Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/kZnQJ82iiawbpiIUbU1rqoY4glU.roa
File: kZnQJ82iiawbpiIUbU1rqoY4glU.roa (raw, json)
Hash identifier: HwErq8YqXNvd1NXQOO/CUsfHahTFuAfGrTljozR4FzM=
Subject key identifier: 91:99:D0:27:CD:A2:89:AC:1B:A6:22:14:6D:4D:6B:AA:86:38:82:55
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A82A9101074709B360F706B783E7712EF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/kZnQJ82iiawbpiIUbU1rqoY4glU.roa
Signing time: Mon 11 Sep 2023 05:13:52 +0000
ROA not before: Mon 11 Sep 2023 05:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:a9:10:10:74:70:9b:36:0f:70:6b:78:3e:77:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 05:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9199d027cda289ac1ba622146d4d6baa86388255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:d6:11:c9:74:63:aa:9a:ef:3e:b8:5e:3a:
9b:0c:7b:f2:de:18:8d:d9:d4:9b:9e:e7:a2:c3:2d:
92:0e:29:b0:a9:66:25:06:b5:07:ec:49:18:3d:5f:
d4:f2:fd:3d:e0:43:3d:ca:01:3d:f0:92:d0:61:6c:
96:80:f3:5c:95:79:19:39:ea:44:81:85:93:0c:f7:
b6:41:8e:16:73:82:f4:19:34:24:d7:12:17:a3:88:
59:ed:11:15:12:df:51:66:6b:cf:a5:7c:6b:9b:b0:
a4:bc:17:c2:57:8f:f2:4f:ab:b3:a1:1d:63:b0:34:
62:f5:ff:5c:cc:d2:39:19:b6:85:3d:27:24:82:38:
8e:32:72:20:db:6e:05:86:14:57:8e:23:99:a1:3e:
22:f9:55:70:d8:8e:b0:dc:89:84:02:ce:4b:1b:9c:
18:20:2a:04:08:98:4d:80:c4:5a:e9:74:d9:1d:58:
a9:ff:bc:e0:1d:15:06:01:fd:de:44:f0:6d:21:15:
59:6e:b4:c8:ea:9a:03:5c:14:a4:6a:04:fb:7a:8c:
b5:b0:3a:82:fe:c6:5b:70:cb:4f:02:bf:28:e3:01:
32:7b:76:e1:1e:d8:b7:86:9d:db:47:03:71:49:37:
97:bb:27:4a:4a:ca:0d:df:98:27:ad:e1:6d:9c:3c:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:99:D0:27:CD:A2:89:AC:1B:A6:22:14:6D:4D:6B:AA:86:38:82:55
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/kZnQJ82iiawbpiIUbU1rqoY4glU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:fd:3f:c3:c8:52:49:e4:5c:1c:62:5d:c8:9c:35:a1:59:59:
1b:0e:72:b3:2d:b6:f7:b5:65:ef:1c:4f:e8:18:a7:da:0a:dc:
15:40:2a:f9:20:cf:ae:87:3f:43:9b:0e:b8:3f:5d:26:6e:be:
ed:ca:30:f0:41:cd:d9:15:bf:de:90:ab:32:47:5d:c8:e2:87:
85:9c:d0:15:5c:c8:8e:62:71:b8:b4:04:78:7a:ea:b2:9d:ef:
5c:b9:e7:26:48:42:6c:7c:9c:34:b7:cd:62:da:4b:ae:a3:fa:
8b:e6:93:a3:7e:f5:17:15:90:c9:39:b8:43:47:bf:cd:38:9b:
a4:b4:24:d0:76:ba:75:e5:f9:08:1e:92:fd:75:ea:bc:81:b9:
57:70:8a:9c:18:cc:6e:b8:80:85:ee:25:68:00:4f:be:55:cf:
d6:ad:08:56:99:c5:43:23:78:50:65:bb:94:18:63:16:57:4a:
66:01:c3:c1:71:73:b6:ba:71:51:19:82:91:85:43:8f:f1:4a:
b5:10:6c:d4:6a:51:74:99:d3:f8:c4:d8:66:45:67:32:46:5b:
50:a9:0b:2c:17:73:19:cc:3f:49:bd:c4:bb:21:53:f9:f5:40:
b1:be:c0:bc:94:02:78:c9:25:6f:31:09:42:75:a7:1d:01:c8:
fb:11:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:22 2025 by rpki-client