Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c4lk4bCFzZ3NvCy3FwAZ8RmDef8.roa
File: c4lk4bCFzZ3NvCy3FwAZ8RmDef8.roa (raw, json)
Hash identifier: mikXfxLgxNU1SdoYsqD+5bI3w9y0Z9N5NINjFM1VDOc=
Subject key identifier: 73:89:64:E1:B0:85:CD:9D:CD:BC:2C:B7:17:00:19:F1:19:83:79:FF
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAA238902CE238CF743F80CB5F2DB9FD5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c4lk4bCFzZ3NvCy3FwAZ8RmDef8.roa
Signing time: Mon 18 Sep 2023 21:12:50 +0000
ROA not before: Mon 18 Sep 2023 21:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:23:89:02:ce:23:8c:f7:43:f8:0c:b5:f2:db:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 21:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=738964e1b085cd9dcdbc2cb7170019f1198379ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:f3:c5:f5:9a:62:4b:92:4a:d3:74:7b:ac:
35:e0:4c:a1:15:75:df:fc:71:f6:21:c7:54:f4:6c:
ff:82:c8:78:6a:3b:d2:ef:83:14:69:90:76:ec:27:
60:1d:38:0c:06:ec:ff:ab:bb:4c:86:90:5d:4f:54:
84:ad:30:31:70:3e:13:82:03:2e:98:e1:81:61:ed:
f5:0b:94:2c:21:47:34:c1:8e:8a:11:65:76:f9:4d:
4b:c8:20:91:39:d4:82:6f:0f:55:5b:f0:8d:47:6e:
ae:c7:f2:d2:15:3d:e2:d0:df:4b:e8:d0:dc:bd:83:
b6:4f:ea:13:68:30:47:b1:d4:95:47:f5:c4:3c:28:
14:51:54:ff:1a:a7:19:dc:c3:d7:70:fc:3c:39:8b:
ef:b4:92:86:81:12:f2:f8:a4:b7:c1:2d:27:b7:3d:
a3:dd:46:0c:4d:ce:4e:d9:63:59:67:a7:b6:27:f3:
a5:de:14:e9:5c:0f:83:06:db:f3:3b:d3:b3:4b:4e:
e7:29:3a:e7:59:31:84:66:61:9f:00:1f:d7:4a:d5:
14:bb:11:a7:6d:17:4e:a3:b1:47:ef:fc:62:10:ce:
28:c4:6b:3d:a3:e2:89:73:e6:9b:20:97:ff:66:40:
d3:70:2c:f8:87:b4:f0:76:ad:de:d7:0a:7f:98:31:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:64:E1:B0:85:CD:9D:CD:BC:2C:B7:17:00:19:F1:19:83:79:FF
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c4lk4bCFzZ3NvCy3FwAZ8RmDef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:65:cb:a9:d2:9c:05:30:be:0e:51:8f:d1:74:f1:2a:b9:25:
3c:75:f3:ad:aa:6c:66:97:9d:84:a6:73:8d:7e:5d:2d:d7:d7:
3e:88:4a:60:af:1d:6b:e0:38:c2:4b:00:e6:4c:df:27:54:85:
74:1f:70:e5:d7:b2:43:31:95:14:a6:a4:f8:56:7f:17:5d:b4:
f3:c2:ee:13:f1:85:00:61:24:1d:71:2c:fc:16:c3:cf:26:ac:
11:05:0f:db:b8:4f:78:98:d5:8d:c9:57:1f:13:57:42:dc:d8:
a5:b1:b0:c3:97:02:c8:41:2e:75:c4:55:8b:c2:0e:bc:33:67:
d0:7c:42:05:e7:0c:11:ea:7f:22:a8:5b:d0:ac:23:5d:34:9c:
f5:6a:12:77:62:e0:f8:3e:36:14:b3:84:c0:87:80:17:3c:ba:
79:ea:8e:46:17:54:f2:7e:b1:99:0b:9e:5d:38:e9:25:67:4f:
d6:73:d7:87:c7:28:48:99:bc:16:07:5c:9b:38:3c:38:6b:52:
7d:70:e5:51:35:82:7f:d8:fb:f4:79:e9:43:d1:ba:7c:2e:de:
28:f9:a2:40:66:ac:07:ea:8c:c6:1b:77:d6:2d:01:e2:d6:d6:
58:58:f1:f9:bc:c5:46:6f:19:25:fd:22:3f:dc:17:ce:ea:1d:
69:e6:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:57:15 2025 by rpki-client