Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/itebC5o__4fz9e41DhYBj7VdqpY.roa
File: itebC5o__4fz9e41DhYBj7VdqpY.roa (raw, json)
Hash identifier: Rzwhwi3Kh/2H9CgvZpSdDTJ06xSNHDQP8ECzJ2/t4p8=
Subject key identifier: 8A:D7:9B:0B:9A:3F:FF:87:F3:F5:EE:35:0E:16:01:8F:B5:5D:AA:96
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAB3631AF7893F773C661A82A3853338A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/itebC5o__4fz9e41DhYBj7VdqpY.roa
Signing time: Tue 19 Sep 2023 02:12:50 +0000
ROA not before: Tue 19 Sep 2023 02:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:36:31:af:78:93:f7:73:c6:61:a8:2a:38:53:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 02:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ad79b0b9a3fff87f3f5ee350e16018fb55daa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:5c:95:02:ea:f5:44:ff:81:dd:68:dc:10:
5c:2f:2c:8a:62:0e:20:51:fc:f8:9c:ef:2b:85:24:
9f:54:45:57:31:f1:44:b1:0e:2b:7d:57:e9:69:51:
89:e3:b5:eb:a3:13:dd:e7:a4:5b:83:57:97:b8:a0:
28:d4:1f:cc:ee:fc:cd:8f:5c:9d:0d:69:85:6c:5f:
54:0a:b8:69:42:84:29:83:67:cd:f3:a0:ef:fe:8c:
82:33:c7:07:fc:7e:ec:83:22:a0:b0:00:87:da:84:
c0:a4:e0:92:f7:5b:fe:96:09:a0:6e:49:74:84:f2:
0b:9b:25:7b:60:20:2f:fd:3e:66:01:3a:1b:8c:b9:
f7:37:6a:f2:a0:df:df:92:7b:80:a5:90:43:0d:2a:
98:59:e2:81:f0:2e:c3:29:b3:f5:a0:09:8d:dc:1d:
03:de:20:cc:2b:12:22:ce:8c:a1:db:c3:e7:1b:a0:
00:24:7d:c8:6e:93:15:5a:c3:44:bc:07:a5:31:c9:
94:16:dd:3d:fe:52:fc:53:0c:e9:51:32:3f:4b:af:
ce:46:49:db:5c:06:dc:b9:fb:0f:37:11:5e:93:48:
01:d0:8b:f6:eb:5d:21:d3:82:bb:c3:36:7e:96:0a:
a5:e0:30:85:5b:c9:80:01:60:34:20:44:85:1e:19:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:9B:0B:9A:3F:FF:87:F3:F5:EE:35:0E:16:01:8F:B5:5D:AA:96
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/itebC5o__4fz9e41DhYBj7VdqpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:cd:97:ce:2d:8c:b9:37:50:66:bb:d9:74:6d:23:4a:d3:35:
19:bd:89:f8:be:3e:6d:88:84:a5:48:bf:cd:24:4f:bb:53:9f:
42:b6:49:e5:10:92:65:78:3f:68:34:d5:30:13:f5:fb:fe:bc:
d5:94:34:4b:e0:74:24:06:5a:03:ba:95:6d:aa:89:49:87:e7:
d2:e3:4e:a0:38:24:a1:74:58:6f:9b:bc:db:3b:86:36:15:2e:
fb:82:63:de:08:d0:bf:9e:29:9c:ed:b8:3b:44:c7:d4:59:d4:
c9:b0:8b:32:a6:3f:45:8c:a8:70:bd:5e:f4:19:fd:40:34:63:
79:c0:fa:27:e9:76:34:4c:f1:78:0e:26:d7:02:58:ad:d3:fa:
c2:58:dc:c9:5d:a9:1a:0d:ca:6d:ce:2c:a7:b7:e8:97:65:ce:
34:df:25:c9:d8:93:2c:62:e0:db:cc:fb:ed:60:9c:15:f8:4e:
09:fe:79:fb:43:1b:c2:69:90:a0:b4:82:0f:d4:3d:83:70:ae:
ec:8b:e3:15:fa:2c:a7:a0:c9:92:e8:dc:4f:98:b9:4e:88:2e:
43:9c:92:78:b6:d8:61:b9:53:e2:ea:ed:6e:ec:30:f7:26:0f:
22:9c:8e:6b:85:b8:44:af:6c:e1:0e:0d:39:12:13:c3:d9:c1:
ee:7a:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:55:58 2025 by rpki-client