Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvSKjfsmr90bDxnkmnWv5MVlG-0.roa
File: XvSKjfsmr90bDxnkmnWv5MVlG-0.roa (raw, json)
Hash identifier: xfLvbm2cAIS/vEOY60ENpmZO74SfNIictLtxekzkIys=
Subject key identifier: 5E:F4:8A:8D:FB:26:AF:DD:1B:0F:19:E4:9A:75:AF:E4:C5:65:1B:ED
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A75FE43C4FA77FE3297D04F6A535F0576
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvSKjfsmr90bDxnkmnWv5MVlG-0.roa
Signing time: Fri 08 Sep 2023 18:11:52 +0000
ROA not before: Fri 08 Sep 2023 18:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:fe:43:c4:fa:77:fe:32:97:d0:4f:6a:53:5f:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 18:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ef48a8dfb26afdd1b0f19e49a75afe4c5651bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:e8:66:32:04:df:68:de:47:b5:55:07:86:
63:83:9a:d8:84:be:0e:7f:a8:66:78:d8:c7:cc:49:
43:38:7c:b0:b9:76:ab:0e:00:53:d7:a8:f7:d8:77:
7b:5e:42:32:8b:ca:b6:3a:18:a9:2d:af:d0:7a:a2:
fb:2a:9d:f8:90:b3:76:a9:68:b7:96:18:70:fb:24:
22:43:6b:9d:87:71:94:9c:a5:17:b5:6b:6a:45:d8:
bf:0f:36:85:f8:93:4a:d8:c5:9f:b4:88:d2:da:02:
b0:2b:65:9d:0a:df:86:23:b7:f1:55:ae:8f:78:f3:
e0:60:e3:92:ad:b1:3f:0d:b4:65:10:c5:3c:ff:d9:
65:07:a6:49:43:b5:9d:40:06:a0:80:0b:d9:00:73:
65:9a:9c:c9:da:4a:ca:4c:5d:8d:3b:1b:77:7d:ef:
a0:bc:d8:f4:6c:24:2c:35:ae:a4:0d:9b:7c:7b:88:
03:f8:05:80:60:5b:fd:a1:fa:40:f1:17:9d:b8:df:
98:eb:c9:0e:7f:6c:16:f9:a3:02:d9:40:1a:72:ab:
33:72:f6:91:4c:61:a3:ee:28:1e:d6:0e:ae:23:db:
78:f1:4a:7e:45:7a:94:98:ad:23:b9:7b:12:70:fa:
57:30:63:6a:d9:98:a3:89:bf:9f:f5:c0:91:82:10:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:8A:8D:FB:26:AF:DD:1B:0F:19:E4:9A:75:AF:E4:C5:65:1B:ED
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvSKjfsmr90bDxnkmnWv5MVlG-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:32:87:e3:01:b4:5b:39:75:d7:5c:b5:17:98:95:7a:9c:2e:
e1:df:fc:fc:95:3c:d4:f9:0f:86:33:0f:b1:a6:51:b8:58:9e:
b8:1d:4a:8f:65:6b:af:b3:4e:61:0c:61:09:dc:c9:99:66:9d:
0e:e7:dc:6b:63:ca:b7:d4:ad:24:b0:9a:57:98:e1:f2:69:df:
2d:4f:f4:4a:2b:7f:f4:7f:d2:41:81:0e:ae:8a:4d:9d:5b:e2:
c7:dd:bd:5b:2d:7c:33:3f:4b:ef:b3:1c:12:90:b4:98:64:fb:
63:2b:32:cc:c0:07:88:8e:4e:91:2a:87:bf:85:65:69:f0:46:
7e:ff:f4:8a:fb:cd:a4:0b:7d:8a:e9:92:90:17:7f:55:6f:95:
5f:8a:2b:28:a9:b8:13:07:b1:7c:49:0f:c7:87:65:c5:a0:33:
19:0c:be:c8:0c:59:bf:d0:03:c0:e9:58:b9:09:a8:3a:05:b6:
bc:5f:62:f6:ed:13:22:9f:d5:e2:fe:bc:54:41:ec:5b:4e:67:
b4:0a:c8:d4:db:cb:4f:1d:84:b3:33:6c:96:a0:76:74:cc:a0:
70:08:16:99:1b:f6:4c:86:d0:d4:00:1e:bf:9b:6d:b0:88:04:
17:1b:3e:4e:f7:bf:1b:e7:78:cb:5c:70:c9:00:6e:20:a6:c2:
52:5d:f9:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp1/kPE+nf+MpfQT2pTXwV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MTgxMTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWY0OGE4ZGZiMjZhZmRkMWIwZjE5ZTQ5YTc1YWZlNGM1NjUxYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVnoZjIE32jeR7VVB4Zjg5rYhL4O
f6hmeNjHzElDOHywuXarDgBT16j32Hd7XkIyi8q2OhipLa/QeqL7Kp34kLN2qWi3
lhhw+yQiQ2udh3GUnKUXtWtqRdi/DzaF+JNK2MWftIjS2gKwK2WdCt+GI7fxVa6P
ePPgYOOSrbE/DbRlEMU8/9llB6ZJQ7WdQAaggAvZAHNlmpzJ2krKTF2NOxt3fe+g
vNj0bCQsNa6kDZt8e4gD+AWAYFv9ofpA8ReduN+Y68kOf2wW+aMC2UAacqszcvaR
TGGj7ige1g6uI9t48Up+RXqUmK0juXsScPpXMGNq2Zijib+f9cCRghBBlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF70io37Jq/dGw8Z5Jp1r+TFZRvtMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvWHZTS2pmc21yOTBiRHhua21uV3Y1TVZsRy0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACMyh+MBtFs5dddctReY
lXqcLuHf/PyVPNT5D4YzD7GmUbhYnrgdSo9la6+zTmEMYQncyZlmnQ7n3GtjyrfU
rSSwmleY4fJp3y1P9Eorf/R/0kGBDq6KTZ1b4sfdvVstfDM/S++zHBKQtJhk+2Mr
MszAB4iOTpEqh7+FZWnwRn7/9Ir7zaQLfYrpkpAXf1VvlV+KKyipuBMHsXxJD8eH
ZcWgMxkMvsgMWb/QA8DpWLkJqDoFtrxfYvbtEyKf1eL+vFRB7FtOZ7QKyNTby08d
hLMzbJagdnTMoHAIFpkb9kyG0NQAHr+bbbCIBBcbPk73vxvneMtccMkAbiCmwlJd
+dM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:17 2025 by rpki-client