Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bp5D9ku70acR-BSukLitLhY2qXo.roa
File: bp5D9ku70acR-BSukLitLhY2qXo.roa (raw, json)
Hash identifier: KcPBsN5L9F2KknhyI625Kh03QhBlVHlSZLXIKb9m9eQ=
Subject key identifier: 6E:9E:43:F6:4B:BB:D1:A7:11:F8:14:AE:90:B8:AD:2E:16:36:A9:7A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A498D3150E8B5FA2A8EB49EBD82ECFBF6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bp5D9ku70acR-BSukLitLhY2qXo.roa
Signing time: Thu 31 Aug 2023 03:05:04 +0000
ROA not before: Thu 31 Aug 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:498c:f6cc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:8d:31:50:e8:b5:fa:2a:8e:b4:9e:bd:82:ec:fb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e9e43f64bbbd1a711f814ae90b8ad2e1636a97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:f9:f8:b9:d6:50:e3:5e:06:9d:6e:fd:c8:
4e:e4:15:45:33:76:f8:f6:69:eb:f7:5e:aa:e5:68:
c5:1e:e1:c0:a9:ae:c4:82:9f:b6:e0:9a:70:f6:0b:
38:fe:f1:5d:d1:45:a2:91:7c:fd:82:3f:7c:cf:17:
5f:bd:9a:53:53:63:8e:c0:bd:ff:00:a0:49:ae:7d:
fb:f2:bf:9b:c7:dd:80:4f:fd:cf:e8:02:2c:80:45:
77:f5:94:65:57:ad:3e:55:f1:c0:a2:ee:9d:ba:83:
31:b7:16:10:63:9b:3d:e7:48:78:65:2c:ea:90:a2:
cc:53:31:e5:2d:6d:50:a1:11:52:94:45:39:22:71:
80:12:61:9f:5f:0f:ad:db:c2:03:a2:6a:4b:2f:ac:
c1:cc:f2:06:56:30:83:2d:b8:1c:d0:b3:3a:a0:20:
42:15:9b:e4:79:a6:46:2c:13:e6:5e:ed:b1:32:2c:
f0:93:eb:b5:3a:88:5a:46:73:1b:1c:c3:3f:29:25:
91:e5:dd:b6:15:9f:da:85:f6:a0:d1:a4:8d:3c:0b:
42:60:0a:d1:fa:8e:07:92:e6:0b:5a:a6:7f:a4:dc:
e8:eb:df:94:ce:17:cb:4c:c9:42:1f:10:47:1f:5a:
4b:ff:c6:de:b3:d3:b1:06:ed:e5:fc:f6:60:88:d7:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:43:F6:4B:BB:D1:A7:11:F8:14:AE:90:B8:AD:2E:16:36:A9:7A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/bp5D9ku70acR-BSukLitLhY2qXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:07:3c:6d:ad:52:4f:84:87:cb:ca:b0:5b:c4:9e:2e:09:5e:
05:c2:56:20:ed:94:98:bd:42:00:24:b3:85:84:19:fd:43:1c:
ea:3d:05:db:3e:f4:02:3e:56:44:76:f6:08:fd:9f:a7:41:07:
c3:00:1c:2c:3d:55:df:e9:1e:86:3a:1f:b1:80:2a:14:4c:ad:
ba:36:fc:ee:5a:d8:57:f0:a7:60:09:17:ba:b5:70:67:df:0e:
78:74:9a:ec:a6:13:2d:14:ce:7a:e3:1a:c4:67:14:29:54:2e:
45:9b:49:03:15:ac:a2:6e:ab:9a:85:b3:37:4b:9e:82:f9:59:
d7:ce:af:44:2e:e6:42:aa:b1:dc:92:28:d6:6d:00:e8:2e:32:
d5:db:d5:f3:fb:07:e4:b0:22:de:ef:d9:4a:83:97:69:70:73:
1e:2c:29:85:ee:7c:c2:b2:7e:bf:87:b9:59:e7:42:89:de:ca:
bf:84:a2:3d:f1:c1:4a:f7:9e:55:31:22:e1:f2:5c:12:9e:c5:
a0:0b:17:55:9c:b7:91:77:79:16:c0:03:56:f8:aa:5e:74:85:
56:58:92:70:f2:ee:0f:73:7d:48:a4:ab:d4:ff:54:ba:d8:1b:
18:6b:99:e9:8f:7d:0f:ce:02:fb:eb:ac:24:d5:be:6c:a4:30:
56:95:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:05 2025 by rpki-client