Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VmzNUgVIF9nJGA22Nj7I4dVG8Aw.roa
File: VmzNUgVIF9nJGA22Nj7I4dVG8Aw.roa (raw, json)
Hash identifier: qVFDLVzQ0zrLKKjHV9Tox0GK/byXVVN2tlzNlGIAkSY=
Subject key identifier: 56:6C:CD:52:05:48:17:D9:C9:18:0D:B6:36:3E:C8:E1:D5:46:F0:0C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A68AAF0FA0A11C5234F0B5FEE09B93900
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VmzNUgVIF9nJGA22Nj7I4dVG8Aw.roa
Signing time: Wed 06 Sep 2023 04:05:47 +0000
ROA not before: Wed 06 Sep 2023 04:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:68aa:1511/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:68:aa:f0:fa:0a:11:c5:23:4f:0b:5f:ee:09:b9:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 04:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=566ccd52054817d9c9180db6363ec8e1d546f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:6b:0b:41:fe:58:0f:8c:6d:1a:28:d6:c4:
a1:5a:9f:4d:9a:2f:da:e4:a6:3b:9a:eb:96:f2:70:
30:4a:53:52:9e:68:ab:7a:a9:38:04:1b:21:53:62:
46:0a:41:cf:06:ab:cd:eb:16:3d:81:21:57:d9:f4:
8b:f4:63:2b:48:2e:a7:48:3e:f2:ea:8e:8e:26:82:
3b:d7:d2:2e:1e:5b:15:a7:1c:53:3c:68:da:7c:f4:
a4:55:7c:22:d0:13:dd:39:16:ee:1b:94:20:85:50:
30:ec:6c:e1:f1:df:78:a4:ed:19:49:11:3d:d4:f5:
aa:68:22:33:7f:21:b1:8d:4d:4a:dc:04:e0:cd:e2:
01:7a:cb:c2:32:05:29:0d:e5:d8:19:c9:35:f7:51:
da:b0:11:23:32:44:dd:f7:23:85:8d:ca:00:99:a1:
57:69:e8:21:55:bd:e5:e5:44:c9:0c:93:a8:e2:85:
a1:a7:47:9a:1f:44:c7:ac:d0:e6:20:7e:34:4e:96:
98:c3:6d:a8:2f:99:79:da:7e:e5:3c:30:0d:e8:91:
09:43:de:f2:ef:b1:b5:e8:a7:8e:be:e8:47:f5:0a:
a0:75:3f:93:8a:1b:c9:e8:e1:ae:67:d6:68:3f:03:
d1:6d:a1:f4:a1:2c:c8:72:c4:50:f3:90:81:45:65:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:CD:52:05:48:17:D9:C9:18:0D:B6:36:3E:C8:E1:D5:46:F0:0C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VmzNUgVIF9nJGA22Nj7I4dVG8Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:78:25:a9:5c:df:5e:d9:77:7c:a4:34:7f:9f:4d:71:63:ff:
b4:97:b0:fe:b5:90:28:91:8e:0c:f8:de:49:7f:c7:6c:d2:e2:
48:bf:f6:5f:ac:e7:9c:d4:f3:8c:dc:51:cd:08:12:ff:ae:03:
cf:7c:e6:a2:dc:7d:ef:c0:3c:0b:3c:f8:b0:a2:cf:0e:df:ff:
7e:55:01:a0:48:dd:a2:ab:f8:5c:de:89:58:6c:d5:df:4f:79:
32:e4:f1:42:32:c7:c3:e1:34:db:45:8b:e1:41:c5:fc:06:ed:
46:25:d6:c6:14:85:29:8f:63:62:1e:4e:56:8e:cb:4c:64:c1:
df:6f:97:ba:06:4d:6b:ab:16:33:b0:8d:18:42:29:9d:85:85:
df:7b:e6:df:0b:b1:98:18:53:e4:4f:39:16:89:9e:3e:56:61:
6e:b8:9b:15:a1:bc:a0:fc:cf:0b:d4:0f:42:05:72:5d:c2:3e:
97:ad:db:16:a9:2c:47:31:e5:80:05:79:74:29:d1:b9:ee:46:
d4:3e:95:fd:7d:6e:35:de:90:1e:2e:2b:db:3e:39:19:e3:c0:
90:a3:ab:a8:2a:fe:de:81:12:59:c1:10:a7:df:8d:12:c9:58:
3a:6e:be:72:ec:36:83:cb:e3:72:6b:7e:59:8a:3d:81:28:78:
ea:b7:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:03 2025 by rpki-client