Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dTKKEg98-M1nb_k7KRFNCjDZw4Q.roa
File: dTKKEg98-M1nb_k7KRFNCjDZw4Q.roa (raw, json)
Hash identifier: kVJgvA7HQZrcicpFvr/oV5bj1FKzHHmVYbyrGVggeoA=
Subject key identifier: 75:32:8A:12:0F:7C:F8:CD:67:6F:F9:3B:29:11:4D:0A:30:D9:C3:84
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4EFAF6C5C18421C001714307D0DF2C91
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dTKKEg98-M1nb_k7KRFNCjDZw4Q.roa
Signing time: Fri 01 Sep 2023 04:23:04 +0000
ROA not before: Fri 01 Sep 2023 04:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4e:fa:f6:c5:c1:84:21:c0:01:71:43:07:d0:df:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 04:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75328a120f7cf8cd676ff93b29114d0a30d9c384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7d:31:21:01:e3:a9:7f:4e:53:23:27:b1:59:
fb:d4:79:3b:78:60:2c:d4:c3:f3:1c:fd:21:d0:2e:
ce:a2:54:6a:7b:70:f9:89:38:2a:d5:c4:64:12:ed:
90:3f:96:90:99:71:13:8f:37:cd:40:cd:c5:5e:55:
c8:c6:83:19:f6:6a:7b:9f:79:b8:20:28:1d:7d:8a:
3e:70:f6:1a:9b:96:da:5d:45:be:26:02:dd:f1:34:
60:1b:81:40:8a:4b:ee:82:d8:cd:a8:b9:95:11:1d:
d3:a2:e7:60:ab:eb:5e:ca:f5:c6:94:e5:1a:ef:07:
9d:3c:7d:1c:18:1b:99:8f:85:36:0b:dd:58:3c:9d:
f9:74:30:74:4c:5b:4b:9c:7e:68:cd:b8:3f:bc:00:
60:1e:28:ea:22:3c:89:f0:da:55:ae:73:09:64:a7:
28:4d:4e:0f:12:32:e0:2a:3c:4f:84:01:e9:a2:ec:
51:2d:56:66:72:9c:54:bc:98:1c:ae:1b:26:7d:35:
f9:15:60:b1:f9:57:0e:d1:d1:14:54:84:91:4b:8b:
59:be:66:f7:75:b1:cc:7f:f6:c0:5c:60:df:be:c8:
0e:45:79:34:19:97:fb:fd:df:7d:80:2d:4a:96:5b:
32:7b:ad:ce:8d:39:7a:c2:32:8d:3f:23:7a:ca:04:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:8A:12:0F:7C:F8:CD:67:6F:F9:3B:29:11:4D:0A:30:D9:C3:84
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dTKKEg98-M1nb_k7KRFNCjDZw4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:d7:1b:0d:57:c1:dc:fe:08:a4:7b:90:04:0e:3c:b7:1b:14:
07:bc:21:7c:11:bb:ed:77:af:ac:bc:e3:aa:b8:58:79:58:82:
4e:c0:d8:fe:b3:bd:e8:b9:47:52:7a:8b:e8:29:a1:09:b7:11:
5a:f3:4c:29:c2:d1:7d:bc:de:fb:12:e0:d8:9f:70:1d:81:9a:
81:49:9e:63:1b:3a:d1:6e:1a:44:94:28:1d:a8:a9:0c:c6:04:
4c:5f:da:4b:47:a9:e1:61:df:e3:ca:74:63:bc:34:5e:21:ff:
62:d3:34:9e:f3:b3:75:41:23:c4:a4:bf:d7:a9:a4:fb:36:47:
04:3c:83:3d:4f:2d:fe:46:d1:98:e5:67:ea:c4:4a:df:0c:c8:
ba:1d:9d:f0:bd:6f:32:4c:0b:81:18:eb:bb:40:55:42:6f:2b:
de:0c:0a:ac:18:b1:6a:80:81:d3:17:0f:bc:74:b2:75:19:ca:
9f:14:9d:c3:2c:ba:63:b7:62:c7:68:f8:f3:c6:10:90:3c:04:
e7:43:08:6e:31:c3:67:92:28:d2:a5:8c:b1:b1:2e:83:70:ae:
fd:8d:4d:53:7e:f8:75:69:32:5c:82:67:ec:e2:ba:48:55:94:
3c:4d:11:20:0a:ed:57:55:14:00:d8:f6:b0:94:69:c3:24:c8:
c3:3d:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:51 2025 by rpki-client