Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YWu8nsQghHRNyILwUE8bUdqYW1w.roa
File: YWu8nsQghHRNyILwUE8bUdqYW1w.roa (raw, json)
Hash identifier: 4JsxM1y+whAR15y1ZZnk8INp8jtvYyHCL2+7Mvk9mQA=
Subject key identifier: 61:6B:BC:9E:C4:20:84:74:4D:C8:82:F0:50:4F:1B:51:DA:98:5B:5C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8FB79E8BC03BDB69D52371962D921E46
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YWu8nsQghHRNyILwUE8bUdqYW1w.roa
Signing time: Wed 13 Sep 2023 18:04:50 +0000
ROA not before: Wed 13 Sep 2023 18:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:8fb7:38df/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:b7:9e:8b:c0:3b:db:69:d5:23:71:96:2d:92:1e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 18:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=616bbc9ec42084744dc882f0504f1b51da985b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:c8:fe:e0:6a:39:79:43:d9:e9:18:3e:f3:
c4:51:2b:81:b7:7a:db:f9:41:8f:91:6d:02:08:4b:
a4:a1:88:2b:45:43:db:b8:e4:6d:47:39:53:f0:6d:
29:9a:2d:75:1a:a7:26:12:6e:1d:c1:90:3d:ad:17:
0e:59:0b:c8:40:90:74:f5:08:20:b1:08:7b:18:75:
81:9a:56:6f:94:3f:f3:ed:82:1e:32:88:fc:f7:cf:
4e:e0:7e:5a:2e:d6:fd:40:d7:37:e2:79:7e:96:d2:
56:ae:55:91:9c:06:41:70:3a:ec:42:46:d4:0b:0c:
22:20:8c:c2:e6:e9:13:67:55:e5:2c:b7:57:38:27:
ea:f1:25:fd:89:9d:e7:79:ad:d4:2c:ad:8f:f2:87:
d3:3e:39:ca:63:68:91:6e:f5:3a:26:4c:39:ca:fc:
bf:f7:60:23:97:73:fa:47:fc:d1:1e:d7:46:35:de:
4b:90:cd:48:d7:24:19:33:69:96:78:b8:f3:f6:15:
e9:8c:9a:46:9f:8c:a2:e5:24:93:bf:5c:dc:34:61:
e7:df:d9:0b:5e:1a:3f:a4:0a:3e:13:5d:1d:ca:08:
3c:81:85:1c:e6:4b:4e:ac:73:5d:ac:7f:e6:5e:c0:
b2:fa:ab:2b:0c:5a:78:8f:89:e1:5c:c8:77:2b:20:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:BC:9E:C4:20:84:74:4D:C8:82:F0:50:4F:1B:51:DA:98:5B:5C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YWu8nsQghHRNyILwUE8bUdqYW1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:c2:74:e6:e1:b4:e7:8f:1e:9e:e0:02:ad:18:02:cb:6c:f8:
7f:ed:14:00:c2:09:77:6c:45:c4:41:58:3d:d5:54:ae:c8:59:
50:31:6e:73:18:ab:41:e3:6a:91:1d:fa:6c:ff:25:55:68:70:
62:9a:0b:84:32:13:00:6b:2c:58:f9:55:b5:b6:63:28:7a:a7:
27:d2:8a:d2:44:b2:6c:48:91:bc:4a:42:31:37:be:3b:d2:f8:
c0:9e:f2:05:f1:34:4d:df:fc:d8:5c:8f:d3:db:bc:a7:9e:d4:
9f:92:12:6d:c9:c3:48:56:69:4c:37:5a:b9:24:e6:7c:8b:47:
f3:93:f0:1d:58:b7:1f:7f:49:25:0e:88:91:0a:a2:99:6f:63:
84:f9:28:9f:bc:ce:9e:1d:90:89:4e:df:f7:6d:ae:3e:6a:cd:
36:fc:8a:e9:39:11:08:7e:32:05:a1:00:d4:81:69:28:be:29:
86:da:a3:49:6b:6b:d5:26:a1:d9:95:07:35:7d:84:8f:67:8f:
f6:68:af:4e:f7:2d:15:a8:8a:db:3a:de:e5:b9:0b:82:0c:58:
c2:d4:72:52:0a:e7:e7:5e:c7:77:77:fb:0e:8c:07:50:10:4c:
1c:16:89:35:19:25:66:47:63:99:16:b2:61:a1:7f:97:e6:64:
18:c6:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:26 2025 by rpki-client