Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zr5lZfpFiAUjTGrr-NYlSurS6IQ.roa
File: Zr5lZfpFiAUjTGrr-NYlSurS6IQ.roa (raw, json)
Hash identifier: zgZH7TrewjIxtVzBcbRdCPGAsmikyHk5OPiBX//XtF0=
Subject key identifier: 66:BE:65:65:FA:45:88:05:23:4C:6A:EB:F8:D6:25:4A:EA:D2:E8:84
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A53E4E5767F14AE744E925A8D95DF4357
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zr5lZfpFiAUjTGrr-NYlSurS6IQ.roa
Signing time: Sat 02 Sep 2023 03:17:04 +0000
ROA not before: Sat 02 Sep 2023 03:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:53:e4:e5:76:7f:14:ae:74:4e:92:5a:8d:95:df:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 03:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66be6565fa458805234c6aebf8d6254aead2e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:d3:d4:77:a0:4c:63:85:ed:6e:30:44:6b:
15:f0:04:80:6a:0b:cd:a1:8b:c6:ec:58:ae:11:67:
3d:07:76:06:5c:15:1c:30:06:0b:7e:c2:7d:b8:54:
13:6c:51:3e:da:74:8f:39:b3:3c:aa:ae:91:a3:aa:
a5:b8:9e:ad:6c:18:43:9c:c8:ba:04:c5:24:9d:93:
54:ac:54:d5:51:be:9e:8f:02:f0:04:e6:a7:7a:23:
0b:b9:33:0b:38:06:30:57:08:99:f0:50:db:df:1b:
9b:55:d6:99:f1:68:fa:21:61:15:03:56:04:85:d6:
58:86:2c:ff:29:e8:41:95:7f:72:90:9f:1e:53:a9:
f1:4f:35:6d:c2:0e:c5:d4:20:07:79:aa:92:32:8d:
54:2c:72:ef:a6:20:07:10:38:ba:0e:66:8a:15:ed:
52:9b:b4:7a:26:dd:7d:56:56:0c:8a:d6:ef:78:de:
3a:c0:3d:ac:4a:93:e0:78:b6:33:6c:96:8b:5c:f9:
1d:b4:1c:93:aa:23:d0:b8:5a:61:64:11:de:82:2e:
af:0d:0f:be:76:05:cb:c7:67:66:9c:00:62:54:b1:
a2:c1:d9:fc:79:2e:34:14:05:54:ce:67:99:f6:39:
b9:22:46:6e:54:97:b7:93:87:e6:44:24:1f:04:2e:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:65:65:FA:45:88:05:23:4C:6A:EB:F8:D6:25:4A:EA:D2:E8:84
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zr5lZfpFiAUjTGrr-NYlSurS6IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:65:93:b9:a6:1e:07:56:e9:87:24:1f:85:1a:76:5d:4d:8c:
1b:10:2b:99:53:99:06:66:0a:b4:c7:3b:6b:f6:8b:18:d1:99:
89:53:66:f8:10:e1:a3:e6:1a:72:a0:85:44:5a:cf:8d:3e:38:
63:4b:da:8c:af:8d:2c:ef:71:81:2d:c0:4f:5b:13:a7:0e:8b:
df:ef:83:50:58:7e:ab:27:b2:d5:40:96:dd:f0:e5:18:c0:73:
d5:a5:1d:ab:4f:95:7d:28:87:d3:c2:93:7e:ec:6f:03:ca:17:
b7:ef:54:8b:6c:e1:ba:fd:a6:49:e5:31:c3:88:7c:d4:29:4f:
ec:9f:2c:65:a7:3e:d1:07:7f:06:0c:cf:24:ae:e5:9c:6d:00:
cb:83:c6:e8:a4:01:2e:c5:8a:65:50:80:17:c1:3e:fb:1a:f4:
b5:db:34:62:2b:eb:48:23:d8:cb:53:a2:d2:3a:9d:78:0b:d0:
9e:40:ee:49:1f:72:8a:af:86:9b:da:ba:18:93:c9:af:7e:30:
3d:7a:1a:2f:4b:07:3f:2e:84:a0:2b:9b:c0:f1:43:c9:d3:4b:
e1:aa:b9:70:cc:5b:b0:3c:c7:37:e6:27:5f:59:44:12:c5:cf:
b0:2a:06:98:67:13:55:0e:cc:0c:6b:a1:c2:60:c0:3d:7d:8b:
15:b5:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:55 2025 by rpki-client