Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_owGzqfq7SxZTGJfJTJ3PuD53XM.roa
File: _owGzqfq7SxZTGJfJTJ3PuD53XM.roa (raw, json)
Hash identifier: mJPAzY0LGs82iASNUhrZ1exasoZlVhYWVGPBNvtACWM=
Subject key identifier: FE:8C:06:CE:A7:EA:ED:2C:59:4C:62:5F:25:32:77:3E:E0:F9:DD:73
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A940993608B0B678E97641E820A212EB9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_owGzqfq7SxZTGJfJTJ3PuD53XM.roa
Signing time: Thu 14 Sep 2023 14:12:50 +0000
ROA not before: Thu 14 Sep 2023 14:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:09:93:60:8b:0b:67:8e:97:64:1e:82:0a:21:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 14:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe8c06cea7eaed2c594c625f2532773ee0f9dd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:09:71:04:97:31:f2:70:77:a1:2d:d1:f0:
40:d1:a6:0f:26:35:fe:1b:7e:8f:8f:7e:1a:d0:53:
3e:5d:49:45:73:34:62:0f:25:2b:18:d8:fe:f1:d5:
71:2d:e8:2d:2b:77:13:b1:ff:f6:ae:33:37:40:2f:
9e:61:25:d9:2e:6b:43:2d:2f:ac:b7:aa:bf:b7:2d:
41:3f:2a:a4:87:46:c1:24:f3:e0:32:a7:55:33:0a:
91:d0:1e:a9:27:66:70:3d:87:af:53:ec:3e:53:7b:
af:50:ff:23:1e:b8:6c:56:b1:d3:df:f2:48:ab:42:
e8:f1:40:a5:1d:52:5e:e6:57:5e:99:d3:96:a4:bf:
ba:ff:6a:03:98:bb:8e:8a:e9:4d:6c:b8:39:d4:cf:
61:04:db:e8:b1:c2:ed:39:64:f7:ef:c1:1b:90:36:
07:a9:fd:fa:33:d6:69:fd:01:76:af:b7:64:c1:0d:
57:e1:b3:49:30:88:af:d1:1c:9d:8b:b2:01:3a:8d:
7c:4a:b3:f3:71:3a:b4:1c:bf:45:89:cb:2e:e4:5b:
68:11:7e:84:a4:48:0b:90:24:cf:49:a9:c4:d7:9d:
cc:30:f3:2d:d6:75:c8:a9:88:11:eb:79:54:77:1a:
94:c9:b5:5a:af:c4:9f:5e:49:75:3c:93:ae:0e:5f:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:06:CE:A7:EA:ED:2C:59:4C:62:5F:25:32:77:3E:E0:F9:DD:73
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_owGzqfq7SxZTGJfJTJ3PuD53XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:8f:3b:8c:02:b1:a1:89:69:2b:b5:2f:a2:38:38:38:29:ed:
4c:2c:f1:38:b7:cb:e0:0f:6c:90:7c:19:58:3f:68:72:e0:4d:
df:7b:59:57:af:f8:1e:9c:1b:e8:99:8e:f8:1b:50:5b:c9:d1:
79:23:24:e3:58:d5:74:5d:fd:a8:7b:cb:a3:3e:57:4d:55:b5:
59:20:f5:73:93:b4:ef:36:ad:4f:15:a2:cb:94:45:0b:18:ad:
e7:90:76:5f:db:82:df:66:f3:87:f0:bd:48:2e:46:3a:4a:05:
ac:5d:51:12:2b:7f:91:0b:6d:87:b2:13:a5:2e:d3:d8:33:1c:
bb:db:bc:c1:a6:f2:73:a3:ab:77:ad:1b:66:a6:4c:c5:86:29:
8f:39:bf:73:43:a0:e9:64:04:e0:a9:64:bf:55:38:a0:18:4b:
66:80:68:f4:91:9d:f1:48:5e:71:d6:ca:80:38:e6:49:e8:56:
05:d3:23:35:f2:76:75:cb:3d:95:bd:ea:cf:8c:0b:30:d1:7b:
ab:b6:ab:6f:27:cd:76:80:49:59:62:f3:07:69:99:be:d4:83:
ec:73:0e:d5:b2:b8:da:66:2a:83:a8:d0:78:8d:2a:df:53:b0:
b2:02:d6:ed:2c:8e:9a:01:90:2f:13:29:2a:1b:ef:bd:b0:82:
d5:b7:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:34 2025 by rpki-client