Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/klQu2xQHTJu40J7lS0avwMTuH5A.roa
File: klQu2xQHTJu40J7lS0avwMTuH5A.roa (raw, json)
Hash identifier: NgE8mVUOPgfK/8zNoyVGiWiUEjT8oiKP7U7J0bsgTX4=
Subject key identifier: 92:54:2E:DB:14:07:4C:9B:B8:D0:9E:E5:4B:46:AF:C0:C4:EE:1F:90
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A82A0D25881ED3DA232B32A98531CF01E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/klQu2xQHTJu40J7lS0avwMTuH5A.roa
Signing time: Mon 11 Sep 2023 05:04:52 +0000
ROA not before: Mon 11 Sep 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:82a0:746b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:a0:d2:58:81:ed:3d:a2:32:b3:2a:98:53:1c:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92542edb14074c9bb8d09ee54b46afc0c4ee1f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:36:2e:b0:c5:13:16:92:f0:d6:51:98:42:
08:16:5a:78:9f:86:ae:62:30:e0:62:57:f8:28:bc:
24:ea:2b:27:4d:67:07:ee:e8:a4:3d:cc:99:ee:a9:
05:eb:63:60:59:9a:aa:85:1d:0b:db:39:21:5d:e0:
ae:b3:c3:e4:40:9d:ab:2e:5a:cf:12:a4:ed:fc:47:
45:54:40:71:11:6f:04:40:a2:16:35:89:cd:c2:ff:
13:4d:ef:b0:fe:7e:27:1d:ca:09:f1:a6:25:fd:46:
47:b5:82:d3:5c:24:bd:fb:02:f7:9d:0d:a6:7e:67:
41:21:c8:89:5d:3b:88:01:34:31:89:fc:20:38:fa:
0d:ac:20:80:41:61:9b:2f:c0:c8:a6:b1:11:c7:d7:
30:d8:2d:6f:72:1f:ab:ca:23:5f:8e:76:1c:d7:2e:
80:94:61:39:32:62:f7:25:52:86:cf:d9:b8:ea:54:
24:ba:15:dc:90:80:7a:dd:70:35:75:5e:7a:f0:37:
24:56:f8:55:cf:8f:09:d8:e4:36:7b:46:25:e5:83:
ff:9a:11:f5:14:e3:a7:e2:d4:5e:24:7b:ad:21:f9:
d1:a4:07:75:2b:67:43:f2:9a:6d:7c:2a:fb:d3:92:
0d:a2:2b:0c:eb:07:5f:bc:86:71:4d:bf:2b:8c:61:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:2E:DB:14:07:4C:9B:B8:D0:9E:E5:4B:46:AF:C0:C4:EE:1F:90
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/klQu2xQHTJu40J7lS0avwMTuH5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:c0:a4:b3:01:60:60:bd:61:25:04:9a:c5:00:9b:4c:dd:a8:
ed:7a:31:59:17:02:52:70:bb:8f:65:f1:10:9e:cd:43:d6:aa:
02:6e:93:43:80:ed:9e:17:79:c2:a8:00:b2:58:f5:70:4e:9e:
22:f0:52:e5:5c:7f:77:80:45:4c:e3:5a:37:44:48:c4:5c:23:
47:9a:cf:72:0e:7b:80:4b:98:79:2e:f2:81:fc:2c:09:db:b0:
dc:8f:8d:4b:28:4a:72:56:61:cf:c5:30:29:13:9d:f2:53:40:
a7:d1:0c:72:07:9e:0e:bc:bd:0b:af:96:e6:c2:5b:e3:10:0b:
9b:ee:03:19:7b:08:7f:54:a9:42:d0:a3:60:2c:ae:9d:99:bc:
d9:59:0c:ed:ac:b4:95:d9:f6:9c:96:18:c0:d8:ed:c2:81:80:
c1:cc:a1:7b:b5:46:28:5e:58:34:9a:d3:f0:a3:75:01:ff:de:
a2:e8:5f:5f:7e:97:f3:6d:64:bb:dd:96:af:28:58:59:54:eb:
f1:fc:71:da:37:11:0d:a4:d8:9e:3e:cb:99:ac:a3:83:26:b5:
76:00:e9:8d:3c:06:46:e5:0f:c8:61:ca:6b:7f:33:33:88:0b:
61:76:5c:87:96:30:a7:71:ad:9b:05:26:f8:e8:d4:a3:60:4e:
b2:51:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:44 2025 by rpki-client