Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eTBmrSTbIz9JsL9I80w4mxwMWPo.roa
File: eTBmrSTbIz9JsL9I80w4mxwMWPo.roa (raw, json)
Hash identifier: iYUgjR3uQqRk/FHmCmKZu7mkJMS2A7t0S0VPK+Hu42o=
Subject key identifier: 79:30:66:AD:24:DB:23:3F:49:B0:BF:48:F3:4C:38:9B:1C:0C:58:FA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A793633CF5F55670BE6656DC1B4C16300
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eTBmrSTbIz9JsL9I80w4mxwMWPo.roa
Signing time: Sat 09 Sep 2023 09:11:49 +0000
ROA not before: Sat 09 Sep 2023 09:11:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:36:33:cf:5f:55:67:0b:e6:65:6d:c1:b4:c1:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 09:11:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793066ad24db233f49b0bf48f34c389b1c0c58fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:0d:52:0b:aa:dc:80:ec:42:00:7b:43:71:
e2:4d:8e:8d:dd:8c:59:ff:ea:51:03:ba:a1:b3:d3:
d7:53:3e:6a:d6:dd:48:73:a2:75:35:c3:4f:85:1d:
e6:d3:5e:a3:4d:d3:d9:9b:c4:d5:4a:60:eb:dd:ff:
5f:1d:ef:77:da:e1:7f:cf:6c:b0:46:17:00:05:f5:
46:3d:d8:2b:5f:45:8a:25:cf:83:85:76:66:36:11:
d8:f5:f3:5d:12:2c:98:50:87:5e:a9:3a:88:e7:61:
79:80:90:f0:19:67:90:ee:8a:c3:82:ab:34:21:db:
84:0d:9e:7a:6d:a3:4d:f9:19:d2:7a:c0:56:e3:38:
f7:74:91:a2:ca:b4:ff:3b:32:9d:08:b1:a7:16:d1:
d2:fb:39:30:d3:50:cc:a2:d5:05:ca:aa:01:87:e0:
73:26:02:76:e7:cf:6d:9b:89:f4:4d:86:01:e6:6b:
f8:bd:61:a1:94:9a:44:8e:34:b4:2e:06:61:e8:bc:
5f:a8:a3:bd:d4:2e:5d:30:ab:5e:0a:42:44:89:02:
53:2f:00:06:ed:03:c4:3e:c3:5b:8a:e8:ea:98:43:
3d:9d:04:3d:fd:d7:ab:37:8c:04:0d:a1:a4:8e:6a:
c2:57:9d:5c:40:be:6c:92:7a:61:2b:a8:29:6f:38:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:30:66:AD:24:DB:23:3F:49:B0:BF:48:F3:4C:38:9B:1C:0C:58:FA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eTBmrSTbIz9JsL9I80w4mxwMWPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:26:61:28:7f:77:f5:02:60:2b:65:06:ae:a0:52:0d:ef:ca:
70:1d:5e:c0:e2:9d:78:86:1d:c7:e9:b3:a0:98:39:80:02:7a:
3c:45:c8:58:a2:db:0c:4a:7d:d0:23:ce:39:f2:b9:c3:7e:e1:
39:6d:2a:26:3b:b5:b1:56:c8:df:a0:ea:ca:1a:36:b6:98:8b:
21:a3:38:17:0f:00:9e:0e:7e:65:05:bb:e6:92:0a:e8:e0:a5:
6e:0d:32:fe:e6:8c:f5:60:93:27:e2:03:c8:0d:8e:5f:8a:e7:
c8:eb:5f:a4:fd:03:c0:0b:a6:7a:1f:de:fc:85:9d:3d:2c:eb:
29:84:5c:e1:c2:1e:d8:e3:09:bf:5f:9e:f7:b8:be:49:b9:fb:
00:ec:86:48:a1:aa:39:5d:b0:49:d1:d8:04:74:2b:46:8c:02:
95:c8:51:2e:3f:d9:28:c0:d9:72:48:e7:e5:cb:bf:f1:f1:e9:
d9:4f:1b:36:6b:a0:ed:0f:a1:69:c0:79:02:11:fc:e4:f9:06:
16:1f:0e:2a:92:94:7a:ac:4a:f9:aa:64:29:9d:45:42:b4:7c:
99:8f:72:dd:8a:34:c0:a4:15:60:ca:b7:88:f1:b3:f9:76:61:
dd:38:f5:10:46:68:78:fd:9f:a8:59:19:54:92:ba:68:39:5b:
2b:72:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:48 2025 by rpki-client