Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlFsuyXLSzr49BOJWS6l2U58YI0.roa
File: hlFsuyXLSzr49BOJWS6l2U58YI0.roa (raw, json)
Hash identifier: 7zEkoBqulrzyij9OKyVNi1eE5/4lCa5e8ctcngVNE8U=
Subject key identifier: 86:51:6C:BB:25:CB:4B:3A:F8:F4:13:89:59:2E:A5:D9:4E:7C:60:8D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8D62B1F9D1DEF4556DC453720139EEF1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlFsuyXLSzr49BOJWS6l2U58YI0.roa
Signing time: Wed 13 Sep 2023 07:12:50 +0000
ROA not before: Wed 13 Sep 2023 07:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:62:b1:f9:d1:de:f4:55:6d:c4:53:72:01:39:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 07:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86516cbb25cb4b3af8f41389592ea5d94e7c608d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:cb:53:8e:2f:af:6b:57:87:f8:b9:8f:27:
28:84:c9:75:02:14:d2:9a:0a:e3:5b:6f:6f:28:33:
ae:e8:cd:39:02:52:4a:aa:95:8c:18:c7:bc:68:88:
ec:aa:24:a1:43:d2:a9:6e:4b:96:6c:f7:06:98:eb:
07:2c:a3:e0:0a:5d:2d:7d:13:d9:72:2f:a4:9d:f9:
3d:70:dd:0b:b8:bd:44:b9:a5:d7:3b:27:c1:65:d4:
be:51:ab:e3:3e:bc:8f:ba:ab:9a:66:04:e3:23:2a:
46:11:79:ab:20:06:fa:00:99:28:3d:b4:f1:6c:22:
3d:41:21:2f:9e:fb:32:b0:1e:e3:a8:e8:1e:62:98:
9d:66:3a:5d:12:62:b5:9f:7f:44:d6:77:15:d2:e9:
0d:35:45:5f:31:b9:25:6e:4a:a0:89:e6:34:3b:1f:
4c:ad:7b:ab:9a:25:b0:a5:68:a2:47:a2:44:33:bf:
92:25:b5:2b:22:9c:53:2f:14:9c:8a:34:1f:c5:c4:
59:48:48:1a:87:64:c9:d0:22:bd:9f:a3:80:12:a5:
b1:e1:bd:f0:f3:57:ff:83:f0:c1:b1:88:33:e5:29:
33:7d:dd:f3:19:6c:8b:c2:4f:6e:0c:29:73:9e:f7:
d4:78:b7:69:9b:49:ff:80:33:1e:fe:cb:7e:e7:3e:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:51:6C:BB:25:CB:4B:3A:F8:F4:13:89:59:2E:A5:D9:4E:7C:60:8D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlFsuyXLSzr49BOJWS6l2U58YI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:76:2d:65:35:f1:9c:44:d3:a9:e2:3f:0f:21:a1:b6:f9:2b:
a0:3b:d3:5e:46:44:15:fe:ff:9f:6b:b7:e8:7a:47:87:77:6f:
f1:6a:f8:86:0d:9b:d8:11:73:b9:80:cc:bd:00:89:3e:e9:65:
e2:6c:94:f0:a6:53:7e:0d:2d:07:2d:22:c8:c9:1f:f8:77:87:
7a:36:b5:4d:b1:50:5e:cb:e6:59:14:8b:09:c8:9c:b7:1e:d6:
76:7f:4b:17:f0:61:ba:58:91:84:67:be:69:7e:a2:00:aa:68:
70:bf:89:95:1f:ca:65:83:e2:cb:d4:04:8b:90:7e:85:ee:fc:
e4:76:e2:d4:d5:51:ca:8e:ad:e3:34:76:44:36:cf:4b:54:85:
3b:88:42:53:8f:7e:3b:7a:32:eb:75:74:99:56:d8:35:9c:b1:
b2:64:e9:db:e7:07:67:c7:63:70:70:cf:12:a6:58:1f:9b:5e:
78:f0:d6:11:84:0f:fc:02:8b:fe:77:1f:15:24:8d:30:ea:50:
83:d8:ba:89:c3:20:9c:ef:0e:b9:34:0e:7e:47:4e:0e:36:b1:
b6:56:0e:1e:30:44:c7:ad:5d:6d:a4:55:0a:47:1b:5f:c0:96:
59:68:85:bd:48:1e:6b:62:9f:a6:e9:9a:fc:87:4a:75:76:04:
25:ae:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client