Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l0ysOEJmmQXEXZlFri4nxTZc0z4.roa
File: l0ysOEJmmQXEXZlFri4nxTZc0z4.roa (raw, json)
Hash identifier: +MuSAkea8hkuTXXB5/cpT+1sBWhibKnZsQFV+zxmUmw=
Subject key identifier: 97:4C:AC:38:42:66:99:05:C4:5D:99:45:AE:2E:27:C5:36:5C:D3:3E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9967C83483DD1D2A040CCF0CEFE36917
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l0ysOEJmmQXEXZlFri4nxTZc0z4.roa
Signing time: Fri 15 Sep 2023 15:13:50 +0000
ROA not before: Fri 15 Sep 2023 15:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:67:c8:34:83:dd:1d:2a:04:0c:cf:0c:ef:e3:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 15:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=974cac3842669905c45d9945ae2e27c5365cd33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:2c:51:eb:5c:86:9b:75:ca:c7:bb:6e:bb:
3b:07:d8:41:84:2a:7a:e2:51:6d:cd:60:de:f0:52:
7f:c1:8f:c5:c6:7b:e1:9e:b3:a1:d8:03:8e:db:c7:
ab:70:da:d1:2e:07:37:7d:33:1a:3d:10:3d:62:83:
40:e5:6f:b5:1b:de:81:9b:fc:0d:56:63:13:f7:14:
85:55:ed:a6:bb:de:7b:42:e8:53:9c:e3:0d:bf:75:
16:5b:24:42:cc:13:91:2d:dd:ed:fa:0e:bd:8b:98:
d6:81:2b:39:b5:92:dd:26:49:7c:ba:a7:a7:4c:a5:
a7:3c:06:f8:3f:c9:6c:31:ca:4b:b6:87:cb:ef:34:
69:28:a8:d7:a5:05:82:3a:70:9d:fa:73:96:64:7d:
82:b3:04:ee:22:f5:0a:25:7e:e8:15:dd:b3:b8:72:
51:7a:55:b2:13:ce:27:36:76:43:cd:73:87:b0:bc:
8e:d6:59:6f:cf:64:e1:3f:c2:dd:1a:98:73:d9:1b:
3d:e4:82:fa:53:0b:06:d7:9e:94:5c:db:6f:9d:cd:
82:91:e3:6e:7d:96:0d:7d:f5:b0:e6:2d:1f:a8:fc:
a9:28:9b:cc:35:0e:ab:ef:21:42:af:d6:50:3e:03:
6f:ed:27:12:6e:a8:88:39:de:07:1e:c5:dd:8d:e8:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:AC:38:42:66:99:05:C4:5D:99:45:AE:2E:27:C5:36:5C:D3:3E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l0ysOEJmmQXEXZlFri4nxTZc0z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:5f:c0:6e:4e:89:43:58:d3:c9:74:fe:89:a6:69:f3:2a:ca:
c4:45:de:46:a1:51:bf:25:c2:5f:43:fc:0d:5a:fa:0f:15:48:
3d:78:bd:3b:66:2b:96:de:63:2c:45:0c:d9:8a:11:1c:f6:89:
41:39:61:a8:61:ac:5f:1d:f6:bf:19:64:ae:d2:84:c4:51:64:
d0:d9:b9:19:a0:a2:1a:3c:e7:57:c0:54:51:92:a3:bf:23:8a:
8d:3b:7b:ea:cc:6d:c8:bd:c9:1c:bb:a2:3b:c2:c4:ef:95:f0:
c8:d6:08:5c:e9:64:1e:d2:13:71:fc:bc:16:79:a8:ef:9b:72:
f9:7d:94:3f:bd:ea:e9:bf:15:24:d2:39:a8:1a:d0:6c:cb:b5:
66:64:81:44:39:92:ef:70:57:10:58:32:a9:e0:72:8b:f6:7c:
0a:6f:41:62:d4:ed:de:df:7d:e4:56:c3:da:e3:91:20:80:ca:
98:88:aa:4a:6c:92:0f:a0:ca:69:35:78:b1:60:dd:69:f8:b5:
62:2d:8c:f4:30:3f:d3:db:04:64:3c:d7:71:fe:3b:48:fd:80:
4f:83:74:f4:3c:ec:d8:17:bf:aa:44:eb:11:d9:0e:0e:07:1d:
d0:0c:96:98:a5:93:51:0b:7d:0b:8a:ea:84:ce:8d:6c:fb:02:
21:3c:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:51 2025 by rpki-client