Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VfLOhxg8iJfBuZwWsDurbO2DkBA.roa
File: VfLOhxg8iJfBuZwWsDurbO2DkBA.roa (raw, json)
Hash identifier: ef2pMc6vfFl1RMrLHFUWCKmRHS6IbJWJbDTMro6otfs=
Subject key identifier: 55:F2:CE:87:18:3C:88:97:C1:B9:9C:16:B0:3B:AB:6C:ED:83:90:10
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA6EB8FAD1BD096C22DC9487A44CDB431
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VfLOhxg8iJfBuZwWsDurbO2DkBA.roa
Signing time: Mon 18 Sep 2023 06:12:50 +0000
ROA not before: Mon 18 Sep 2023 06:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:eb:8f:ad:1b:d0:96:c2:2d:c9:48:7a:44:cd:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 06:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f2ce87183c8897c1b99c16b03bab6ced839010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:5d:88:b8:e7:8e:2c:09:93:e7:56:5e:99:
06:09:9a:af:ec:73:88:0e:c6:e0:d2:e9:37:b9:91:
64:9e:a3:db:2d:69:3d:e6:cb:dc:1f:86:8a:28:ee:
a8:cb:77:8f:71:32:56:43:73:73:a4:57:ac:a1:a9:
55:f0:45:0c:93:f5:cd:68:6b:9f:e3:e3:1f:b9:ae:
a2:09:01:e2:39:52:f6:30:37:df:7a:77:93:54:1d:
1e:57:e2:ad:5b:22:49:b8:91:47:5d:5b:50:a0:e5:
cc:38:f6:00:32:a8:54:c6:24:bc:52:ca:59:41:5d:
99:a6:2b:5a:a6:54:3a:84:0d:44:55:12:c4:ff:e9:
ea:a1:51:c4:64:6f:62:c9:bb:c6:8a:08:14:c4:61:
22:38:1c:4b:1e:a4:1f:5f:7a:98:4c:04:9b:fe:9d:
65:82:30:ad:e9:74:31:2b:fc:a3:3c:24:88:92:47:
a0:38:22:11:c8:db:d0:79:da:c2:4a:9b:99:b5:56:
ab:27:5c:75:a8:37:7b:8d:fa:27:54:b8:f3:5c:0a:
f4:c5:70:39:d8:fb:5b:91:5c:a7:44:0a:78:d1:cb:
6f:c2:76:31:61:ec:95:d7:77:ad:6d:31:08:9e:7a:
f0:fb:c6:e4:89:55:c8:60:3f:bb:63:1c:ae:79:00:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F2:CE:87:18:3C:88:97:C1:B9:9C:16:B0:3B:AB:6C:ED:83:90:10
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VfLOhxg8iJfBuZwWsDurbO2DkBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:58:47:fe:04:9a:ef:ac:aa:14:85:33:7c:be:dd:da:ac:14:
40:a1:0e:5b:ad:ef:a8:93:42:91:29:db:05:64:89:39:9e:80:
35:89:8b:0d:f2:96:7b:fa:ef:b8:30:e0:8e:85:b3:64:a2:fd:
eb:39:d7:50:30:25:07:c9:8a:d8:a4:10:a4:af:df:48:cf:90:
7d:1d:04:6d:16:47:8f:af:f0:91:00:a1:2b:c7:69:e8:d7:21:
d3:13:51:9d:b4:56:00:59:00:cf:3b:dc:d8:a3:4d:a7:13:44:
b5:6c:50:66:af:70:34:42:35:bc:59:19:4a:7a:cb:3f:f3:17:
2f:21:b7:dc:f3:a3:16:a6:2e:6c:99:36:35:7e:21:43:d0:45:
7f:92:22:2d:96:de:53:c5:b5:34:aa:5a:d5:19:fc:d7:ca:41:
86:60:94:b3:ac:5e:4a:c6:6f:30:a1:3b:e2:a3:f1:0f:06:ac:
63:28:d9:87:fb:d2:1c:f0:da:f7:9b:78:aa:03:38:19:b2:e8:
96:51:d0:66:2b:28:00:4c:f5:7b:32:71:57:8b:51:95:52:f2:
6f:7e:b1:06:ff:bf:55:0b:b2:29:e7:20:22:ff:c9:ad:2f:68:
75:6f:5a:fb:f2:9d:76:c0:ab:e4:b2:6d:30:18:30:aa:d3:eb:
e0:2c:94:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqm64+tG9CWwi3JSHpEzbQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE4MDYxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWYyY2U4NzE4M2M4ODk3YzFiOTljMTZiMDNiYWI2Y2VkODM5MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn5diLjnjiwJk+dWXpkGCZqv7HOI
Dsbg0uk3uZFknqPbLWk95svcH4aKKO6oy3ePcTJWQ3NzpFesoalV8EUMk/XNaGuf
4+Mfua6iCQHiOVL2MDffeneTVB0eV+KtWyJJuJFHXVtQoOXMOPYAMqhUxiS8UspZ
QV2ZpitaplQ6hA1EVRLE/+nqoVHEZG9iybvGiggUxGEiOBxLHqQfX3qYTASb/p1l
gjCt6XQxK/yjPCSIkkegOCIRyNvQedrCSpuZtVarJ1x1qDd7jfonVLjzXAr0xXA5
2PtbkVynRAp40ctvwnYxYeyV13etbTEInnrw+8bkiVXIYD+7YxyueQCOEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFXyzocYPIiXwbmcFrA7q2ztg5AQMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvVmZMT2h4ZzhpSmZCdVp3V3NEdXJiTzJEa0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJFYR/4Emu+sqhSFM3y+
3dqsFEChDlut76iTQpEp2wVkiTmegDWJiw3ylnv677gw4I6Fs2Si/es511AwJQfJ
itikEKSv30jPkH0dBG0WR4+v8JEAoSvHaejXIdMTUZ20VgBZAM873NijTacTRLVs
UGavcDRCNbxZGUp6yz/zFy8ht9zzoxamLmyZNjV+IUPQRX+SIi2W3lPFtTSqWtUZ
/NfKQYZglLOsXkrGbzChO+Kj8Q8GrGMo2Yf70hzw2vebeKoDOBmy6JZR0GYrKABM
9XsycVeLUZVS8m9+sQb/v1ULsinnICL/ya0vaHVvWvvynXbAq+SybTAYMKrT6+As
lNI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:04 2025 by rpki-client