Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gPRut2-3MM87TyFGWKyz-4aCQkI.roa
File: gPRut2-3MM87TyFGWKyz-4aCQkI.roa (raw, json)
Hash identifier: xroC2zVS++eQrnEy/EufiatZDCNwvkc5MkpZg1TXRbE=
Subject key identifier: 80:F4:6E:B7:6F:B7:30:CF:3B:4F:21:46:58:AC:B3:FB:86:82:42:42
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9B8D193ADD56FC5D56182C45A934673D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gPRut2-3MM87TyFGWKyz-4aCQkI.roa
Signing time: Sat 16 Sep 2023 01:13:50 +0000
ROA not before: Sat 16 Sep 2023 01:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9b:8d:19:3a:dd:56:fc:5d:56:18:2c:45:a9:34:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 01:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f46eb76fb730cf3b4f214658acb3fb86824242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:41:d4:ec:69:a3:c2:ab:33:59:ba:2f:bb:
bb:43:09:54:fd:52:7b:12:67:16:7d:3f:2e:d7:d2:
05:f6:f4:1d:b9:04:d1:83:0c:2c:c1:8d:b4:19:8f:
3c:b4:90:42:a9:e6:34:00:c1:0b:e5:d0:16:ea:aa:
37:9e:3e:ed:bf:06:d4:30:7d:0f:12:04:7b:ed:69:
b5:e9:df:5f:8c:84:b2:b5:e1:a4:e6:7e:2f:90:cb:
1d:54:c0:6b:c5:86:f1:18:36:15:29:92:a8:c6:34:
6e:16:08:69:66:63:a9:39:cb:f1:95:fb:59:9e:64:
ea:89:6a:76:4c:35:d6:79:2f:8e:6e:c2:39:3f:5f:
bf:54:e0:59:b6:ca:6a:1d:31:91:6e:58:39:bb:43:
ad:ca:df:10:6c:cb:a3:c6:51:6a:86:e5:cf:e7:a5:
6b:07:b4:bf:e7:ec:45:20:21:b0:f8:26:e2:3f:4c:
bf:c3:c1:69:19:5f:ed:2a:f0:ba:54:e0:e1:13:a0:
a4:75:42:db:fe:7f:c5:c2:2c:c6:db:82:e1:49:9e:
5b:54:12:87:63:3f:21:9c:c3:d8:41:55:81:1d:eb:
d7:c5:9e:b8:9a:45:5b:c4:85:d1:19:50:28:95:a8:
da:5c:67:99:8a:99:bc:55:07:e8:f1:04:f9:4b:38:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:6E:B7:6F:B7:30:CF:3B:4F:21:46:58:AC:B3:FB:86:82:42:42
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gPRut2-3MM87TyFGWKyz-4aCQkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ec:7e:3d:cd:10:a5:cb:27:73:fb:9f:44:93:c1:16:b6:b9:
23:aa:22:f3:18:70:25:02:11:77:43:0a:8a:51:69:c2:aa:10:
47:1b:f0:e2:5d:05:d8:1e:b0:b5:90:c3:33:45:2c:28:77:1c:
24:0f:63:c3:76:d5:73:ec:f3:14:ba:aa:11:a6:5a:0d:1d:8e:
82:cf:da:03:78:52:b2:d7:cc:8e:04:2d:89:e4:48:1f:1d:95:
82:21:04:a2:88:fd:df:2f:89:00:fa:16:40:9f:7b:96:44:eb:
95:29:3c:65:99:4c:52:cc:4a:6a:3f:71:38:33:ea:98:84:c3:
b7:dc:f7:62:f0:64:a5:8a:e9:c7:40:8d:b8:74:cf:2d:a8:71:
c3:70:18:ca:c4:a3:41:82:f4:eb:35:c3:d1:35:df:e9:58:c6:
c9:e1:c2:42:cd:ca:72:b9:05:c0:1f:6b:4f:ae:2d:9b:3c:37:
21:c7:7f:3b:64:68:19:ca:d4:3d:84:47:4c:80:76:d5:74:5a:
48:25:6d:f4:99:d8:e2:b0:33:c1:13:92:a9:29:29:c1:60:0e:
5f:83:d7:a5:70:af:54:4b:ea:33:79:e5:a2:82:57:73:3a:28:
f7:04:7e:c3:6e:aa:f3:0b:79:7c:9f:e5:6f:52:fc:d4:31:f7:
22:dc:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:51 2025 by rpki-client