Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iGnV9DkDa60MLHCnWsZ35TcTVQA.roa
File: iGnV9DkDa60MLHCnWsZ35TcTVQA.roa (raw, json)
Hash identifier: neRyD+ypCf1mcGnCsUsHwVCjUvFYbEkUlWnzZMZ9+Fg=
Subject key identifier: 88:69:D5:F4:39:03:6B:AD:0C:2C:70:A7:5A:C6:77:E5:37:13:55:00
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAD2493C8DF61ABA84700894A6F5D608C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iGnV9DkDa60MLHCnWsZ35TcTVQA.roa
Signing time: Tue 19 Sep 2023 11:12:50 +0000
ROA not before: Tue 19 Sep 2023 11:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ace5:be7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:24:93:c8:df:61:ab:a8:47:00:89:4a:6f:5d:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 11:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8869d5f439036bad0c2c70a75ac677e537135500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:74:0e:42:e8:84:01:3d:63:b7:d4:6d:5b:
56:79:c7:22:5a:ff:0c:01:bb:d2:66:45:ca:71:6e:
9b:08:48:92:3f:5b:05:d3:5f:2e:67:fb:6f:ed:19:
b3:35:73:e5:60:9a:69:bf:f5:2b:b3:48:6d:ed:f2:
19:3e:c5:f0:64:60:95:19:db:0f:b7:10:7d:7f:2a:
36:bf:43:2c:72:f2:4b:57:36:5d:5b:0b:41:cf:7f:
7b:50:0b:51:a4:5b:10:75:10:92:2d:85:3c:38:7a:
86:5d:80:3b:06:54:ac:ac:aa:c7:61:9b:e6:27:23:
9d:30:52:e4:ed:b3:28:f9:12:8a:e0:9b:64:32:e2:
9d:20:56:91:9b:5e:a2:c5:97:86:d5:a0:82:11:88:
56:7d:6a:c5:d4:4e:0e:29:c4:bd:c4:d7:88:e6:e8:
9d:52:73:f3:5b:04:df:c5:5e:84:be:11:07:4d:5a:
5e:b3:5c:f0:57:72:72:4b:32:16:9f:92:cd:e4:b3:
79:b9:c7:cd:ac:87:35:c3:71:91:55:67:c4:b2:b1:
ed:4e:02:2b:3c:d4:2b:d2:21:27:d8:af:8c:e3:75:
77:ba:95:bb:8a:4c:90:14:ca:1a:39:ec:41:2f:da:
c0:d9:2c:07:3f:6b:60:44:10:66:c2:0e:dd:fe:cf:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:D5:F4:39:03:6B:AD:0C:2C:70:A7:5A:C6:77:E5:37:13:55:00
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iGnV9DkDa60MLHCnWsZ35TcTVQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:59:fe:04:92:6a:05:8f:2c:58:43:a9:e2:df:c2:b5:35:10:
44:91:0e:cd:aa:2a:f0:59:9d:77:62:27:9c:6d:be:b6:0e:47:
60:ef:e4:93:15:23:73:67:57:ec:a7:ac:7c:b8:a0:73:20:8e:
3e:ce:01:05:2f:d5:bb:75:9e:79:c6:c8:b6:f0:7b:27:b4:a9:
a6:f8:20:04:91:d1:19:d9:98:4a:73:ef:03:03:38:fb:b3:99:
09:6c:91:6f:5e:dc:14:34:38:cc:df:2a:71:42:20:2f:19:76:
1c:f9:58:d8:1e:71:2a:b4:6f:03:64:37:bb:52:f4:27:30:06:
a9:fd:ad:18:f4:14:b9:46:a1:38:aa:a1:af:1f:60:ca:ab:b4:
6b:07:28:50:b6:95:cc:df:46:ea:13:f5:e9:39:5d:93:4b:5b:
f2:2c:a5:14:ca:2b:b7:92:a2:bd:1c:c6:0f:60:cf:6c:59:0b:
9e:f4:dd:22:3b:a3:89:2e:39:28:70:b2:27:c7:7c:d5:67:54:
59:53:10:2f:72:77:59:2f:ba:70:fa:a9:ef:f3:55:48:24:8b:
90:bf:db:ce:d5:79:e5:a7:93:f9:94:ef:cd:cb:0f:88:2f:d1:
57:d9:c6:45:27:7c:b8:9c:f9:02:f5:2d:f2:8a:83:6c:29:a2:
a6:40:2d:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqtJJPI32GrqEcAiUpvXWCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE5MTExMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODY5ZDVmNDM5MDM2YmFkMGMyYzcwYTc1YWM2NzdlNTM3MTM1NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HV0DkLohAE9Y7fUbVtWecciWv8M
AbvSZkXKcW6bCEiSP1sF018uZ/tv7RmzNXPlYJppv/Urs0ht7fIZPsXwZGCVGdsP
txB9fyo2v0MscvJLVzZdWwtBz397UAtRpFsQdRCSLYU8OHqGXYA7BlSsrKrHYZvm
JyOdMFLk7bMo+RKK4JtkMuKdIFaRm16ixZeG1aCCEYhWfWrF1E4OKcS9xNeI5uid
UnPzWwTfxV6EvhEHTVpes1zwV3JySzIWn5LN5LN5ucfNrIc1w3GRVWfEsrHtTgIr
PNQr0iEn2K+M43V3upW7ikyQFMoaOexBL9rA2SwHP2tgRBBmwg7d/s8VKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIhp1fQ5A2utDCxwp1rGd+U3E1UAMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvaUduVjlEa0RhNjBNTEhDbldzWjM1VGNUVlFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKVZ/gSSagWPLFhDqeLf
wrU1EESRDs2qKvBZnXdiJ5xtvrYOR2Dv5JMVI3NnV+ynrHy4oHMgjj7OAQUv1bt1
nnnGyLbweye0qab4IASR0RnZmEpz7wMDOPuzmQlskW9e3BQ0OMzfKnFCIC8Zdhz5
WNgecSq0bwNkN7tS9CcwBqn9rRj0FLlGoTiqoa8fYMqrtGsHKFC2lczfRuoT9ek5
XZNLW/IspRTKK7eSor0cxg9gz2xZC5703SI7o4kuOShwsifHfNVnVFlTEC9yd1kv
unD6qe/zVUgki5C/287VeeWnk/mU783LD4gv0VfZxkUnfLic+QL1LfKKg2wpoqZA
LVc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:17 2025 by rpki-client