642D1773CA547E2C87F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UYRDDCRfV7H1Np9zBHe_bk_uLGk.roa
Signing time: Sun 17 Sep 2023 14:14:50 +0000
ROA not before: Sun 17 Sep 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:7e:7c:16:bd:21:c6:42:d1:77:3c:a5:47:e2:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5184430c245f57b1f5369f730477bf6e4fee2c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:cb:4e:13:f6:d1:f7:a9:57:cb:39:33:dd:
fe:2f:26:ea:8e:98:dd:50:3a:3e:a0:ca:68:f9:56:
ad:b7:ea:35:4f:b8:fc:9d:6a:ba:0a:eb:fc:59:3d:
23:eb:c3:f9:aa:b3:5e:53:7b:96:9a:01:97:c5:b4:
ae:c9:a7:ec:70:b8:68:e5:ba:ca:bd:b3:bd:1b:d1:
4b:1c:73:de:8c:b5:f9:79:32:88:93:72:a0:c6:2f:
06:87:f0:69:bb:d1:fc:00:a9:63:18:b4:eb:dd:42:
70:cd:58:1a:cc:67:63:d0:9c:54:ed:94:7a:5d:07:
a0:25:4b:f0:3a:f4:d9:53:1b:bd:82:c7:9b:7c:9b:
66:49:4f:77:f8:c9:4c:df:63:36:63:4a:a3:5d:b7:
95:c0:dc:08:5f:8b:fb:b1:da:49:e0:b6:a2:5f:13:
75:ee:8f:6f:79:d7:46:49:b9:42:09:cb:38:23:a6:
05:c3:a9:e5:9a:fa:da:72:76:3a:15:30:9b:ff:e4:
fc:78:67:c7:93:94:80:56:5b:b0:c4:37:fd:60:45:
f2:94:fd:8b:c6:af:03:85:8e:41:23:73:37:2d:a3:
98:6f:95:d4:79:61:f6:5e:e8:ff:81:63:6f:04:13:
87:a0:b9:47:71:58:21:fc:e2:25:13:fc:15:68:a2:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:43:0C:24:5F:57:B1:F5:36:9F:73:04:77:BF:6E:4F:EE:2C:69
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UYRDDCRfV7H1Np9zBHe_bk_uLGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:73:b5:88:16:68:66:28:c3:58:18:41:a1:53:40:26:9b:be:
94:b6:90:d9:06:7e:07:2e:e8:a5:9a:eb:e7:31:ec:2a:97:41:
ad:b4:b0:53:3e:89:35:08:2f:f4:57:c7:9f:f5:7f:40:eb:f3:
74:86:50:d0:8c:7e:76:83:b1:71:bc:3d:91:81:a6:fd:e6:9a:
79:30:45:a1:68:1e:ac:a5:78:9f:1e:67:a0:52:9d:d8:de:9d:
c2:1d:a1:18:4c:37:f1:3a:81:99:80:9d:a1:f3:b0:a0:ea:27:
e0:e5:5e:d4:23:92:d2:ac:71:26:c2:8d:3d:0e:58:3f:ca:88:
4b:9b:bf:4d:e5:4e:b7:f7:18:fd:df:cf:b5:29:fb:aa:32:7a:
bb:5a:04:1a:9b:81:b6:dd:73:ee:e5:32:d1:32:df:3e:b8:da:
28:ee:b6:aa:e9:b8:2d:eb:67:22:22:cb:fd:60:34:c1:40:33:
ed:95:6b:8f:8f:a4:cb:a1:06:d1:fc:17:40:bc:c5:36:f7:78:
f2:30:b5:21:34:9b:8c:76:5e:20:6f:b8:dd:71:01:4e:3b:eb:
d7:61:37:32:9c:ce:c3:64:8d:bd:53:21:89:57:48:cd:d0:21:
1f:1e:34:d3:43:96:38:7f:aa:11:5d:ce:b5:6a:62:42:b4:bf:
25:12:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:58 2025 by rpki-client