Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aUAv8TfTZAEcDExLZ5YhxZgbQaA.roa
File: aUAv8TfTZAEcDExLZ5YhxZgbQaA.roa (raw, json)
Hash identifier: 4K0OI0Z04Oby7JAhhK7F+A3lUvCYGbB+B3oJrzOP6d4=
Subject key identifier: 69:40:2F:F1:37:D3:64:01:1C:0C:4C:4B:67:96:21:C5:98:1B:41:A0
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8EDBE43146B369944F03CB1E5B024103
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aUAv8TfTZAEcDExLZ5YhxZgbQaA.roa
Signing time: Wed 13 Sep 2023 14:04:50 +0000
ROA not before: Wed 13 Sep 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:8edb:7085/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:db:e4:31:46:b3:69:94:4f:03:cb:1e:5b:02:41:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69402ff137d364011c0c4c4b679621c5981b41a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:85:36:f8:8d:0c:51:9c:e9:f7:3c:8d:ae:
b2:ae:76:5b:c9:98:b9:0c:c3:54:56:f4:76:e2:20:
83:8a:7c:db:7d:a7:54:4d:19:15:1c:28:03:d8:3e:
b5:27:67:d5:20:b6:e5:76:a0:5f:d1:4c:8c:33:bd:
6e:4a:2e:21:7d:11:3f:a7:78:05:55:55:3e:39:2e:
7d:f8:9f:49:51:c2:a7:d9:1f:25:c4:f5:e1:94:a8:
ef:a0:1f:d4:95:64:cc:0c:84:94:0a:4a:d1:35:b5:
10:0b:ba:ab:90:53:53:57:20:22:21:9b:1e:1e:7e:
0c:e1:ff:b6:25:cd:4e:0d:16:58:6b:84:2c:da:8d:
1f:3e:8c:4d:a8:4a:43:84:3b:bc:55:d9:1e:47:f7:
56:ef:53:ca:c4:f9:5a:0f:c5:00:cd:df:d2:d1:19:
2b:28:c9:4e:83:30:90:b7:5c:d1:8a:7d:9f:97:36:
89:ff:be:f4:16:82:0b:d5:c3:93:df:b0:91:03:f1:
83:90:35:dc:fe:63:0d:86:8e:39:3d:4c:37:d6:f2:
66:d7:cd:53:20:57:3c:8c:4f:eb:15:0d:f4:31:a0:
94:3b:19:44:f5:d0:5d:84:de:97:8a:1d:d4:25:48:
6e:dc:ff:f8:dd:93:e3:ae:71:d2:60:f5:3f:e8:a8:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:2F:F1:37:D3:64:01:1C:0C:4C:4B:67:96:21:C5:98:1B:41:A0
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aUAv8TfTZAEcDExLZ5YhxZgbQaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b2:de:c8:b5:e1:47:1a:ad:b3:e1:4e:cf:a2:b7:8e:77:7f:
ac:d6:84:ae:58:41:74:3d:43:7d:88:4f:70:35:a5:f8:57:23:
43:7a:92:e1:de:2b:29:fb:40:d4:a3:fa:96:1b:4d:64:53:3d:
29:30:28:06:7f:e4:a0:a2:79:0a:5e:ca:6d:b6:e1:48:31:52:
0d:c2:a0:7e:36:94:52:79:01:1d:14:76:d9:8e:60:9b:77:18:
6d:5a:2f:80:8d:32:36:21:59:b0:69:2b:f3:60:78:ea:65:c5:
dc:f1:47:3c:00:c5:03:0e:16:cb:d0:33:96:2b:45:26:45:a1:
0d:89:94:c9:4c:d8:7b:db:41:22:41:a6:32:29:fd:e5:4c:2e:
86:66:ba:95:55:25:6d:7e:ab:51:0c:6c:cb:94:38:67:0f:3a:
d1:f5:05:30:04:f4:03:52:7a:05:1a:7e:aa:f1:f7:13:c7:70:
d4:2d:c0:b0:01:dd:a5:ae:0f:34:ae:04:3f:27:f1:d7:aa:17:
c5:9b:8b:23:27:01:cf:fa:84:8d:0f:3f:5e:ae:53:4d:ad:8f:
09:59:25:8b:37:de:1e:71:61:7c:66:f3:ed:21:b8:e5:1d:bf:
3e:05:6a:34:0a:04:2f:9c:0e:6b:12:96:b1:cd:74:c7:9a:27:
7b:61:82:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqO2+QxRrNplE8Dyx5bAkEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEzMTQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTQwMmZmMTM3ZDM2NDAxMWMwYzRjNGI2Nzk2MjFjNTk4MWI0MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsiFNviNDFGc6fc8ja6yrnZbyZi5
DMNUVvR24iCDinzbfadUTRkVHCgD2D61J2fVILbldqBf0UyMM71uSi4hfRE/p3gF
VVU+OS59+J9JUcKn2R8lxPXhlKjvoB/UlWTMDISUCkrRNbUQC7qrkFNTVyAiIZse
Hn4M4f+2Jc1ODRZYa4Qs2o0fPoxNqEpDhDu8VdkeR/dW71PKxPlaD8UAzd/S0Rkr
KMlOgzCQt1zRin2flzaJ/770FoIL1cOT37CRA/GDkDXc/mMNho45PUw31vJm181T
IFc8jE/rFQ30MaCUOxlE9dBdhN6Xih3UJUhu3P/43ZPjrnHSYPU/6KiwdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGlAL/E302QBHAxMS2eWIcWYG0GgMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvYVVBdjhUZlRaQUVjREV4TFo1WWh4WmdiUWFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+y3si14UcarbPhTs+i
t453f6zWhK5YQXQ9Q32IT3A1pfhXI0N6kuHeKyn7QNSj+pYbTWRTPSkwKAZ/5KCi
eQpeym224UgxUg3CoH42lFJ5AR0UdtmOYJt3GG1aL4CNMjYhWbBpK/NgeOplxdzx
RzwAxQMOFsvQM5YrRSZFoQ2JlMlM2HvbQSJBpjIp/eVMLoZmupVVJW1+q1EMbMuU
OGcPOtH1BTAE9ANSegUafqrx9xPHcNQtwLAB3aWuDzSuBD8n8deqF8WbiyMnAc/6
hI0PP16uU02tjwlZJYs33h5xYXxm8+0huOUdvz4FajQKBC+cDmsSlrHNdMeaJ3th
gp0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:11:09 2025 by rpki-client