Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dYNLnVUzSrxnSP9yCgSf8eFnU4w.roa
File: dYNLnVUzSrxnSP9yCgSf8eFnU4w.roa (raw, json)
Hash identifier: P9/mUAWk/bWeMhCjudrMxscYh8u85haRRpPS44dp65k=
Subject key identifier: 75:83:4B:9D:55:33:4A:BC:67:48:FF:72:0A:04:9F:F1:E1:67:53:8C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A646A8AE85C47609DCFC82C129D32EE71
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dYNLnVUzSrxnSP9yCgSf8eFnU4w.roa
Signing time: Tue 05 Sep 2023 08:16:58 +0000
ROA not before: Tue 05 Sep 2023 08:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:6a:8a:e8:5c:47:60:9d:cf:c8:2c:12:9d:32:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 08:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75834b9d55334abc6748ff720a049ff1e167538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:ca:af:3c:a0:d9:20:0d:24:af:63:85:94:
4b:67:88:80:97:15:c3:e2:55:4e:da:e1:73:31:f7:
52:6c:ab:76:47:ad:61:7a:fc:1f:1d:5a:ce:7c:c5:
2a:36:1a:2d:52:34:84:49:9e:dc:e9:c8:5f:9b:5d:
63:f2:76:b8:6c:fd:23:3b:ca:67:55:d1:3b:67:17:
92:05:55:4d:c9:27:65:3d:5a:e9:c1:5b:34:b6:bb:
3a:38:64:a8:45:32:bc:dc:2a:55:5a:53:cf:6a:6c:
85:99:6d:1a:5a:43:45:a8:d8:b6:35:04:b6:9c:f8:
5b:63:2f:27:d2:6c:01:a0:00:5c:13:8a:2a:d5:3b:
d1:34:a0:12:d2:77:fb:50:c5:c8:e9:e2:66:f8:60:
e4:19:21:23:43:10:33:2b:cf:0d:31:30:c6:91:95:
44:7a:81:72:76:08:06:8f:3b:80:32:07:af:32:83:
df:fd:57:10:17:d4:73:43:32:09:d5:cc:9d:18:a7:
84:28:4b:4f:3d:aa:1f:e1:8b:f3:af:33:e4:33:e8:
53:ab:e5:74:3c:a1:7c:c2:ac:41:05:52:cc:c5:a1:
c2:58:29:c3:38:c1:32:f3:fd:36:6f:f4:89:ee:43:
88:68:1f:45:a5:b2:7d:93:77:8f:fa:07:f7:3e:07:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:4B:9D:55:33:4A:BC:67:48:FF:72:0A:04:9F:F1:E1:67:53:8C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dYNLnVUzSrxnSP9yCgSf8eFnU4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:e3:1f:f2:ad:ff:1f:3d:00:26:f3:43:54:05:4d:67:e7:42:
18:92:33:08:34:f8:cf:c4:03:8d:da:57:df:3c:cf:f5:96:15:
ce:54:94:48:a2:b0:5d:4a:a5:a7:6f:d2:95:8b:67:dc:ff:b0:
38:96:5c:80:02:85:74:1e:a8:fe:6f:a5:d1:56:e5:f9:6e:0f:
a7:5e:33:14:e5:5c:99:e0:12:9f:ff:31:6e:1b:a4:27:1e:10:
34:b2:b4:e6:f5:20:29:6d:d4:b2:7e:40:86:57:c6:58:f8:17:
e1:0f:4a:c5:af:3d:56:aa:61:03:c1:20:af:92:75:2e:a3:0d:
55:c1:a7:09:d6:70:4c:93:87:c8:12:00:82:69:f4:be:44:50:
5f:ad:03:db:1b:b4:b1:0c:03:70:4d:d8:80:52:b5:5a:e8:ac:
0c:25:36:d8:e0:7f:5b:28:e9:49:5d:3c:28:f2:3d:d1:5d:3a:
9f:83:cf:2a:28:13:a8:ca:56:98:8d:eb:19:43:33:dc:69:b6:
d7:02:09:99:ed:72:03:00:90:1b:ec:9f:08:b3:22:15:4d:ce:
f2:79:6d:19:4b:68:62:fa:20:91:e4:fb:06:54:b5:19:5d:2e:
92:34:40:1e:93:28:61:f8:02:3e:de:b1:ad:58:5f:cf:5e:04:
3b:02:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:20 2025 by rpki-client