Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fL4pOphwQHxydizRnOOjZWaA69g.roa
File: fL4pOphwQHxydizRnOOjZWaA69g.roa (raw, json)
Hash identifier: zOIUwFfnk/k/1LjWi+8b5tEk3kaokrL5P8BLGYJG474=
Subject key identifier: 7C:BE:29:3A:98:70:40:7C:72:76:2C:D1:9C:E3:A3:65:66:80:EB:D8
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A465E5F3A006088326ECEFD866FE4FA61
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fL4pOphwQHxydizRnOOjZWaA69g.roa
Signing time: Wed 30 Aug 2023 12:15:04 +0000
ROA not before: Wed 30 Aug 2023 12:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:5e:5f:3a:00:60:88:32:6e:ce:fd:86:6f:e4:fa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 30 12:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbe293a9870407c72762cd19ce3a3656680ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:87:99:0e:4d:02:a6:7e:23:d5:59:1b:49:
f2:70:5f:eb:13:14:65:4f:de:5e:f3:ad:66:27:a0:
1e:dc:61:d5:fe:24:a9:f2:96:a6:3a:06:d2:91:c3:
66:25:a8:d4:85:bf:2d:47:e1:4e:e6:6c:fa:a1:9c:
3d:c7:6f:63:e6:d0:b0:f3:98:bf:17:25:97:e7:33:
0b:2c:6d:14:c0:5b:a4:af:ad:9f:17:84:31:19:c5:
68:2b:35:61:c6:a5:54:ea:4d:84:39:f3:11:7d:b3:
f0:df:b1:c1:10:87:57:70:10:12:03:96:0d:50:a0:
70:d2:7d:1b:72:33:5a:53:66:fa:d0:ff:54:b0:1d:
c4:0e:34:8e:9b:69:93:cb:09:47:30:2c:4a:20:98:
d3:89:5e:84:e5:78:c7:bc:90:f9:13:68:5d:1d:e5:
90:7c:10:b1:16:e6:c4:ed:c3:ca:46:34:ce:6c:ad:
c1:d8:60:fd:9f:0c:18:a3:6d:4e:8f:5f:1e:9a:f7:
87:95:bd:55:84:e4:0b:cb:47:d9:8d:80:b3:09:2f:
4d:de:61:36:4b:72:eb:9a:21:24:06:ac:6a:85:80:
f6:96:b9:b4:f3:f8:6d:e5:bb:fc:dd:65:ef:d0:1b:
64:48:59:46:71:89:77:eb:36:f7:e0:7f:bb:68:5c:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:29:3A:98:70:40:7C:72:76:2C:D1:9C:E3:A3:65:66:80:EB:D8
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fL4pOphwQHxydizRnOOjZWaA69g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:53:c4:d0:f0:7f:13:8c:28:57:65:41:40:9a:d8:94:06:fc:
f6:ab:5a:c9:9f:e1:e0:cc:5d:89:88:82:dc:3b:7b:af:3c:17:
7d:56:e6:15:f1:9d:62:59:64:45:e5:6c:94:13:bf:e1:d0:26:
aa:e8:ff:82:50:96:1c:25:c2:45:64:00:b5:12:67:ba:2a:26:
dc:2e:8a:98:ee:87:1d:fc:e2:16:e2:6d:8c:18:ed:01:12:0b:
54:4c:25:b7:de:ef:eb:87:40:8a:e5:d7:45:c2:18:cb:40:f0:
6f:a1:42:77:ff:72:c4:16:42:f6:90:cd:11:a7:2a:2b:fa:56:
88:3c:7a:a6:54:2c:d7:be:4e:59:41:38:2e:4e:55:b2:95:20:
92:75:5d:2b:73:6d:ec:40:1b:2c:3e:d0:3b:69:0e:c1:dc:c7:
12:16:eb:4b:a1:93:b7:90:c1:38:ce:a3:26:60:a0:ae:68:3d:
c8:24:51:98:e0:36:a6:10:b2:f6:77:44:d7:f3:f2:6e:6e:55:
c4:7f:43:9e:18:9e:39:55:93:74:c4:1f:c1:0e:44:8f:ec:bb:
d0:b9:08:4f:36:4b:7b:74:05:cd:bb:22:cb:bc:6d:5c:31:da:
24:70:67:c2:6a:12:d2:00:a5:bd:8c:59:88:5e:92:51:69:68:
67:0d:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:08 2025 by rpki-client