Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y2H1942j0m8PLpew8Wdp5s0FGvE.roa
File: Y2H1942j0m8PLpew8Wdp5s0FGvE.roa (raw, json)
Hash identifier: KZcGNmXDv2k4XuDusW7uC9vd0N271O9DcGl7mybdcSc=
Subject key identifier: 63:61:F5:F7:8D:A3:D2:6F:0F:2E:97:B0:F1:67:69:E6:CD:05:1A:F1
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A664DC773A95660B52CF85A1A984AFDFF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y2H1942j0m8PLpew8Wdp5s0FGvE.roa
Signing time: Tue 05 Sep 2023 17:04:47 +0000
ROA not before: Tue 05 Sep 2023 17:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:664d:46ad/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:4d:c7:73:a9:56:60:b5:2c:f8:5a:1a:98:4a:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 17:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6361f5f78da3d26f0f2e97b0f16769e6cd051af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:6e:58:da:fa:20:5e:fa:6e:77:ed:86:92:
b8:86:00:64:85:87:1d:61:91:c7:ab:b3:22:ae:7b:
38:46:eb:19:03:5e:96:e5:83:e5:b6:b0:80:af:83:
5d:fe:a4:c5:04:62:b0:42:c9:37:e1:12:52:12:dd:
bb:e1:08:72:0c:9b:99:6c:2d:dc:de:9e:ff:49:3d:
3c:b6:b7:19:54:cd:4f:91:a6:0d:14:68:fc:ca:cc:
e8:cb:f4:74:a1:b5:d6:b5:b6:d7:72:49:c7:fa:63:
df:02:c4:66:ef:b0:1c:0d:56:79:24:01:0e:c2:87:
10:60:d5:58:e9:9b:7d:4e:ea:0e:b6:65:51:3e:a1:
f8:8c:3b:53:81:67:96:41:ca:a8:a5:bd:4f:30:51:
58:3d:68:6c:26:20:99:ba:09:36:07:af:a7:ec:a0:
55:fe:55:79:50:0f:fc:94:1b:1a:bd:4d:80:70:3d:
a5:86:39:a1:ed:2c:bf:c3:f5:6c:19:40:1a:58:51:
0d:36:5b:c4:ae:ed:f0:67:17:8c:0c:89:06:1c:d5:
22:3f:f4:fe:47:68:16:51:f1:06:71:a8:f9:f8:25:
54:0f:ca:3c:64:0e:8f:da:b8:24:ed:85:08:41:e2:
c8:cb:8e:ba:c4:fd:fd:eb:ed:15:e1:f1:2b:ee:79:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:61:F5:F7:8D:A3:D2:6F:0F:2E:97:B0:F1:67:69:E6:CD:05:1A:F1
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y2H1942j0m8PLpew8Wdp5s0FGvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:36:cd:80:ae:90:a0:85:37:e6:74:cd:c0:e9:39:97:e5:20:
25:c7:4f:4b:90:b3:1e:15:73:3a:65:34:19:97:14:b0:47:0f:
55:8d:39:00:95:8f:1e:79:74:3a:c7:06:3d:37:db:e7:2c:db:
a8:b9:41:8f:49:b7:cb:e1:ea:43:0e:f9:94:0e:cc:f1:2b:65:
52:d7:4f:1a:93:92:ce:e7:be:4a:7a:c8:28:66:7e:5e:fa:70:
04:1a:a9:2a:c9:46:ff:c5:7c:7d:ec:8e:4a:c6:0c:d1:a2:eb:
d5:2d:b2:5b:e3:b0:1d:7d:06:b3:1d:c0:61:ec:b8:f7:98:2e:
91:8e:3f:b5:05:2e:39:8e:52:b5:30:5b:ef:78:63:8b:bb:53:
15:c0:57:9f:41:29:48:3e:fb:c0:07:9d:5e:ff:aa:18:82:05:
25:fe:f8:17:db:59:b3:d5:c8:34:a1:e3:98:7b:47:09:ec:9e:
1a:4e:bc:7c:2f:7b:c9:0c:47:65:ba:97:a2:b4:6e:a1:5a:93:
6e:78:f0:4f:f1:af:cc:cd:06:3e:7c:e0:77:d0:70:0b:1d:62:
a0:40:7d:e8:39:86:58:a4:bf:ee:57:02:d6:12:91:e3:ac:44:
26:c1:60:09:1c:4f:32:be:73:cc:b8:48:f9:f6:b6:c0:87:ca:
eb:b9:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:24 2025 by rpki-client