Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mx_FpfA3gVyxmxzaUtMm4DKo5N4.roa
File: mx_FpfA3gVyxmxzaUtMm4DKo5N4.roa (raw, json)
Hash identifier: jNoynM5H/6Ez2MTX0IhWezkYC3bVzfnyXxLBqvOlYdA=
Subject key identifier: 9B:1F:C5:A5:F0:37:81:5C:B1:9B:1C:DA:52:D3:26:E0:32:A8:E4:DE
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A778187E1D98634D5963D03750A87775D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mx_FpfA3gVyxmxzaUtMm4DKo5N4.roa
Signing time: Sat 09 Sep 2023 01:14:52 +0000
ROA not before: Sat 09 Sep 2023 01:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:77:81:87:e1:d9:86:34:d5:96:3d:03:75:0a:87:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 01:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1fc5a5f037815cb19b1cda52d326e032a8e4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:78:2e:22:d0:57:ba:bb:0c:6e:ce:46:44:
b4:fe:e6:4f:05:30:11:dd:66:71:cc:fb:54:ea:5d:
20:c9:a2:c7:b1:0c:cc:73:69:3e:9d:3c:a7:a5:3b:
80:1d:3d:9f:00:dc:fb:aa:e9:42:1e:e1:21:c1:e0:
e9:c3:3c:f2:13:a7:b1:55:f4:c7:a9:97:e7:32:90:
5c:0b:9d:54:0c:03:29:e4:6d:b8:8f:41:ca:05:89:
39:9c:dc:fe:f4:36:0f:79:cc:ed:c7:05:d6:0a:43:
f7:4a:39:96:d0:52:f1:fe:04:f5:d3:88:08:68:5a:
4c:cb:61:aa:49:13:ae:0c:1b:b7:51:ce:78:1e:37:
a2:68:04:d8:77:f4:5e:88:19:10:cf:c3:60:59:e1:
6f:39:41:ea:c6:a0:6d:57:fe:6f:34:4b:1c:89:5e:
37:b9:fc:5c:a8:7d:0d:9c:c0:ce:8b:cf:f2:05:eb:
59:22:d8:de:ab:d4:f3:c6:fa:a0:8f:c2:cc:e8:8d:
bb:0d:c1:04:c5:59:d7:96:ec:96:b9:b2:f6:0e:08:
cd:d8:bd:c6:48:75:f9:c0:a5:68:cb:4a:35:17:52:
21:fd:10:c3:63:cf:78:56:26:2f:ec:bf:e2:f2:1c:
4e:99:ab:27:b0:ac:d6:65:38:ff:bf:d1:8c:23:1a:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:C5:A5:F0:37:81:5C:B1:9B:1C:DA:52:D3:26:E0:32:A8:E4:DE
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mx_FpfA3gVyxmxzaUtMm4DKo5N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:58:48:1c:4f:08:0f:93:c3:da:1a:e2:02:8a:56:a5:e7:d8:
ba:f2:1b:b1:f2:cc:c2:36:8e:92:e8:a8:6c:31:ad:1c:69:76:
e7:de:cc:90:5d:e8:b6:ec:b4:f5:21:2f:24:db:cf:85:29:69:
8a:ef:9d:c5:dd:41:e8:f2:d2:43:89:37:9a:17:a2:f8:da:84:
6e:97:df:f8:fc:c1:d6:38:4c:c2:f4:b9:83:f7:03:19:2b:bc:
d7:ab:d3:9c:34:e1:64:3e:fd:82:44:66:53:7d:3f:ca:2e:96:
8a:82:c2:a1:66:ab:28:5d:a4:a1:53:f0:50:23:82:13:6e:e4:
b2:5f:70:dc:63:a4:9c:e9:a0:93:ca:85:ff:3e:d3:81:11:9c:
39:cf:b0:83:2b:92:06:48:54:20:b5:bb:8d:80:39:27:d0:09:
88:dc:27:e8:33:5d:be:8e:da:4d:66:ca:5c:f6:b8:c3:f9:9f:
55:9e:7a:68:c0:94:ce:07:d2:f2:7e:3f:41:ce:49:b4:3b:d8:
0b:eb:af:b6:65:c7:a5:6e:40:a9:08:99:ef:93:9d:f6:ec:b0:
f6:63:d0:52:e9:4c:b8:c2:69:93:6c:08:77:40:52:cf:1e:39:
79:4f:11:03:de:97:db:13:52:30:c7:1f:88:f1:9d:91:60:8e:
ed:2e:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:53 2025 by rpki-client