Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlfyAeVN0qiKHtDZ0oipdECGWI4.roa
File: hlfyAeVN0qiKHtDZ0oipdECGWI4.roa (raw, json)
Hash identifier: adF0v8pRiS8rxVbYnSWE/MnDT6kga23b9HFjOzgrwB4=
Subject key identifier: 86:57:F2:01:E5:4D:D2:A8:8A:1E:D0:D9:D2:88:A9:74:40:86:58:8E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6CFB29FADF3ECBA59C129B034AA10177
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlfyAeVN0qiKHtDZ0oipdECGWI4.roa
Signing time: Thu 07 Sep 2023 00:11:54 +0000
ROA not before: Thu 07 Sep 2023 00:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:fb:29:fa:df:3e:cb:a5:9c:12:9b:03:4a:a1:01:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 00:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8657f201e54dd2a88a1ed0d9d288a9744086588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:6d:76:9c:2f:77:56:77:cf:2d:3e:18:f0:
df:79:0d:ee:cc:0a:21:1c:7e:80:7c:cd:4e:0e:3b:
1c:4c:94:c0:71:99:71:53:71:11:2a:ca:cd:6e:1e:
e3:2a:ea:40:20:b3:e1:f4:bb:57:ea:23:50:77:ae:
c5:6e:d0:6f:23:5d:58:62:e8:bc:77:b5:2f:03:98:
5e:91:ed:3d:13:4b:d5:b0:cb:e5:ea:5b:cb:29:70:
e1:25:50:b3:0e:4c:4d:3e:0b:11:0a:b2:16:f4:e9:
7c:79:8d:95:f4:5a:b1:54:9d:f9:07:87:92:89:ea:
ad:dc:59:bc:5a:2f:02:85:7f:08:6f:42:57:9a:0b:
94:49:b1:44:19:f1:85:9c:93:6f:6d:0a:66:ab:31:
1f:86:71:fe:38:93:12:ee:19:71:f6:a1:b5:dc:fc:
c8:88:18:50:ce:dd:1c:14:0a:b5:29:80:4c:68:8d:
e1:fc:23:37:5b:2c:62:54:01:a3:49:31:e6:5b:83:
99:31:d0:72:2f:2d:31:78:1f:45:a5:eb:ab:4d:f9:
31:4e:5e:39:26:b3:b0:2e:84:f8:cc:80:b7:ee:7a:
b7:71:d1:d7:bd:c2:f3:0b:16:5c:45:91:5d:b1:0c:
a5:bb:54:02:6c:63:29:c4:b3:48:00:a9:51:98:a2:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:57:F2:01:E5:4D:D2:A8:8A:1E:D0:D9:D2:88:A9:74:40:86:58:8E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/hlfyAeVN0qiKHtDZ0oipdECGWI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:91:1a:e1:37:66:d4:1b:95:a7:a7:80:7d:1e:b4:9b:6e:72:
ee:b4:ea:0e:0f:9c:0a:d7:df:3b:b4:f9:16:99:7b:69:b8:85:
a5:a2:e4:9a:45:d6:c3:fc:f8:b8:17:68:b5:a0:a5:e3:ed:da:
c0:87:4a:fb:92:c9:64:0e:87:2d:5b:41:64:e9:6b:33:3a:3a:
d0:7e:e6:db:30:08:8e:77:69:09:73:b0:1d:f5:58:2c:4d:c4:
8c:1e:1a:cb:f1:e3:c2:dd:2a:31:1e:bb:23:f0:ee:42:9d:04:
ad:01:b6:09:55:bd:66:9b:27:fe:ff:22:fa:94:17:ef:5a:28:
d3:b1:c5:7e:02:f6:4d:f8:14:76:63:7a:d9:7c:9d:0f:19:38:
e6:e9:4e:c4:a8:df:38:f7:de:96:38:09:45:63:49:ee:69:fd:
6d:e3:1a:2a:8d:c4:e9:46:87:71:75:3e:7c:05:0a:55:1b:06:
be:f2:ca:6d:d7:e0:38:43:96:26:09:fa:80:84:50:f7:b8:b1:
ba:25:31:30:d5:b0:9e:75:2f:dc:de:b0:66:4b:73:92:77:ce:
cf:95:a5:a5:64:ed:84:b2:13:20:ca:c5:08:14:00:9c:a0:96:
4e:e7:c4:89:a4:1b:c6:b5:77:27:3b:d8:5e:38:aa:17:06:8a:
02:39:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:07 2025 by rpki-client