Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b1qfZEe-y0Bg_gUMF2b4wiZTxyg.roa
File: b1qfZEe-y0Bg_gUMF2b4wiZTxyg.roa (raw, json)
Hash identifier: zt0MMcndKfNjLa/ZGnRNT0kaZOQmyEZxU8kfLTMnH/s=
Subject key identifier: 6F:5A:9F:64:47:BE:CB:40:60:FE:05:0C:17:66:F8:C2:26:53:C7:28
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A571CDFA8146E0E9876D57077EFF4101D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b1qfZEe-y0Bg_gUMF2b4wiZTxyg.roa
Signing time: Sat 02 Sep 2023 18:17:04 +0000
ROA not before: Sat 02 Sep 2023 18:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:1c:df:a8:14:6e:0e:98:76:d5:70:77:ef:f4:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 18:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5a9f6447becb4060fe050c1766f8c22653c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:f3:e4:f3:a7:69:02:4f:4c:45:ce:49:42:
2b:66:c9:e7:5a:2c:12:df:a1:d7:06:65:18:09:fb:
e9:af:68:9f:3c:c6:22:df:d7:f5:61:d4:c7:4f:da:
c0:2c:c3:9e:43:ef:7d:f5:be:c0:a9:1d:7b:ff:78:
80:2e:c9:0e:92:9a:87:73:ba:8e:16:db:22:36:7e:
30:7c:df:b4:fd:5c:ed:ca:f9:30:24:c3:a4:18:72:
8e:85:5c:a5:2c:77:4f:01:d6:af:4d:79:cd:76:81:
ca:b3:d4:86:c9:94:64:f2:fd:87:fe:01:5f:4b:fb:
03:63:db:41:d8:6d:f1:b9:54:af:d1:43:0c:1f:1b:
df:bc:b5:5f:d7:ca:59:53:aa:fb:2a:eb:39:80:66:
77:88:2e:79:ba:f3:17:5b:48:a2:14:35:24:e9:9d:
d7:04:20:f1:6a:73:88:0d:81:10:46:4f:b9:9a:66:
30:c3:72:97:df:6f:61:ce:43:1f:01:16:d5:aa:a7:
ad:5c:5b:c2:b6:4a:7d:d3:a6:05:ce:af:47:9a:fa:
d6:13:e8:3d:83:1b:ee:69:8a:ac:c6:89:ad:cd:8c:
0d:e3:d2:da:30:32:b7:bb:ab:e8:e9:d6:22:17:8f:
0e:33:be:4b:d6:b8:f9:2d:c3:02:d9:a4:8f:46:09:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:9F:64:47:BE:CB:40:60:FE:05:0C:17:66:F8:C2:26:53:C7:28
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/b1qfZEe-y0Bg_gUMF2b4wiZTxyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:7b:71:d0:61:70:ec:41:83:e4:74:12:a4:ae:83:4a:46:06:
b2:46:93:dc:40:e3:ff:13:71:70:79:c9:74:c4:31:cf:3a:90:
17:18:65:cc:74:2b:4b:0c:63:ee:aa:54:d5:6f:5c:61:08:03:
65:b1:b5:fd:9d:d1:2b:ed:bf:29:8a:c5:6f:7b:3a:3e:3c:8f:
a2:a5:5a:a2:c2:e6:7d:fb:58:6f:54:53:2a:84:d3:d5:4a:2b:
ab:94:f4:b6:5a:d8:6f:db:2b:6b:c3:11:d3:86:46:bb:5b:0a:
a2:6e:60:55:58:30:2b:17:12:ac:cb:36:66:e9:9e:b0:1e:21:
5a:b5:f5:6f:34:eb:98:c5:9a:8c:64:77:e3:e0:1d:e5:60:b9:
4c:e7:e6:0f:19:cf:0e:a4:b1:06:17:73:10:7e:ef:24:1f:42:
06:cf:92:5b:21:b3:fb:44:f4:32:6d:2a:5f:b1:7f:a8:23:ec:
11:be:f9:0f:08:86:50:8c:a7:d8:00:31:a8:15:59:3d:49:c1:
90:32:c5:bc:0e:61:8b:7e:a3:03:bd:6c:d8:4a:87:ab:77:27:
1f:8f:2e:3c:16:17:06:2a:93:b7:f9:0e:cb:c4:89:b7:af:d8:
50:d9:9a:36:7e:9a:e9:c4:0a:0a:69:4a:4b:98:3c:5d:e4:73:
39:f7:c4:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpXHN+oFG4OmHbVcHfv9BAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAyMTgxNzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjVhOWY2NDQ3YmVjYjQwNjBmZTA1MGMxNzY2ZjhjMjI2NTNjNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b7z5POnaQJPTEXOSUIrZsnnWiwS
36HXBmUYCfvpr2ifPMYi39f1YdTHT9rALMOeQ+999b7AqR17/3iALskOkpqHc7qO
FtsiNn4wfN+0/VztyvkwJMOkGHKOhVylLHdPAdavTXnNdoHKs9SGyZRk8v2H/gFf
S/sDY9tB2G3xuVSv0UMMHxvfvLVf18pZU6r7Kus5gGZ3iC55uvMXW0iiFDUk6Z3X
BCDxanOIDYEQRk+5mmYww3KX329hzkMfARbVqqetXFvCtkp906YFzq9HmvrWE+g9
gxvuaYqsxomtzYwN49LaMDK3u6vo6dYiF48OM75L1rj5LcMC2aSPRgniYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG9an2RHvstAYP4FDBdm+MImU8coMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvYjFxZlpFZS15MEJnX2dVTUYyYjR3aVpUeHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEt7cdBhcOxBg+R0EqSu
g0pGBrJGk9xA4/8TcXB5yXTEMc86kBcYZcx0K0sMY+6qVNVvXGEIA2Wxtf2d0Svt
vymKxW97Oj48j6KlWqLC5n37WG9UUyqE09VKK6uU9LZa2G/bK2vDEdOGRrtbCqJu
YFVYMCsXEqzLNmbpnrAeIVq19W8065jFmoxkd+PgHeVguUzn5g8Zzw6ksQYXcxB+
7yQfQgbPklshs/tE9DJtKl+xf6gj7BG++Q8IhlCMp9gAMagVWT1JwZAyxbwOYYt+
owO9bNhKh6t3Jx+PLjwWFwYqk7f5DsvEibev2FDZmjZ+munECgppSkuYPF3kczn3
xPk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:38 2025 by rpki-client