Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/f-Zub0jSlISAaxxpLBxOqj2Jfcw.roa
File: f-Zub0jSlISAaxxpLBxOqj2Jfcw.roa (raw, json)
Hash identifier: Q9JnMclnVYXFWCV9fsSYVtwi6HZ3KckSnaRnoz+0dIc=
Subject key identifier: 7F:E6:6E:6F:48:D2:94:84:80:6B:1C:69:2C:1C:4E:AA:3D:89:7D:CC
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7E2869E2F1350513DF3460F00CCB8663
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/f-Zub0jSlISAaxxpLBxOqj2Jfcw.roa
Signing time: Sun 10 Sep 2023 08:14:52 +0000
ROA not before: Sun 10 Sep 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:28:69:e2:f1:35:05:13:df:34:60:f0:0c:cb:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fe66e6f48d29484806b1c692c1c4eaa3d897dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:af:06:08:e9:6f:59:bf:3a:e9:dc:d7:a8:
59:1e:d2:53:af:59:5b:eb:ab:73:6d:f1:c1:ff:5f:
19:bf:6b:47:c0:07:46:9c:de:49:4a:63:54:0a:37:
1f:36:3b:d9:fc:0b:d1:c8:ce:3d:73:af:51:51:d8:
eb:34:e9:b9:30:4d:e2:eb:e3:51:bb:38:93:65:29:
9a:8d:6c:ac:1c:76:f6:30:1a:1a:45:e0:f4:cf:f4:
44:ed:65:d2:15:4d:13:e5:97:7a:2e:90:09:96:9d:
c2:74:f2:00:62:30:f7:97:6f:d3:96:00:e6:e1:de:
f7:5c:db:1b:23:3d:29:cb:e9:c2:f2:d4:62:fe:4a:
83:77:b4:23:5f:c0:2c:9a:9d:61:54:b8:c6:40:a2:
a4:8b:a1:72:ba:ae:fb:df:bb:f5:5d:0c:04:82:20:
26:0c:d1:4d:81:4e:af:af:3b:58:31:e3:44:eb:d1:
f7:c8:69:77:e9:c0:e2:ef:cc:76:a9:60:18:1f:33:
a7:94:d0:7b:0c:bf:ca:e9:41:07:5d:fa:d9:91:e0:
bf:98:cf:62:fb:21:12:70:0c:1f:22:a6:ab:58:75:
05:43:02:a4:6a:6d:ac:7f:a0:c6:4b:d9:99:2a:d0:
14:98:84:08:7f:6a:f0:f6:3d:2c:55:31:bc:0c:5e:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:6E:6F:48:D2:94:84:80:6B:1C:69:2C:1C:4E:AA:3D:89:7D:CC
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/f-Zub0jSlISAaxxpLBxOqj2Jfcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:58:a9:8e:6e:f4:a8:c1:91:8e:36:5a:6f:85:0c:00:b9:24:
40:89:a3:f2:ce:ef:4a:9c:67:1b:7f:4f:92:1f:23:90:36:a9:
9a:71:42:75:04:1f:2c:7a:41:d4:ae:9c:49:58:2f:7b:b3:a7:
9e:54:30:08:60:a2:1e:85:c1:e2:67:59:ff:e7:c0:cc:48:5b:
7c:ea:77:74:ea:40:07:44:7d:55:b1:13:ba:09:a3:88:7e:da:
01:67:18:8d:9c:0d:dd:e2:42:d3:b6:71:96:ee:e1:cc:81:0b:
1d:78:9d:d2:64:7e:5b:4b:ad:20:2a:6b:25:96:42:7f:64:62:
6a:5b:80:0e:c5:a0:1d:e6:99:b0:3c:01:43:20:fc:82:a5:6c:
d0:19:16:2c:94:df:aa:7b:cc:a1:99:fc:18:1f:38:27:10:a2:
9f:0a:35:d6:07:9e:fe:59:fd:d2:1b:f8:4d:8d:44:34:aa:6c:
97:0c:da:c3:84:f0:f8:6e:5c:3b:a8:c0:b1:84:ec:e3:0d:4b:
63:fd:bf:c2:ef:4c:af:e2:0c:27:67:da:41:6d:9e:e2:e4:4e:
3a:e3:76:d1:17:9f:d8:66:ee:a9:60:78:a9:90:46:83:b1:77:
72:66:76:a3:8a:8c:f4:47:1e:50:6d:8c:72:c6:d9:62:a2:cd:
e4:ab:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:51 2025 by rpki-client