Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l8L4g5huGzlKhJaFewNOvtb8UTY.roa
File: l8L4g5huGzlKhJaFewNOvtb8UTY.roa (raw, json)
Hash identifier: 9Op3GoD7v3Fq96k121XWHTvrXvSwoqAhPM+MW/U5k4M=
Subject key identifier: 97:C2:F8:83:98:6E:1B:39:4A:84:96:85:7B:03:4E:BE:D6:FC:51:36
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6A300A4A3D0C0143413F3C9CAD84B6D2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l8L4g5huGzlKhJaFewNOvtb8UTY.roa
Signing time: Wed 06 Sep 2023 11:10:47 +0000
ROA not before: Wed 06 Sep 2023 11:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:30:0a:4a:3d:0c:01:43:41:3f:3c:9c:ad:84:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 11:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c2f883986e1b394a8496857b034ebed6fc5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:14:e9:a9:13:23:ec:c6:f5:4e:06:39:42:
63:26:e9:13:00:40:36:d3:1f:b2:51:e6:32:2f:b2:
34:fb:50:3f:e2:cb:02:a5:85:52:31:9f:bc:46:22:
6b:29:b9:b7:1b:cf:c9:be:62:f8:9c:6d:86:e4:d6:
54:8a:73:0e:12:43:a5:7f:29:e2:fd:c0:ce:c1:66:
cc:c9:ae:a5:1c:4a:d9:14:df:7e:c7:b4:9c:66:41:
5b:35:87:e5:19:03:99:eb:da:d6:78:16:e4:a4:0e:
65:a1:b6:88:f4:cf:ff:fb:0c:6a:eb:a8:a8:c6:09:
3a:fd:b6:12:33:a9:9d:91:ea:ef:cb:d7:61:b6:e5:
37:65:aa:49:c5:07:27:68:5c:7a:6c:75:8d:f2:db:
4d:fc:c9:69:47:ee:24:6f:cb:ed:ed:53:7d:77:a6:
07:07:da:ac:2d:ca:90:1d:21:79:40:8b:9d:e6:0d:
ed:fb:b3:6c:8d:13:ea:51:77:9d:c9:88:d8:9f:0f:
94:11:b1:ab:c7:c9:0d:42:c4:cd:0a:24:a8:1b:97:
c8:73:67:2f:c3:a1:72:01:44:dd:13:9e:54:57:81:
75:5a:87:87:46:e3:67:a3:9c:ad:26:44:3b:e1:3f:
08:13:81:26:13:22:d0:05:c9:fe:d3:52:ef:f7:51:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:F8:83:98:6E:1B:39:4A:84:96:85:7B:03:4E:BE:D6:FC:51:36
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l8L4g5huGzlKhJaFewNOvtb8UTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:ff:a7:f3:48:0b:35:ac:54:e1:cf:b3:9b:1e:cd:e6:a7:48:
c0:9e:9a:c3:bf:31:30:50:7b:76:ab:9a:72:5b:98:ae:75:ac:
75:b5:db:c8:cb:3a:cd:f1:11:f2:57:af:40:e9:11:9a:59:44:
2c:b3:d2:d9:d4:39:eb:eb:9a:d5:17:17:d5:0a:b7:9e:a7:6b:
43:ec:27:06:a3:a9:1a:fd:95:49:6e:17:6e:0d:da:b4:bb:41:
02:6d:80:3b:54:0b:d2:bc:2d:e1:34:ba:98:5b:51:e5:70:3e:
7e:1f:eb:22:0b:b0:03:80:39:21:04:9e:42:3b:c9:6e:ef:1a:
cc:d4:27:c4:05:f2:27:4e:ec:a8:db:f3:38:05:5d:11:2e:17:
c2:8a:2a:8d:b2:eb:59:c6:2f:ef:aa:ec:cb:7e:17:c8:c8:89:
52:cc:83:21:e2:50:54:9b:9f:56:4f:f2:cb:5d:0b:15:85:a3:
8e:5d:1e:1c:c0:54:bb:fe:4c:06:f3:4d:48:b4:2c:a1:d6:77:
c0:1b:64:2d:7f:78:5d:0f:5b:cf:67:56:cc:36:ba:0f:54:d4:
6d:06:7c:bc:67:45:c5:29:50:41:69:df:40:10:59:88:9e:79:
f4:f8:1b:36:31:77:f9:1c:c7:6e:a5:fe:dd:75:7c:4e:a7:5b:
32:40:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:11 2025 by rpki-client