Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aSYqrnDpeTrG7tVSDV0gL_DXIcM.roa
File: aSYqrnDpeTrG7tVSDV0gL_DXIcM.roa (raw, json)
Hash identifier: mL7CcE9cmqAyihTvykTPp60voDwuRicUA9zmatO+Ubo=
Subject key identifier: 69:26:2A:AE:70:E9:79:3A:C6:EE:D5:52:0D:5D:20:2F:F0:D7:21:C3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA1BDE083962EC518FD92935A1BA465A0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aSYqrnDpeTrG7tVSDV0gL_DXIcM.roa
Signing time: Sun 17 Sep 2023 06:04:50 +0000
ROA not before: Sun 17 Sep 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:a1bd:c2e2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:bd:e0:83:96:2e:c5:18:fd:92:93:5a:1b:a4:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 17 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69262aae70e9793ac6eed5520d5d202ff0d721c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:21:15:df:19:53:fe:63:fc:f3:de:96:3a:
cf:9d:00:1f:01:84:4f:d2:f6:46:61:e7:38:54:9a:
bc:3f:95:7d:4f:c6:9e:d9:38:bb:23:68:22:cd:63:
a4:64:47:57:22:29:f5:67:9d:63:e1:08:b6:b9:67:
11:ed:37:0b:92:9d:0f:07:2d:a8:de:11:bd:a1:39:
ae:65:e3:d7:8d:4d:81:55:97:02:15:88:da:96:d2:
c2:e2:60:cd:ed:53:3b:79:29:bf:d8:11:b0:a0:b1:
90:3d:30:00:3f:2b:05:85:68:d4:16:8a:7a:dd:06:
1b:29:81:28:e7:fe:c6:ad:21:93:b9:b6:07:0d:a6:
7e:cd:d9:8b:6b:37:6e:de:bc:a4:68:90:08:e1:95:
75:62:bb:79:9a:98:0f:ee:3f:1d:fd:f0:ad:ae:72:
b5:aa:c6:79:76:25:c1:18:c8:5a:bd:38:5c:29:db:
ed:3d:4a:ca:a8:aa:25:ea:ab:6c:17:5d:2b:a9:a9:
da:90:f0:15:c7:d7:33:94:88:05:4c:a0:ff:5c:0e:
42:6f:7f:00:d3:9a:89:4e:68:45:aa:9e:37:0a:22:
f4:4e:d2:c6:16:72:66:7c:92:06:a9:b1:7e:ec:d0:
11:a8:c2:5e:68:51:48:03:15:ee:ec:d5:4d:c6:41:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:2A:AE:70:E9:79:3A:C6:EE:D5:52:0D:5D:20:2F:F0:D7:21:C3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aSYqrnDpeTrG7tVSDV0gL_DXIcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:2f:ba:b6:42:9f:13:98:d7:fd:cd:88:c1:8f:1f:73:f8:17:
01:36:5f:11:01:fb:b0:35:9a:d1:0c:a1:1c:42:ff:97:49:fd:
50:e1:0d:ff:36:1c:71:d5:10:ba:02:b2:b6:7c:eb:df:4f:c9:
7f:1c:6f:00:7a:88:18:39:cf:ed:1d:88:07:42:c1:fe:ff:17:
43:49:31:e3:1a:1a:b5:82:fa:15:e3:a4:68:dc:50:6c:55:7c:
53:62:43:f5:67:5a:2d:95:f7:f5:fc:41:18:a2:32:58:7a:f4:
6f:87:50:41:dc:2a:39:47:b7:a8:ba:2f:9b:c6:89:ee:01:2a:
2e:7b:dc:92:90:f6:7b:63:45:22:17:76:4f:b2:b5:20:b3:a3:
bb:66:6c:52:c6:a8:69:09:9f:80:2c:07:d1:10:fd:69:da:d1:
e6:f0:86:14:2b:06:71:90:56:99:16:9e:3e:ab:04:b4:8c:88:
86:aa:cf:95:52:39:fe:08:ab:4a:eb:e0:aa:30:99:9a:03:0b:
fa:68:76:f3:c7:8c:a5:f6:a0:11:11:18:dd:35:75:a8:4a:c6:
0d:c7:40:6e:89:69:98:85:0c:0d:e4:a9:72:09:d1:71:92:b8:
63:d7:ba:1a:b7:5b:6d:62:8a:a3:36:12:17:a3:1a:48:8c:ee:
5d:a6:02:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqhveCDli7FGP2Sk1obpGWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE3MDYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTI2MmFhZTcwZTk3OTNhYzZlZWQ1NTIwZDVkMjAyZmYwZDcyMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQhFd8ZU/5j/PPeljrPnQAfAYRP
0vZGYec4VJq8P5V9T8ae2Ti7I2gizWOkZEdXIin1Z51j4Qi2uWcR7TcLkp0PBy2o
3hG9oTmuZePXjU2BVZcCFYjaltLC4mDN7VM7eSm/2BGwoLGQPTAAPysFhWjUFop6
3QYbKYEo5/7GrSGTubYHDaZ+zdmLazdu3rykaJAI4ZV1Yrt5mpgP7j8d/fCtrnK1
qsZ5diXBGMhavThcKdvtPUrKqKol6qtsF10rqanakPAVx9czlIgFTKD/XA5Cb38A
05qJTmhFqp43CiL0TtLGFnJmfJIGqbF+7NARqMJeaFFIAxXu7NVNxkH5hwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGkmKq5w6Xk6xu7VUg1dIC/w1yHDMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvYVNZcXJuRHBlVHJHN3RWU0RWMGdMX0RYSWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFEvurZCnxOY1/3NiMGP
H3P4FwE2XxEB+7A1mtEMoRxC/5dJ/VDhDf82HHHVELoCsrZ8699PyX8cbwB6iBg5
z+0diAdCwf7/F0NJMeMaGrWC+hXjpGjcUGxVfFNiQ/VnWi2V9/X8QRiiMlh69G+H
UEHcKjlHt6i6L5vGie4BKi573JKQ9ntjRSIXdk+ytSCzo7tmbFLGqGkJn4AsB9EQ
/Wna0ebwhhQrBnGQVpkWnj6rBLSMiIaqz5VSOf4Iq0rr4KowmZoDC/podvPHjKX2
oBERGN01dahKxg3HQG6JaZiFDA3kqXIJ0XGSuGPXuhq3W21iiqM2EhejGkiM7l2m
AqY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:42 2025 by rpki-client