Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_SxLDCIQVCDeeiRbZqubk_Ujw_0.roa
File: _SxLDCIQVCDeeiRbZqubk_Ujw_0.roa (raw, json)
Hash identifier: AcYCPlUhEo2F6KqoMVt52hCxSko62G/BfpvQ1uZE9NQ=
Subject key identifier: FD:2C:4B:0C:22:10:54:20:DE:7A:24:5B:66:AB:9B:93:F5:23:C3:FD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8685CC25CD1F4BB54D4EDF8A919340AD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_SxLDCIQVCDeeiRbZqubk_Ujw_0.roa
Signing time: Mon 11 Sep 2023 23:13:50 +0000
ROA not before: Mon 11 Sep 2023 23:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:85:cc:25:cd:1f:4b:b5:4d:4e:df:8a:91:93:40:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 23:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2c4b0c22105420de7a245b66ab9b93f523c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:79:e3:82:ed:20:6b:52:22:06:aa:a2:af:
5d:9b:14:1f:6a:99:81:26:89:55:aa:37:f3:d6:e1:
08:11:fe:3b:31:4c:00:91:22:d5:63:4b:80:b1:fe:
de:08:88:b0:4f:fa:e1:b3:22:a2:ac:92:df:88:a6:
c0:7b:e2:e5:3e:e7:59:34:9b:d1:8f:e0:74:35:71:
f9:b3:1c:af:31:15:cc:d0:1d:8c:89:4d:a6:a3:22:
1e:9b:d3:95:be:82:0d:8e:72:3b:99:6b:ea:30:8a:
34:53:a6:8e:f5:92:0e:30:d4:12:7f:8e:71:6d:5b:
83:e4:8d:2a:60:5d:2f:7a:7c:29:fd:79:3a:c6:4d:
f3:00:ec:1a:a0:6d:b2:23:98:8e:e9:5f:56:11:92:
b4:f8:bd:b3:b0:d0:c6:0a:5c:b5:9d:01:20:16:aa:
e3:4f:98:4a:e7:c5:0b:24:eb:99:70:87:43:c8:6c:
f3:85:c3:9c:d4:64:de:5c:af:3d:98:94:d6:13:dd:
1c:06:04:72:a5:a1:81:ca:21:5e:64:18:bc:8c:32:
c4:23:dd:68:7c:f7:5d:a1:33:c5:9c:1a:b2:4c:cf:
58:1b:64:e2:8c:1a:70:7c:6b:4c:2f:96:d2:95:25:
48:ca:c4:c1:86:a8:0e:9a:83:12:66:a4:23:6d:d3:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2C:4B:0C:22:10:54:20:DE:7A:24:5B:66:AB:9B:93:F5:23:C3:FD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_SxLDCIQVCDeeiRbZqubk_Ujw_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:29:92:5d:2e:78:da:22:49:e4:29:95:02:73:09:ea:13:a6:
62:af:c2:2d:81:fd:68:dc:b3:d9:d2:76:63:76:d0:c5:90:34:
cb:31:09:b1:5e:eb:99:09:f0:60:2c:fd:fa:bb:7d:ae:ac:fd:
c7:77:c5:51:c5:28:c9:15:f0:61:33:0f:3a:dd:24:b9:69:10:
87:b0:94:be:5d:d7:35:08:d6:71:2e:50:bd:8f:9d:f2:3f:db:
46:ef:7d:03:bc:7d:a6:4a:e6:a1:9e:b5:5a:0f:85:19:10:57:
a9:2d:34:8e:1e:75:90:55:18:4e:a6:00:91:be:8b:36:cb:08:
30:60:ad:81:ad:fa:11:da:5d:be:c9:a6:9a:5f:c7:a1:5b:b1:
20:f8:87:75:2a:1d:5e:52:76:d2:9d:9e:b6:b8:37:0e:68:60:
cb:1a:b8:c5:19:c5:20:2e:28:cd:b8:78:2a:f3:7e:64:21:f6:
a7:46:9a:ae:f9:f6:fc:df:2a:b0:b3:9a:42:47:01:4a:67:e2:
46:76:63:1d:9a:79:9a:46:ac:c1:1e:79:e5:6d:54:98:e9:c4:
b7:cd:05:ec:0b:4d:19:35:7c:19:f9:f7:26:0a:a1:61:d4:65:
92:3e:93:2f:1f:5d:3b:23:7f:a0:d0:29:e5:45:81:e7:75:42:
17:8e:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:49 2025 by rpki-client