Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WGmXnjOp20Cd2ez628zHC3GJda4.roa
File: WGmXnjOp20Cd2ez628zHC3GJda4.roa (raw, json)
Hash identifier: 3iHO6eJ2iSy9ibNI77Cs+rM73bZdjWC4kOvdpXBYDgo=
Subject key identifier: 58:69:97:9E:33:A9:DB:40:9D:D9:EC:FA:DB:CC:C7:0B:71:89:75:AE
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4CA1765FF50E771E131D09474CC7C490
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WGmXnjOp20Cd2ez628zHC3GJda4.roa
Signing time: Thu 31 Aug 2023 17:26:04 +0000
ROA not before: Thu 31 Aug 2023 17:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:a1:76:5f:f5:0e:77:1e:13:1d:09:47:4c:c7:c4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 17:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5869979e33a9db409dd9ecfadbccc70b718975ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:25:50:e9:e7:bf:17:72:96:11:ad:99:29:
b1:0f:74:dc:01:f6:9d:19:b3:03:28:05:13:28:43:
df:4c:86:02:5f:4b:11:f4:49:4c:72:cf:0b:83:22:
e6:2e:00:5b:c1:83:24:e0:29:c1:52:20:24:0d:a6:
1b:88:09:74:05:33:42:d5:d9:e8:67:21:4f:31:57:
03:b3:3f:b4:7e:08:44:48:df:c7:34:b4:2a:01:18:
5e:2e:8f:ef:30:ee:6c:ad:88:b3:94:87:3c:34:b4:
ff:b4:2d:6a:43:dd:2f:64:98:ea:30:f9:37:d4:aa:
9f:e4:86:d4:b5:93:30:52:bf:d7:1e:de:f0:7b:ea:
18:1e:ce:a9:42:ea:a5:6b:6d:13:e2:7a:be:40:95:
b3:bb:71:59:c6:f1:aa:5f:27:4b:38:cd:07:aa:86:
2c:ff:aa:05:bb:fc:0b:37:b6:2c:d4:bf:60:22:af:
ae:43:df:84:1d:11:03:14:3b:8b:5b:8c:d1:20:78:
33:17:1b:a3:28:8a:2c:1d:b5:18:43:e3:a1:14:94:
07:d0:0f:60:c2:93:89:3a:8d:ba:41:45:2f:d8:a5:
0b:2f:66:95:9d:1e:8a:7f:d3:54:f6:09:72:c4:40:
c8:67:a0:de:45:a5:37:e5:83:ae:07:1f:25:e9:e1:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:97:9E:33:A9:DB:40:9D:D9:EC:FA:DB:CC:C7:0B:71:89:75:AE
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WGmXnjOp20Cd2ez628zHC3GJda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:f7:56:af:08:b4:40:12:7e:ca:58:28:30:e3:d2:e0:31:72:
20:0f:e0:06:ad:25:f7:96:51:77:75:f9:c1:fd:6a:f4:07:39:
d8:25:7a:06:c0:cc:1c:13:0d:61:6c:22:5d:d4:80:c5:16:4f:
7f:a8:1d:a8:c2:52:4a:b9:de:de:e5:83:54:1c:b2:ed:3b:46:
74:52:1a:2f:c2:10:95:6d:d5:38:72:b8:e5:02:80:4f:e7:bc:
9b:41:5f:4f:d2:2c:16:a9:7e:b1:b5:50:d6:f3:a9:27:d6:8e:
d0:b7:61:ed:d8:00:ed:79:35:14:87:bf:6e:1a:7c:bc:9b:6d:
7f:8f:bc:12:09:48:7e:bb:5e:8e:1c:9c:35:ac:d1:53:c9:ea:
10:dc:c7:1a:7a:fa:8f:b6:47:15:e4:92:57:d1:8b:d1:56:6b:
65:aa:7f:d7:e1:50:ad:5c:5b:ee:c3:5f:38:bc:aa:e2:ee:fe:
aa:30:f4:b8:55:1f:32:2c:d1:ec:49:cb:ba:c4:39:61:10:09:
df:ed:c0:e1:64:b0:d0:9f:bf:0d:69:62:42:b8:5f:9b:d8:0a:
68:60:76:a2:3d:45:76:cf:85:fa:3a:13:48:f2:20:a8:59:41:
d6:05:35:e2:42:6d:b5:f4:2c:85:48:8b:b9:77:c4:42:a3:5f:
51:5b:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:10 2025 by rpki-client