Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lNLuEMdG7uaRSpf-Y5MdAYmh2CE.roa
File: lNLuEMdG7uaRSpf-Y5MdAYmh2CE.roa (raw, json)
Hash identifier: GzfE1rLe+CHb408NJRJXZL+zwH4LQ1NvmZxm6b6IUUI=
Subject key identifier: 94:D2:EE:10:C7:46:EE:E6:91:4A:97:FE:63:93:1D:01:89:A1:D8:21
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A84CD6E5DCDBCFED4E34BD19A097AD64F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lNLuEMdG7uaRSpf-Y5MdAYmh2CE.roa
Signing time: Mon 11 Sep 2023 15:12:50 +0000
ROA not before: Mon 11 Sep 2023 15:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:cd:6e:5d:cd:bc:fe:d4:e3:4b:d1:9a:09:7a:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 15:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94d2ee10c746eee6914a97fe63931d0189a1d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:57:e6:6b:a4:53:3a:9f:3b:2c:ba:5c:9c:
c2:d5:2c:ec:74:b0:86:ff:33:cb:4d:04:e5:67:80:
ba:b9:33:f0:a5:b2:e0:0d:a6:73:eb:35:45:6f:63:
ca:50:1e:ab:08:72:bc:00:a3:5c:43:d6:a9:8d:e7:
04:9b:a2:51:88:65:a8:69:49:fb:84:4b:6f:aa:b9:
cf:00:27:f8:8c:b8:1d:b4:02:e8:08:0e:07:d5:87:
c2:ab:f8:0b:8f:69:5c:52:b6:31:99:99:1c:42:f0:
49:32:2d:fa:8b:e9:9f:77:c5:20:7d:f3:13:71:9c:
f1:b4:39:f1:7e:72:2e:67:53:2d:5a:a8:dc:c7:03:
fd:02:a4:19:45:fe:02:14:8c:4f:e8:8e:a3:ca:3e:
8e:b1:df:b2:35:ce:f8:5f:d9:27:3b:1c:d5:df:c0:
1e:4c:9f:75:fc:35:95:f9:6b:2d:92:5d:32:d4:46:
05:c4:88:42:92:62:7e:65:d3:2f:3f:a2:69:6d:f7:
f0:ac:ee:4e:a6:e0:94:a8:b4:42:0d:5e:3a:62:b0:
f2:26:1b:a5:8b:56:78:45:93:c6:1d:69:b9:ee:12:
96:2f:6b:71:b5:50:f8:9d:1a:6f:ee:47:02:11:e4:
14:8c:96:09:7e:3b:2b:51:1c:20:b2:69:c7:00:f2:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:EE:10:C7:46:EE:E6:91:4A:97:FE:63:93:1D:01:89:A1:D8:21
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lNLuEMdG7uaRSpf-Y5MdAYmh2CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:36:07:31:ae:ae:71:59:e0:08:c7:5d:41:a4:68:13:48:24:
b9:9d:a1:1f:92:20:7b:9e:71:88:e8:22:cf:04:06:9b:7f:f6:
3a:e1:0a:b2:1f:00:19:03:b5:5a:18:3a:e1:64:e1:39:dd:8e:
00:42:3a:0c:50:a6:62:2c:76:bc:78:11:6b:1b:f0:bc:d3:4c:
28:97:f1:34:d4:cd:d3:9d:e3:b3:d0:a9:80:22:59:d6:89:54:
ca:ed:1e:ad:f2:a1:02:14:9f:75:76:12:7f:d9:a7:1b:dc:f1:
0a:e5:7f:93:a4:31:05:22:98:db:0d:b1:ea:50:fd:5a:48:35:
43:43:67:4f:10:89:99:e7:28:49:94:9d:45:2a:23:59:3f:db:
96:30:88:d3:e1:37:cf:51:66:78:50:99:87:8d:38:0d:1e:39:
8d:2c:1d:e4:b8:5a:ac:67:af:b8:2d:01:e5:27:1e:a7:20:a1:
e8:0c:8b:a2:ea:50:58:af:f3:98:b1:6d:56:09:7e:e8:a1:9a:
bf:30:4c:ce:96:af:69:ce:d1:8e:04:b9:8c:7e:72:32:a0:5e:
9e:56:28:bc:4d:8f:e7:59:45:bd:fe:cc:a2:18:35:65:a1:bc:
89:24:61:70:63:e9:9b:bf:db:9b:85:f1:b7:84:8f:52:3d:ff:
8f:80:f5:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqEzW5dzbz+1ONL0ZoJetZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTExMTUxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGQyZWUxMGM3NDZlZWU2OTE0YTk3ZmU2MzkzMWQwMTg5YTFkODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomtX5mukUzqfOyy6XJzC1SzsdLCG
/zPLTQTlZ4C6uTPwpbLgDaZz6zVFb2PKUB6rCHK8AKNcQ9apjecEm6JRiGWoaUn7
hEtvqrnPACf4jLgdtALoCA4H1YfCq/gLj2lcUrYxmZkcQvBJMi36i+mfd8UgffMT
cZzxtDnxfnIuZ1MtWqjcxwP9AqQZRf4CFIxP6I6jyj6Osd+yNc74X9knOxzV38Ae
TJ91/DWV+Wstkl0y1EYFxIhCkmJ+ZdMvP6JpbffwrO5OpuCUqLRCDV46YrDyJhul
i1Z4RZPGHWm57hKWL2txtVD4nRpv7kcCEeQUjJYJfjsrURwgsmnHAPLbWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJTS7hDHRu7mkUqX/mOTHQGJodghMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvbE5MdUVNZEc3dWFSU3BmLVk1TWRBWW1oMkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGI2BzGurnFZ4AjHXUGk
aBNIJLmdoR+SIHuecYjoIs8EBpt/9jrhCrIfABkDtVoYOuFk4TndjgBCOgxQpmIs
drx4EWsb8LzTTCiX8TTUzdOd47PQqYAiWdaJVMrtHq3yoQIUn3V2En/Zpxvc8Qrl
f5OkMQUimNsNsepQ/VpINUNDZ08QiZnnKEmUnUUqI1k/25YwiNPhN89RZnhQmYeN
OA0eOY0sHeS4Wqxnr7gtAeUnHqcgoegMi6LqUFiv85ixbVYJfuihmr8wTM6Wr2nO
0Y4EuYx+cjKgXp5WKLxNj+dZRb3+zKIYNWWhvIkkYXBj6Zu/25uF8beEj1I9/4+A
9VI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:40 2025 by rpki-client