Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cEor0gSc4VDz1oc5gIh6HgNNpAs.roa
File: cEor0gSc4VDz1oc5gIh6HgNNpAs.roa (raw, json)
Hash identifier: i+V41YLVh/FXOwo+UwruAPdY3jSZQb9eCexv+4IuBbg=
Subject key identifier: 70:4A:2B:D2:04:9C:E1:50:F3:D6:87:39:80:88:7A:1E:03:4D:A4:0B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAACB1360888B9CCEBD9F84E69656D0EF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cEor0gSc4VDz1oc5gIh6HgNNpAs.roa
Signing time: Tue 19 Sep 2023 00:15:50 +0000
ROA not before: Tue 19 Sep 2023 00:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:cb:13:60:88:8b:9c:ce:bd:9f:84:e6:96:56:d0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 00:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=704a2bd2049ce150f3d6873980887a1e034da40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:99:09:b3:e7:f0:00:81:80:bb:dc:f3:ce:
30:fd:a6:15:1a:1a:c1:ed:88:81:ae:5e:f3:a6:24:
d2:36:55:85:98:53:66:21:c7:0b:93:7c:0b:dc:eb:
a5:c5:1c:3d:d6:9a:93:cc:9c:bf:f2:69:53:1b:fc:
ec:05:33:83:97:4f:81:06:b3:84:a1:e8:4e:4b:aa:
4b:80:ae:1d:9b:8b:a7:a4:16:3b:b3:2a:32:f8:b5:
ef:72:7b:56:fb:1e:6a:24:00:50:6b:b8:27:8c:0a:
dc:54:c9:c1:45:76:53:95:33:8b:9b:ea:ab:0e:16:
da:52:be:56:5e:5e:6b:93:98:bd:cf:35:3d:48:75:
da:87:dd:82:8d:6f:fa:d6:db:61:04:15:c7:f2:10:
b7:e3:e4:3a:b4:1b:61:d1:2b:64:c8:7a:b4:98:b0:
87:b2:41:5a:4b:bc:aa:70:c4:76:d1:d0:bb:5e:c0:
14:ce:3a:77:51:68:a8:11:01:2a:0d:0e:bb:2f:91:
f1:d1:16:02:38:82:e4:74:81:76:6b:0e:d3:53:ba:
f2:8f:10:e9:87:fe:29:5a:fa:5d:fe:48:ac:44:68:
4a:bb:1c:f7:ee:d8:3c:f1:60:04:8a:6e:19:64:05:
8e:36:9b:25:ba:fb:11:87:58:26:32:ca:8d:4f:f8:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:2B:D2:04:9C:E1:50:F3:D6:87:39:80:88:7A:1E:03:4D:A4:0B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cEor0gSc4VDz1oc5gIh6HgNNpAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:08:e3:7d:c0:07:7b:d0:a0:85:70:e0:57:0c:1b:c7:07:a8:
b6:16:27:1f:1c:a5:48:e4:a3:36:23:19:50:eb:31:19:6e:d1:
de:e6:25:79:fc:a6:e7:cd:98:d8:d7:6c:e8:14:bd:81:60:ce:
47:f4:1e:c2:10:f4:56:44:3e:b5:de:87:e7:ba:c3:8b:94:12:
7b:0a:2e:1b:ab:44:07:8f:59:c5:1d:fc:2e:98:e6:64:37:e8:
87:ca:50:d4:7e:a3:af:c0:28:7a:66:5d:24:ac:3b:3f:6f:c1:
08:06:16:80:82:79:d8:c4:7e:01:37:ca:85:a6:18:06:8b:24:
f0:47:04:3b:59:5f:a2:d5:72:58:ea:6b:c7:e6:a3:ef:08:40:
e4:f4:45:3b:21:31:53:5a:78:52:56:54:57:ce:77:d1:3b:54:
12:73:08:60:84:68:b8:a4:27:8e:ef:b8:b8:62:e1:a5:cb:9f:
b3:20:cd:3b:44:e4:59:0e:3b:0b:4b:aa:84:34:ad:71:35:ab:
b9:31:77:60:47:eb:c8:96:d5:e0:78:6f:a8:0b:28:56:c4:76:
e2:42:44:73:fc:94:3d:68:06:b6:86:40:41:57:f5:09:8d:cf:
03:e2:ec:29:74:aa:e5:1f:fe:31:af:b7:54:2e:78:23:fa:9a:
b6:78:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:05 2025 by rpki-client