Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dEIMHfL4VwnVUWKMSvgpeSEC0yg.roa
File: dEIMHfL4VwnVUWKMSvgpeSEC0yg.roa (raw, json)
Hash identifier: ChMecYR5nEFV3wrNQJEtmJP7q9oNqX0nXoggtByOhDY=
Subject key identifier: 74:42:0C:1D:F2:F8:57:09:D5:51:62:8C:4A:F8:29:79:21:02:D3:28
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A89F2DF6F0DED0F4C709271A9AE85831C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dEIMHfL4VwnVUWKMSvgpeSEC0yg.roa
Signing time: Tue 12 Sep 2023 15:11:49 +0000
ROA not before: Tue 12 Sep 2023 15:11:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:f2:df:6f:0d:ed:0f:4c:70:92:71:a9:ae:85:83:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 15:11:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74420c1df2f85709d551628c4af829792102d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:af:86:ef:30:cb:3b:78:c9:32:80:82:5e:
09:b9:f2:a5:47:95:18:36:d5:78:df:b6:2f:85:02:
b2:c6:08:6e:44:8d:3e:f7:ba:69:2f:e0:89:60:2f:
d0:3a:1c:29:a9:37:d2:ea:57:97:89:0f:2b:93:02:
d3:46:d2:23:8e:e2:cf:a4:d4:67:2e:d0:bc:bc:94:
c0:e8:2f:aa:cb:bf:99:d4:73:0c:0e:ba:b4:96:02:
59:f0:0e:4d:47:b1:42:76:2e:13:74:13:5c:da:c9:
c8:6a:fb:2f:6f:3d:34:c0:88:c3:a6:19:f9:1e:7a:
af:6c:b7:52:a7:ab:6e:cc:3f:0a:ec:97:e4:d9:78:
3e:76:05:29:5a:8c:d7:b3:a9:1c:83:9a:d3:2a:31:
18:36:b4:46:41:84:81:76:05:68:76:d4:c6:8f:f8:
ce:3f:dc:cb:8f:6b:d7:c6:a6:53:d7:5b:92:66:cc:
51:59:5e:a9:26:ae:55:d6:fc:49:1d:da:12:2c:86:
93:c7:05:eb:84:fe:ea:7c:1d:e9:23:aa:0e:1c:df:
d9:67:61:f8:65:e2:4c:aa:a0:0a:d9:6a:e2:6a:20:
a3:16:c6:77:02:09:59:24:54:0a:36:94:43:20:d7:
ce:d6:51:a7:29:25:5f:ef:9d:f3:dd:86:c7:dc:62:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:0C:1D:F2:F8:57:09:D5:51:62:8C:4A:F8:29:79:21:02:D3:28
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dEIMHfL4VwnVUWKMSvgpeSEC0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:23:df:f3:ec:47:87:c3:03:33:26:ee:06:b6:6d:f1:8f:53:
c8:8e:b8:04:26:75:a6:86:99:65:d2:3a:91:3d:47:97:f8:10:
21:8d:a4:a4:ac:2e:29:ac:82:2f:12:60:ec:4b:a0:0c:d4:8a:
cc:77:ef:22:d1:ee:a4:59:b3:b1:e3:fa:6c:46:11:84:54:22:
98:ba:07:49:88:9e:d7:52:86:99:a5:9d:43:29:1c:4c:2b:58:
bb:a5:3a:0f:9c:c4:8f:37:95:55:69:c7:07:ff:f4:3f:e0:eb:
06:e3:9f:f1:00:3d:1b:51:a3:a5:d2:9b:dc:8d:6e:44:71:80:
7a:2e:b2:ee:2e:7e:1d:91:ee:4b:0d:f5:1d:e1:54:38:3e:73:
8f:85:5f:8a:af:5a:81:62:ca:e9:4f:c9:bd:52:d5:92:ea:89:
ae:2b:67:20:31:e1:18:97:8d:d6:fc:19:a3:b6:17:92:a8:5c:
ae:1c:9e:de:9e:cd:59:58:b8:ed:00:e0:f4:8a:da:ec:84:b7:
c4:46:39:d6:fd:ff:5f:c0:f4:ae:49:98:f2:ea:50:22:8d:18:
1c:68:a6:58:6d:eb:46:d1:bc:22:d5:4e:4c:37:5d:6a:c4:3f:
fe:9a:0f:9b:35:dc:ec:d8:b9:97:e8:7e:10:32:b7:c6:f0:3e:
74:74:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:46 2025 by rpki-client