Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvyX7zlhOY6_o7OEQ19xe7iJ-Vc.roa
File: XvyX7zlhOY6_o7OEQ19xe7iJ-Vc.roa (raw, json)
Hash identifier: 4UDtF0Z4Sy854OZ00/9Me3lnBD40NkPpC/mPzHnjTCI=
Subject key identifier: 5E:FC:97:EF:39:61:39:8E:BF:A3:B3:84:43:5F:71:7B:B8:89:F9:57
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5B6696DE3BCDBE1B9B91ED7151A9974C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvyX7zlhOY6_o7OEQ19xe7iJ-Vc.roa
Signing time: Sun 03 Sep 2023 14:16:04 +0000
ROA not before: Sun 03 Sep 2023 14:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:66:96:de:3b:cd:be:1b:9b:91:ed:71:51:a9:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 14:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efc97ef3961398ebfa3b384435f717bb889f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:79:cb:52:5b:bf:38:52:a8:93:89:10:1d:
8e:ca:74:fc:4b:c1:20:ad:28:e4:c3:22:17:33:24:
c3:2c:62:5a:35:96:73:1d:0b:a3:f1:e8:dc:06:75:
36:2c:bd:34:18:91:89:d6:14:88:1d:a3:08:f6:7b:
49:00:79:59:f6:24:76:92:6f:d1:54:5e:b2:8a:77:
11:9b:5e:91:62:19:36:c8:cf:00:c5:93:e1:09:22:
bc:36:c3:23:42:c8:d3:85:21:d1:71:bf:56:94:ac:
11:26:29:2b:2a:67:69:28:5c:83:11:84:50:c2:a3:
76:57:d9:8b:e2:3a:d8:6a:3d:ce:8e:b7:b6:35:61:
23:a0:b3:bd:57:5c:70:13:a2:59:3d:56:16:bf:f4:
34:a9:fd:d9:b9:23:63:e3:4b:e3:15:6f:4e:77:58:
f2:52:b6:42:52:af:13:35:08:bd:58:c1:04:03:22:
25:26:68:0f:17:ef:87:9e:92:4b:2a:9e:3d:21:1f:
db:7d:da:64:cb:5e:c5:c7:2e:67:5f:6c:0c:c5:7f:
0d:72:88:80:4a:58:61:78:01:56:5b:22:2b:0f:85:
8d:43:78:1b:3e:8e:64:91:6f:60:55:17:80:fa:f4:
11:19:a8:7e:11:3a:cc:5f:ff:69:5b:17:0d:54:49:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:97:EF:39:61:39:8E:BF:A3:B3:84:43:5F:71:7B:B8:89:F9:57
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XvyX7zlhOY6_o7OEQ19xe7iJ-Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ef:89:c0:b7:eb:24:04:63:fb:2f:6f:13:5c:dd:68:17:c7:
7d:fa:f0:1f:ae:35:f9:cb:cc:2d:1b:63:9d:6b:ad:72:a2:6c:
37:4c:7d:66:8c:9f:34:64:ed:2c:88:23:77:5f:a7:68:26:43:
44:3a:11:3b:fb:b1:86:f7:cb:4d:21:87:7c:43:2b:c2:e6:20:
da:a3:f1:35:ce:19:91:ab:ad:a2:21:04:2a:fe:8d:42:f5:ad:
e2:a5:9c:02:d3:9e:53:ff:48:03:39:4e:6c:43:cd:15:0e:d8:
91:fc:87:56:5e:0a:a7:ab:fa:0e:4e:cd:da:dd:b1:13:91:96:
61:c5:21:93:76:05:1a:b7:fe:43:cd:75:31:45:95:c9:0b:89:
29:67:f2:22:49:b7:f6:2e:69:0a:43:34:fa:46:18:63:52:e3:
5f:6e:6f:60:86:3a:9b:f4:3d:65:ae:0c:0d:46:24:65:ee:65:
e3:e5:a5:1c:3d:3e:c1:58:52:54:57:af:b6:d3:b2:54:6e:71:
8d:1a:f4:42:f5:66:c9:37:a6:25:a8:a0:07:6f:f0:94:1f:65:
5e:33:a9:f7:07:89:77:91:10:f9:76:65:90:fb:5d:11:27:73:
bb:8c:f0:fa:8e:ba:54:72:b8:8f:15:da:89:03:8e:97:94:ea:
fd:30:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:04 2025 by rpki-client