Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcvZcSgn_pCqtodUMCLylHsgaf0.roa
File: dcvZcSgn_pCqtodUMCLylHsgaf0.roa (raw, json)
Hash identifier: XJgiajtmMGWYUvpXSb+Cyn3ndcGd2y7gAT0bm2Lz6bg=
Subject key identifier: 75:CB:D9:71:28:27:FE:90:AA:B6:87:54:30:22:F2:94:7B:20:69:FD
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A62AF84CED03F28BBF651EB94CE0DBAFF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcvZcSgn_pCqtodUMCLylHsgaf0.roa
Signing time: Tue 05 Sep 2023 00:13:04 +0000
ROA not before: Tue 05 Sep 2023 00:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:62:af:84:ce:d0:3f:28:bb:f6:51:eb:94:ce:0d:ba:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 00:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75cbd9712827fe90aab687543022f2947b2069fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:67:7c:00:da:cd:30:93:4e:c2:c2:41:f2:
c8:7f:c0:08:0f:82:48:85:8c:0a:f2:3b:1a:05:54:
c2:f1:56:73:9c:04:45:88:56:34:03:8a:72:a7:2c:
c6:14:b8:2c:8e:e1:d4:91:43:92:50:c6:f4:ae:b8:
e3:2b:0d:82:64:e0:7f:c4:95:e3:5d:c0:76:ce:cc:
dd:4e:19:f5:de:17:29:3e:11:c5:83:24:cd:d8:97:
8f:22:9f:ef:dd:fb:60:af:5e:77:49:f2:50:3a:ef:
e3:7c:76:4e:a1:b5:07:4e:6d:cc:49:09:e9:87:ad:
22:f9:39:ce:64:c9:21:17:73:34:8d:4e:26:e4:a4:
17:5d:da:f8:39:b4:b6:22:4e:65:4a:04:e0:e2:e9:
6f:5e:dc:80:75:7b:b7:f0:68:6c:ab:68:94:f4:66:
92:db:c0:d7:d5:f3:20:4c:ad:2e:70:9c:34:4f:1f:
9b:92:3a:32:d7:36:b1:e9:ec:6d:e3:cf:96:d5:ea:
19:7f:98:08:c2:d7:bd:3c:7a:75:79:52:03:22:64:
bc:b7:b7:89:c9:fc:bc:89:c3:2f:a4:8d:ca:7b:fa:
12:25:f4:a3:f1:d5:da:40:e2:2c:05:a9:e9:9c:93:
50:23:40:c5:e2:e9:44:5c:3c:8f:f9:47:7c:6f:be:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:D9:71:28:27:FE:90:AA:B6:87:54:30:22:F2:94:7B:20:69:FD
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dcvZcSgn_pCqtodUMCLylHsgaf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:ab:a9:26:f3:a8:b9:5b:78:c1:36:b9:70:08:d2:15:97:3f:
1c:8c:1a:34:dc:2e:f5:4f:1f:45:22:e1:e2:61:c8:d3:4a:86:
0d:41:92:8f:60:f3:3d:f9:12:97:2b:2c:07:eb:0f:50:c9:1a:
d5:eb:ce:0b:66:c2:41:47:cb:56:44:58:db:39:b9:8d:1c:32:
b6:4a:76:3d:d8:2b:41:4b:59:c3:19:ca:59:f2:e1:da:c2:9b:
4d:2b:41:ad:33:38:c2:bc:35:dd:c1:bd:20:e4:ad:d5:e9:92:
80:17:10:f6:fc:00:70:5a:ba:5c:f2:1a:a9:cb:f3:94:d8:4f:
b7:0a:d7:7f:f5:8e:50:79:a4:d5:04:32:a5:14:e8:27:75:b9:
89:2a:17:a9:ce:ca:46:bf:d1:3e:dd:74:a0:22:9a:f6:08:0b:
1c:53:3c:79:2f:f1:41:7a:f8:af:63:05:b3:4e:fd:a9:df:19:
c9:25:95:aa:45:77:97:8f:75:f2:ff:d2:1d:f0:d9:5d:92:5c:
6e:a7:34:ac:1a:a2:69:20:c0:fa:db:7d:3f:46:63:27:06:86:
1f:7a:14:2c:b3:f7:62:ea:13:46:fc:15:72:89:e3:14:b9:bb:
04:bc:6c:c9:66:80:09:0c:59:db:27:74:a0:12:8b:1b:00:48:
27:39:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:04 2025 by rpki-client