Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bcJ8MIbEvpOjPsAEhK3f-QJ26No.roa
File: bcJ8MIbEvpOjPsAEhK3f-QJ26No.roa (raw, json)
Hash identifier: jy+j1UCGMjXp3iV3gNbtCZ1x7Ykvdfsh9X1WJmSOOIY=
Subject key identifier: 6D:C2:7C:30:86:C4:BE:93:A3:3E:C0:04:84:AD:DF:F9:02:76:E8:DA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A91DCEFB6E75BFF9C269B8C6047974F9D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bcJ8MIbEvpOjPsAEhK3f-QJ26No.roa
Signing time: Thu 14 Sep 2023 04:04:50 +0000
ROA not before: Thu 14 Sep 2023 04:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:91dc:9c65/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:dc:ef:b6:e7:5b:ff:9c:26:9b:8c:60:47:97:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 04:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc27c3086c4be93a33ec00484addff90276e8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:0b:be:a4:48:4a:cd:73:8b:f5:5c:b5:d1:
5b:12:39:93:a4:90:de:08:a5:6f:c8:0a:c8:c5:59:
f3:09:82:67:49:1b:a4:22:5f:09:ad:3c:45:89:b9:
3e:b1:9d:e4:5c:27:6a:e0:f0:54:99:a7:45:f3:5e:
cd:3b:d1:2b:27:0c:76:75:a8:0d:56:3a:57:19:f3:
9f:4d:fb:fe:89:a3:a4:92:39:82:9e:a9:e0:c9:85:
cb:26:16:8c:97:af:5c:c7:cb:3e:8c:38:ad:02:b7:
4e:17:b1:84:04:96:85:4d:7c:51:68:6c:ce:9b:5e:
a8:ba:62:80:17:26:31:b5:a8:40:10:a6:b7:35:6c:
a8:8b:ce:2a:8a:4f:de:92:56:14:58:a2:fa:39:ae:
da:00:7a:a1:62:2d:1f:66:af:90:60:06:15:dd:8b:
6b:46:57:00:b7:a1:d1:66:6d:b6:4a:9f:83:48:44:
65:90:41:42:19:d0:66:d6:39:bd:63:5b:70:e5:81:
70:17:60:2e:6b:64:f8:2a:97:86:cd:4b:d1:66:47:
19:4f:c6:14:72:82:9b:33:83:be:be:2c:d4:32:85:
d0:b1:67:1b:e5:98:b4:f3:aa:59:f6:7b:f0:8c:79:
ae:9f:c8:3e:02:cf:c1:10:52:87:33:1a:ec:1f:8d:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:7C:30:86:C4:BE:93:A3:3E:C0:04:84:AD:DF:F9:02:76:E8:DA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bcJ8MIbEvpOjPsAEhK3f-QJ26No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:85:0a:87:0f:b5:a9:7b:66:4a:e7:7d:21:6b:21:fd:ad:e3:
90:45:34:46:5c:cb:6b:09:1b:99:b0:a0:1f:77:37:ae:f3:72:
8f:8b:fa:87:2e:17:e5:e7:60:09:de:fe:fe:88:d1:ee:db:57:
8a:10:4e:be:32:97:81:bd:be:46:47:c5:c3:4f:7c:cf:5d:1a:
17:af:68:81:3e:f5:8c:da:eb:2d:48:b7:86:5e:8b:50:1d:69:
28:50:34:81:c1:fa:1b:25:b3:98:78:63:f6:0e:40:04:9d:1c:
db:6e:58:33:c9:9e:34:5e:cc:e5:7c:59:d5:24:49:cc:be:8f:
25:5b:cb:a0:e2:e1:c2:61:74:cb:d9:e1:c4:92:c2:92:ba:64:
61:ef:bd:38:5b:86:59:da:e0:9c:4e:11:83:a1:a1:6d:f3:0b:
c6:bd:7c:98:66:6f:71:4c:17:d7:2c:e9:c7:7c:fd:4a:ca:4b:
10:b0:47:87:e9:03:98:20:c1:6f:ae:91:2b:aa:14:77:30:d2:
8e:65:63:d0:4a:00:99:81:4c:48:5b:15:84:a5:d5:94:fb:e9:
75:bc:07:cc:13:bb:a2:d9:05:d7:3c:a7:2c:00:1a:9d:12:22:
32:0e:43:3a:5e:a1:0c:2c:55:dc:53:ff:2c:5b:e2:c9:3a:d9:
dc:c1:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:38 2025 by rpki-client