Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/a3RbiAPUwc6Etwdk5Zmy2KNCRiU.roa
File: a3RbiAPUwc6Etwdk5Zmy2KNCRiU.roa (raw, json)
Hash identifier: XBz/xzPJbbW6yKWANJbYiwTOC93L25T1wb22lX9MQCk=
Subject key identifier: 6B:74:5B:88:03:D4:C1:CE:84:B7:07:64:E5:99:B2:D8:A3:42:46:25
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5E66B7D7CE89C70B6E5EA76227ED1C62
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/a3RbiAPUwc6Etwdk5Zmy2KNCRiU.roa
Signing time: Mon 04 Sep 2023 04:15:04 +0000
ROA not before: Mon 04 Sep 2023 04:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:66:b7:d7:ce:89:c7:0b:6e:5e:a7:62:27:ed:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 04:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b745b8803d4c1ce84b70764e599b2d8a3424625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:7d:3b:d3:12:ef:19:d6:0b:3a:a9:1f:bb:
9a:60:b2:76:56:0e:0d:9a:26:b7:c7:de:45:f3:4a:
21:21:df:bc:a0:92:ac:a0:ce:fb:ac:b8:ac:8c:14:
e3:31:cf:1c:df:32:d2:fa:00:d3:d7:fd:36:f9:72:
1e:64:89:a9:4b:57:ee:03:26:bc:8f:d5:a9:b6:36:
1c:6c:57:1f:35:ad:5e:06:cd:6b:51:81:fa:97:f8:
38:d8:08:ab:25:38:68:c9:ef:98:20:af:fb:67:00:
59:1c:e4:ba:ee:e9:93:89:dc:08:89:0c:93:2c:74:
69:71:69:7a:c3:79:af:74:19:e3:ee:5a:e1:60:07:
32:60:85:c5:b6:03:49:f6:20:d2:48:97:61:65:f0:
51:0a:97:15:b1:81:36:08:e9:72:54:55:a2:8b:12:
56:9d:a0:f6:91:99:46:76:be:c0:d2:b5:96:4c:db:
3a:14:cc:34:a2:af:fe:11:79:8b:0e:30:c8:24:af:
da:7b:b1:01:24:4c:d4:c0:78:bf:3c:e2:f5:f5:65:
2c:be:d8:8f:d2:1a:fc:df:b6:2e:2d:5c:f4:ea:c9:
4b:14:16:3d:31:e2:08:9a:f3:e9:d3:b6:24:26:d3:
04:57:d1:35:1c:69:11:cb:31:5d:1e:13:5f:14:77:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:5B:88:03:D4:C1:CE:84:B7:07:64:E5:99:B2:D8:A3:42:46:25
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/a3RbiAPUwc6Etwdk5Zmy2KNCRiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:85:92:c9:12:cd:4b:37:bc:b6:13:c0:d6:53:10:bf:aa:d2:
79:44:6e:f3:bc:14:81:1f:68:a0:0d:22:65:37:2d:bf:0c:db:
32:66:62:d1:21:37:78:57:fc:26:c6:e6:aa:b5:4d:91:8c:c0:
ac:75:30:35:4d:be:9e:c3:0a:7e:75:61:8a:a9:50:95:c2:b7:
fa:fe:ed:00:61:60:88:9d:c4:7e:7c:60:a7:cf:f7:3d:0d:4b:
b4:2a:f6:c3:9e:15:48:09:90:3a:d7:26:46:a1:d9:1f:72:e5:
1d:36:19:b2:5d:61:c8:9a:57:3b:51:93:aa:2f:d1:41:27:85:
b8:21:b6:01:45:6a:a8:70:fb:78:13:bb:f2:3e:89:24:33:bb:
d1:c8:33:d3:16:49:2e:3b:77:1f:27:c2:73:2a:bc:2c:b8:2f:
c1:4b:b0:42:53:58:37:4f:9e:41:41:30:92:22:65:b2:f0:74:
3f:0e:2c:25:42:4d:ff:e2:d8:43:b8:39:cd:17:30:ae:c2:8f:
36:09:cb:d0:cd:68:82:5e:2e:25:63:ba:40:7d:e6:41:12:58:
57:14:31:af:14:1d:66:83:7b:4e:46:de:37:8b:60:f4:11:75:
d4:a0:99:d3:30:e3:7e:72:dc:2f:8d:07:d1:1c:65:91:50:ea:
68:16:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:34 2025 by rpki-client