Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cRxlcfGe0bqWkE9-8NWPcqmQRyk.roa
File: cRxlcfGe0bqWkE9-8NWPcqmQRyk.roa (raw, json)
Hash identifier: ifMvHzVYrv8LdvYjYlmLdU0HRV/3hPYZZl01iW363Ws=
Subject key identifier: 71:1C:65:71:F1:9E:D1:BA:96:90:4F:7E:F0:D5:8F:72:A9:90:47:29
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8D2CADBA7A283AD331704AE8F5B49822
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cRxlcfGe0bqWkE9-8NWPcqmQRyk.roa
Signing time: Wed 13 Sep 2023 06:13:50 +0000
ROA not before: Wed 13 Sep 2023 06:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:2c:ad:ba:7a:28:3a:d3:31:70:4a:e8:f5:b4:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 06:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=711c6571f19ed1ba96904f7ef0d58f72a9904729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:50:a2:ab:99:da:f7:dc:c7:10:93:f1:1e:
12:0c:22:64:d9:c4:18:fc:42:bc:22:6c:13:d3:5b:
19:6a:6b:cd:6a:63:70:6f:7b:cc:9c:56:a0:62:5c:
33:fe:7a:81:e3:f8:22:71:c4:f1:a1:c1:4f:95:81:
2a:a2:8f:91:41:21:52:3f:3d:f1:0c:42:38:19:ca:
e0:0d:74:bb:62:90:e0:c5:64:5c:52:eb:23:77:30:
0b:91:95:01:6b:16:b1:88:e9:cc:54:7b:a7:ce:e0:
10:13:7b:1d:5f:99:f1:21:e9:a7:fe:b9:53:dc:7f:
5d:e1:ca:74:d9:21:18:20:44:f2:db:ce:1e:bb:7d:
07:76:c4:67:02:8a:60:ce:e9:07:49:3b:ec:26:26:
2c:83:20:12:42:e4:41:92:f9:eb:90:3d:1e:f7:89:
68:d0:3f:ff:67:88:99:ca:d3:fa:d3:fb:6f:5b:10:
c5:6d:68:b3:d9:58:34:9b:bb:a9:4d:b6:55:74:f0:
ec:a5:2e:de:22:15:61:4e:b5:4e:2b:5b:6d:22:dc:
8b:bd:fe:fa:6c:3a:25:40:4b:8b:51:5c:f8:70:82:
23:70:40:30:1b:f5:42:11:3d:eb:06:2b:b6:0c:76:
a7:b5:4b:bb:fb:12:0b:96:4b:54:4d:03:16:9a:ae:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:65:71:F1:9E:D1:BA:96:90:4F:7E:F0:D5:8F:72:A9:90:47:29
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cRxlcfGe0bqWkE9-8NWPcqmQRyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:35:6a:57:9e:4c:c1:cd:6e:61:ac:1f:bb:06:24:02:6d:64:
d3:48:3a:18:29:3a:c0:be:60:da:6b:f6:d5:60:72:96:a2:b1:
9c:16:9b:b4:b3:4b:09:b9:b3:14:49:cd:60:83:1e:09:1d:1b:
61:9e:fd:40:c2:f1:28:3e:24:c2:06:73:cc:95:3e:e3:66:11:
03:af:0d:5c:b5:ee:16:23:80:6d:5c:d7:fd:82:a7:6c:9b:b6:
33:50:db:6f:7a:e9:2a:a0:69:17:9b:b7:fe:1d:26:8a:ef:8c:
8e:18:b4:80:28:ca:85:ff:26:e7:44:ea:55:ff:eb:fe:46:9c:
12:53:21:16:78:be:69:44:56:e7:3d:a5:3a:56:32:5d:ad:91:
05:23:67:d3:d5:d9:12:0a:eb:90:01:3e:c5:e0:1b:71:f1:47:
8c:e7:19:b1:28:38:3f:4d:4e:5a:49:8d:15:2e:c9:ff:cb:ec:
72:5a:f8:02:51:76:96:79:af:9e:27:e6:3d:bd:fa:d2:06:9c:
a8:71:7f:77:17:c8:b6:3a:57:3b:4f:1c:f0:93:01:60:a1:2d:
5f:5b:cd:14:f1:44:cb:db:90:59:ae:c0:7e:91:72:67:25:59:
1c:2a:10:4d:b7:61:5e:e9:04:ef:49:bc:e4:82:b6:67:e0:56:
98:ca:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:25 2025 by rpki-client