Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcTVGPl1IqHdw9y7xDDQxHVPUI8.roa
File: dcTVGPl1IqHdw9y7xDDQxHVPUI8.roa (raw, json)
Hash identifier: K5/v+TvR+M210LxBPd3fu9xuYAudChqpMPLhsGww3ZA=
Subject key identifier: 75:C4:D5:18:F9:75:22:A1:DD:C3:DC:BB:C4:30:D0:C4:75:4F:50:8F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A66C20CB1614B8C12CADFDEF157A59CFC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcTVGPl1IqHdw9y7xDDQxHVPUI8.roa
Signing time: Tue 05 Sep 2023 19:11:47 +0000
ROA not before: Tue 05 Sep 2023 19:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:c2:0c:b1:61:4b:8c:12:ca:df:de:f1:57:a5:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 19:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75c4d518f97522a1ddc3dcbbc430d0c4754f508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:4e:09:56:bc:cc:24:0b:75:0a:8e:b3:fd:
cc:93:c3:47:97:c6:bb:0f:54:2a:06:0b:26:85:5b:
22:ef:29:ed:02:e7:79:31:90:95:73:fd:70:73:dc:
36:44:9d:d2:57:83:ed:e7:29:62:7a:50:5e:c5:1e:
a7:70:5a:e8:2a:71:0c:68:e1:ca:ff:e9:66:38:44:
a7:63:05:67:c5:3b:26:e7:73:2b:e6:41:f6:00:42:
2d:7f:70:eb:d8:3b:fc:c0:9a:ab:7c:45:dc:13:32:
d8:0e:f5:be:50:26:67:c1:f1:f8:a5:e5:63:1a:71:
e0:6b:80:13:b8:19:65:01:df:2f:da:e8:4e:6b:d9:
82:09:44:07:c6:ee:cb:59:2b:1a:d5:e1:9c:5c:37:
3a:72:19:56:7b:2e:a7:c9:48:68:69:78:8f:92:ca:
b7:39:4b:e3:0d:e6:e2:0a:3d:b9:49:75:74:96:57:
dc:73:4e:39:2a:a0:20:37:27:0a:b7:46:ce:7b:42:
ec:56:27:23:62:ab:62:29:49:3a:ef:fa:a2:b2:1e:
6e:65:63:06:8c:41:51:6c:3a:13:cf:13:da:08:87:
cb:0a:7e:70:80:d4:42:b5:ad:8c:03:65:3e:75:c7:
bf:ea:59:7d:3c:d3:59:50:4d:fd:e4:29:d0:1c:f3:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:D5:18:F9:75:22:A1:DD:C3:DC:BB:C4:30:D0:C4:75:4F:50:8F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcTVGPl1IqHdw9y7xDDQxHVPUI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:3b:37:50:3b:d8:66:1a:01:b3:c5:e8:77:a6:17:a4:65:b0:
53:4e:26:ec:92:cf:9a:db:d9:e5:3c:da:a2:63:fd:da:0c:91:
21:14:e9:5a:3c:5b:bf:90:72:89:6f:1d:a8:cf:dd:b2:c5:b8:
b7:cf:cb:b6:4e:31:9c:26:44:6e:32:6e:d6:2e:ee:a7:8c:d9:
dc:44:2a:f1:f3:e2:9e:b1:1c:2b:3e:b5:1b:26:4a:9c:81:03:
a1:47:9d:f5:fd:f9:dc:9f:58:aa:70:82:79:20:a3:42:e8:7e:
c2:a4:2e:2c:7b:90:b6:c5:0e:0c:13:58:a7:5d:ab:a0:e8:ba:
01:05:3d:9d:81:0a:1e:20:7e:9f:97:36:a9:d5:de:c4:d8:8d:
62:af:68:28:04:13:8e:bd:29:e5:8e:77:93:7b:99:f0:16:58:
07:66:36:d6:0d:31:40:b5:d5:01:1a:c2:a2:68:81:c8:b0:b8:
ce:dc:96:f5:68:3e:4c:26:61:58:83:55:e7:4f:24:b8:5e:5c:
34:5b:60:fd:01:87:da:da:45:06:e1:2f:8b:55:bb:8d:5a:60:
21:0a:86:ec:a3:6a:58:51:48:5a:ea:f4:34:48:84:60:36:6d:
4f:ad:ed:ce:b4:7e:33:48:89:24:66:86:d0:90:a7:bc:04:61:
d7:86:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:20 2025 by rpki-client