Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Wh-NnSkss6GvHioQl_6GqKZqSkg.roa
File: Wh-NnSkss6GvHioQl_6GqKZqSkg.roa (raw, json)
Hash identifier: cpVG4TtzEZsIcg0Jjt6x65SwYq8aQPSzJ0e84ZSsNnI=
Subject key identifier: 5A:1F:8D:9D:29:2C:B3:A1:AF:1E:2A:10:97:FE:86:A8:A6:6A:4A:48
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA56A1F8A2956F304C6EBBC4F3D65F4A6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Wh-NnSkss6GvHioQl_6GqKZqSkg.roa
Signing time: Sun 17 Sep 2023 23:11:50 +0000
ROA not before: Sun 17 Sep 2023 23:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a5:6a:1f:8a:29:56:f3:04:c6:eb:bc:4f:3d:65:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 23:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a1f8d9d292cb3a1af1e2a1097fe86a8a66a4a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:33:cd:92:c9:30:ac:d1:21:43:87:d9:76:
cf:a4:0b:d1:7d:30:23:4a:02:10:f5:30:7e:95:02:
4f:a4:46:66:a9:c8:8f:99:e3:ae:e7:87:3e:d1:32:
0d:e3:fc:43:6b:ad:5d:ae:d7:9d:26:4e:3f:8a:cd:
e8:c3:36:37:bb:f7:24:a3:69:ac:8c:18:0f:51:64:
1b:d9:4e:a9:cd:b4:ef:d9:fa:49:d8:76:57:d5:5a:
05:b9:ee:79:92:d9:0f:bf:85:3c:71:be:11:09:54:
27:f0:b9:50:01:65:0e:94:10:8a:7e:42:c8:c9:c9:
c6:6d:9b:7b:c4:e3:e9:c9:7c:3e:78:87:65:f9:5d:
a8:fb:a8:df:4f:bc:06:da:be:c4:7f:b1:74:3e:e8:
c7:33:33:c6:c3:68:81:1a:6c:48:80:27:7a:a6:87:
bf:f1:02:f9:2e:5f:ef:18:7a:f3:ea:1b:56:5f:f3:
22:4b:50:bf:f8:8f:63:3a:88:c4:c9:25:94:55:d5:
e1:37:1e:e2:3d:a8:12:af:20:6d:b5:e7:4d:db:75:
a0:42:30:19:cd:8a:48:db:20:ed:3e:b2:8d:88:01:
0b:18:6a:9a:aa:c6:72:cf:9c:2a:57:05:ea:18:f7:
d9:e2:ac:64:64:e9:f3:63:0f:31:38:b2:b0:d0:b4:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:8D:9D:29:2C:B3:A1:AF:1E:2A:10:97:FE:86:A8:A6:6A:4A:48
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Wh-NnSkss6GvHioQl_6GqKZqSkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:e5:1a:68:31:93:ba:32:53:56:d8:55:98:76:a7:9e:d3:8f:
85:8a:f7:7f:75:3d:0d:6e:e7:31:2a:96:42:34:3a:04:83:ee:
e4:3d:e5:7a:fa:08:67:6f:e0:a3:15:be:db:ef:8a:33:73:c6:
e9:94:ed:d2:0a:ac:2e:9f:b4:a6:8a:33:3b:fc:4f:38:dc:27:
68:1b:5b:24:6f:4c:37:53:34:b4:4b:0c:1f:6a:d9:9a:ae:1f:
6e:94:e4:ea:02:fc:71:6a:6f:39:d7:e0:d7:5c:4e:06:82:fe:
2f:60:72:51:27:00:6c:7a:ec:e3:3e:e1:14:e9:aa:00:3f:67:
11:9b:17:4d:0b:b5:77:12:bc:e1:e7:b1:f7:8a:a1:74:74:4b:
63:77:89:a7:62:79:69:1d:25:d5:79:70:09:b1:ca:5b:41:3c:
28:05:b2:6d:42:a2:6c:e5:8e:0b:cd:af:81:2d:1b:d5:f6:d2:
0b:06:df:1a:91:a0:4c:b9:23:59:d2:d8:d9:86:fb:78:20:79:
22:69:bf:77:40:2d:c2:f5:02:76:07:a2:d7:95:4e:ce:10:10:
58:f9:f5:72:ca:86:ef:e4:24:09:a1:40:09:98:c7:2e:1c:97:
63:ad:8b:77:f3:47:84:d8:c0:b9:57:08:97:27:39:28:ad:4e:
81:87:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:26 2025 by rpki-client