Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e5l7NfzXj5p7YXicn7La3CQFVOg.roa
File: e5l7NfzXj5p7YXicn7La3CQFVOg.roa (raw, json)
Hash identifier: UiYdYlJHmlFgQHSHRzJ7uJ456Oc19TsRTePebtyJCzE=
Subject key identifier: 7B:99:7B:35:FC:D7:8F:9A:7B:61:78:9C:9F:B2:DA:DC:24:05:54:E8
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5AC65F2D725E9C630494690A484E7CF3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e5l7NfzXj5p7YXicn7La3CQFVOg.roa
Signing time: Sun 03 Sep 2023 11:21:04 +0000
ROA not before: Sun 03 Sep 2023 11:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:c6:5f:2d:72:5e:9c:63:04:94:69:0a:48:4e:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 11:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b997b35fcd78f9a7b61789c9fb2dadc240554e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:f1:81:e3:bb:ed:22:80:0e:ea:d1:e2:b9:
4a:0c:24:17:1a:e6:8c:4d:6f:d1:e9:bc:3a:e2:d0:
99:94:e0:5c:78:02:32:1f:c7:d4:16:17:93:81:9c:
63:e1:3e:2d:5d:06:09:d9:20:37:16:df:61:f7:53:
3b:db:77:ba:10:7f:1a:7b:c6:99:86:a8:6f:63:43:
57:9e:52:46:5d:e0:92:61:34:7f:b4:2b:ee:bd:c9:
03:c3:8f:08:6b:08:87:9f:bf:e6:bc:03:0d:73:a7:
ba:7f:aa:28:e2:45:29:06:d6:48:c0:31:1c:5b:56:
dd:cd:7d:a7:72:58:6d:de:19:75:ab:d3:43:e1:7f:
a8:d4:96:88:ce:46:a1:f3:53:a0:18:f7:96:27:61:
9d:13:04:08:e7:b5:14:e1:be:7e:0b:25:47:c6:8c:
5d:5a:e6:50:72:10:98:ee:b7:15:ed:01:1c:c1:ce:
4e:ad:78:31:33:c7:29:c0:1c:7d:e6:4f:1d:06:2c:
0d:ad:1d:9c:06:c7:ee:94:b0:7c:49:12:0d:76:f5:
c8:db:0a:f6:57:e4:ac:a0:89:4c:fa:8b:70:fd:8a:
ca:8d:c9:a8:2b:26:22:16:26:47:b0:c0:3c:19:c9:
37:f6:14:1d:34:06:4f:81:36:08:f5:e4:34:2b:5c:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:7B:35:FC:D7:8F:9A:7B:61:78:9C:9F:B2:DA:DC:24:05:54:E8
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e5l7NfzXj5p7YXicn7La3CQFVOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:29:7d:50:17:25:63:b5:a9:3d:79:29:d0:50:00:f7:fb:9b:
44:db:e7:e8:72:ee:8c:4e:78:f9:27:1c:4f:18:54:b3:fc:36:
4c:9c:49:e1:f6:56:e1:e0:84:ce:e6:7a:7a:6f:88:41:bb:3a:
d7:e1:28:52:4d:a7:e0:9c:5d:ff:bb:c9:5e:5d:88:a6:59:6b:
3d:ff:d6:d6:5f:fd:e9:68:f1:ec:5d:5a:7f:0f:3f:b1:68:27:
9b:65:99:2f:8c:9b:7c:79:2d:01:90:03:ee:bb:72:95:d5:f5:
09:f0:b9:f1:cc:e0:85:20:18:c0:eb:4a:5b:88:bd:e7:16:43:
09:12:34:92:b8:d5:b2:ad:dd:ba:12:82:85:72:54:20:77:fb:
c3:d7:cd:65:f4:3e:fc:84:d6:70:22:25:83:d2:15:95:89:17:
a4:f2:25:65:45:f4:23:2d:f1:68:39:9b:53:dd:ec:e7:56:d6:
ff:25:64:eb:1e:c8:96:d5:46:a5:39:06:82:ff:28:31:d3:5d:
cc:1c:88:d2:48:70:dd:53:bd:72:48:8b:f3:b5:de:e6:b0:f3:
55:71:17:b1:0e:2e:00:94:ee:cf:75:41:2d:f3:c2:b1:13:9d:
fa:fc:09:7f:94:61:97:09:80:25:fb:0b:58:b0:cf:70:83:8f:
a8:8a:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:13 2025 by rpki-client