Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m6_C4Y9BsPraSDTja3QTvcS_s2Q.roa
File: m6_C4Y9BsPraSDTja3QTvcS_s2Q.roa (raw, json)
Hash identifier: RZbAzWWyYw/fSeNXmDUnQxNUeaKMpKwNxAR1/O18zQU=
Subject key identifier: 9B:AF:C2:E1:8F:41:B0:FA:DA:48:34:E3:6B:74:13:BD:C4:BF:B3:64
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6918CDDD0D71115D2B4CF79DC7F0CC06
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m6_C4Y9BsPraSDTja3QTvcS_s2Q.roa
Signing time: Wed 06 Sep 2023 06:05:47 +0000
ROA not before: Wed 06 Sep 2023 06:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:6918:3c0f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:18:cd:dd:0d:71:11:5d:2b:4c:f7:9d:c7:f0:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 06:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bafc2e18f41b0fada4834e36b7413bdc4bfb364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:4f:a6:f5:d5:d4:7d:cc:a9:16:30:a8:79:
1c:24:b1:75:a7:46:2c:0e:54:67:35:5e:1f:1e:11:
5a:42:17:62:ff:85:1e:89:25:2f:f8:91:97:1e:24:
e0:fa:e9:23:fd:6c:f3:5f:71:8e:f6:73:3a:36:ec:
72:01:6d:dc:9f:1b:b3:9b:28:88:e8:da:c9:56:01:
ea:37:88:8a:70:59:af:55:5d:d1:e3:e3:9d:08:b8:
c6:fc:a7:98:9c:e2:91:36:ab:f9:4a:fb:07:81:00:
df:dc:95:d2:83:cb:a2:1e:d5:e5:bb:76:15:8d:4f:
0a:47:e0:2f:f4:cb:13:7b:86:cc:e3:49:b5:bc:39:
4e:99:16:c9:a2:c7:8f:ac:21:c3:ff:8f:76:77:d4:
0f:b8:de:9d:63:ad:a5:00:d7:8c:b0:02:e6:a1:32:
00:ca:ce:52:11:7a:2c:76:46:b2:7e:9d:46:99:13:
bb:fe:e0:fc:72:d5:61:2c:4e:6a:8f:23:63:7f:5d:
33:8c:38:b0:c0:59:8f:ab:f7:35:0a:bb:56:dc:34:
96:c9:84:07:7b:d3:cf:2f:77:c5:fb:85:37:80:48:
51:b5:d2:f0:41:b5:cd:58:4a:ca:23:6c:22:41:da:
19:a9:54:e9:02:85:ae:89:4c:36:06:d3:3b:88:90:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:C2:E1:8F:41:B0:FA:DA:48:34:E3:6B:74:13:BD:C4:BF:B3:64
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m6_C4Y9BsPraSDTja3QTvcS_s2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ce:45:6e:ff:34:4b:1a:d6:d9:73:80:c5:6f:4f:3c:16:0f:
29:20:d8:35:73:9a:ef:3d:81:08:04:30:e9:4c:e9:14:17:f0:
42:a3:22:54:be:d6:c4:f8:7a:b1:93:6f:47:05:9c:df:d2:e7:
b1:ad:62:a2:a5:07:f0:79:7a:73:bb:35:79:24:2b:5a:d7:cb:
59:77:b7:b8:0e:19:ec:8d:f0:11:91:8f:91:7e:44:99:34:f3:
c0:1c:0d:05:62:f3:13:49:c4:28:7f:e7:a9:8f:e4:0f:6c:56:
03:2f:62:75:6f:b3:1d:70:14:4f:dd:44:04:fe:ff:8f:a5:88:
e8:0c:99:90:97:8a:06:fc:3c:49:dc:34:f7:cc:0b:00:2d:0b:
41:3d:f9:9e:f1:28:65:5e:0b:15:8d:0c:5b:0b:a6:f5:69:7a:
f7:52:42:8f:8b:e4:e1:f0:fb:d4:72:98:53:24:ea:d4:b7:7f:
26:16:d4:cb:06:5a:db:79:35:d6:78:63:6b:42:2c:6c:d8:a0:
55:07:ae:5f:bf:53:4c:0d:11:48:ea:9e:e3:eb:f5:a8:ae:52:
fb:74:63:98:cb:c1:f7:78:90:5f:d9:1d:ca:13:50:b7:ff:05:
5e:ec:af:c6:1d:fa:f5:73:45:ef:0d:4a:0a:0c:48:a7:3d:ad:
68:78:7a:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYppGM3dDXERXStM953H8MwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA2MDYwNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmFmYzJlMThmNDFiMGZhZGE0ODM0ZTM2Yjc0MTNiZGM0YmZiMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTFPpvXV1H3MqRYwqHkcJLF1p0Ys
DlRnNV4fHhFaQhdi/4UeiSUv+JGXHiTg+ukj/WzzX3GO9nM6NuxyAW3cnxuzmyiI
6NrJVgHqN4iKcFmvVV3R4+OdCLjG/KeYnOKRNqv5SvsHgQDf3JXSg8uiHtXlu3YV
jU8KR+Av9MsTe4bM40m1vDlOmRbJosePrCHD/492d9QPuN6dY62lANeMsALmoTIA
ys5SEXosdkayfp1GmRO7/uD8ctVhLE5qjyNjf10zjDiwwFmPq/c1CrtW3DSWyYQH
e9PPL3fF+4U3gEhRtdLwQbXNWErKI2wiQdoZqVTpAoWuiUw2BtM7iJBsxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJuvwuGPQbD62kg042t0E73Ev7NkMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvbTZfQzRZOUJzUHJhU0RUamEzUVR2Y1NfczJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACHORW7/NEsa1tlzgMVv
TzwWDykg2DVzmu89gQgEMOlM6RQX8EKjIlS+1sT4erGTb0cFnN/S57GtYqKlB/B5
enO7NXkkK1rXy1l3t7gOGeyN8BGRj5F+RJk088AcDQVi8xNJxCh/56mP5A9sVgMv
YnVvsx1wFE/dRAT+/4+liOgMmZCXigb8PEncNPfMCwAtC0E9+Z7xKGVeCxWNDFsL
pvVpevdSQo+L5OHw+9RymFMk6tS3fyYW1MsGWtt5NdZ4Y2tCLGzYoFUHrl+/U0wN
EUjqnuPr9aiuUvt0Y5jLwfd4kF/ZHcoTULf/BV7sr8Yd+vVzRe8NSgoMSKc9rWh4
euU=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:59 2025 by rpki-client