Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cS3IXY03jwROCQSpQUluoFoMtGY.roa
File: cS3IXY03jwROCQSpQUluoFoMtGY.roa (raw, json)
Hash identifier: aVSRRqMU9+Nk9Xv801hlvN55qqpEjXHIEklUHfdK8ZQ=
Subject key identifier: 71:2D:C8:5D:8D:37:8F:04:4E:09:04:A9:41:49:6E:A0:5A:0C:B4:66
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A804BE5F3E883A67C0ABD2187A67C0A8E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cS3IXY03jwROCQSpQUluoFoMtGY.roa
Signing time: Sun 10 Sep 2023 18:12:52 +0000
ROA not before: Sun 10 Sep 2023 18:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:4b:e5:f3:e8:83:a6:7c:0a:bd:21:87:a6:7c:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 18:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=712dc85d8d378f044e0904a941496ea05a0cb466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:3f:0e:f7:e9:6a:41:ad:4c:1f:ef:28:4f:
75:d4:07:4b:57:3e:26:58:96:1b:51:c1:8d:ae:c2:
44:d8:9c:74:25:47:3e:7f:0a:d4:14:8b:dc:ed:0e:
49:77:8d:4f:2b:3f:7d:2a:8d:34:0c:e1:68:cf:5f:
cc:0e:79:a3:0f:4c:58:ee:0a:c9:d7:83:c2:f8:a8:
f5:4a:64:6b:d0:cd:fb:f1:7b:65:54:04:da:7c:6b:
68:e9:7b:e7:aa:5f:ec:7c:1d:76:16:e0:4f:f7:c1:
ee:75:9b:a9:46:be:90:99:94:ec:4a:c6:2a:36:96:
1b:c9:82:bd:b0:86:09:4d:84:e9:8d:4d:31:0e:20:
cb:64:f2:c2:7c:b0:ac:85:9a:98:4b:42:c4:25:a6:
e4:48:1e:21:fc:ae:fe:8c:d7:c1:95:d1:bb:2e:14:
f0:f3:5f:72:7a:aa:cd:b6:74:df:5f:7a:cd:22:2f:
a1:78:79:0a:e3:3e:9b:0d:1e:b1:04:98:3d:68:1b:
1a:d7:fe:f1:48:09:29:d2:33:e0:3a:fd:5a:4e:72:
8b:3d:d5:bf:e1:6a:df:98:61:df:9b:dc:80:03:4b:
6c:a1:19:e0:b0:78:92:17:74:c9:7a:05:fc:10:9b:
de:db:ef:ad:ff:ff:8f:91:c3:1b:29:fc:c4:40:31:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:C8:5D:8D:37:8F:04:4E:09:04:A9:41:49:6E:A0:5A:0C:B4:66
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cS3IXY03jwROCQSpQUluoFoMtGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:eb:05:5f:d4:eb:df:cf:fe:fa:e8:2b:24:cd:ef:94:fe:5a:
05:e4:cd:b7:42:96:22:2f:e0:95:f0:60:55:90:79:1d:83:16:
b0:3f:20:81:3e:84:8c:e5:a0:91:3a:e1:e2:24:db:63:bc:5f:
f8:ec:3f:35:fe:22:da:c3:55:3d:4d:fc:cd:44:42:66:58:c0:
af:52:5f:39:86:cc:59:ca:d5:92:12:98:c3:29:ed:5f:60:e0:
17:05:59:c9:62:c2:ea:53:cb:05:43:ca:8b:c7:aa:87:e8:6c:
f5:ba:80:70:fd:7b:0e:85:1e:48:61:04:2d:7f:a2:69:c8:fb:
19:1e:68:d6:cb:da:7b:f8:06:d6:d0:d3:ee:4f:9b:09:2f:60:
81:34:c4:50:dd:fa:e5:6c:f4:3a:df:77:2a:04:c8:8f:a7:16:
cb:1f:34:e5:6d:ab:46:98:08:b8:af:06:7d:89:9c:8a:d8:b6:
2e:06:fa:14:44:5a:8d:40:cf:24:cf:de:15:a3:40:46:9f:02:
8e:9a:ea:6d:54:9e:7d:5d:61:59:fd:d9:a6:4d:e8:35:7c:9e:
b6:a0:e0:fa:55:69:58:f7:63:48:3a:7e:32:de:3d:d4:22:f2:
3d:86:94:7f:1e:01:24:8f:e9:cb:bb:a0:5a:f1:02:b2:20:8f:
1c:f2:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:53 2025 by rpki-client