Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n4-hXn_AjMpIdFi-pwjvn0xi30o.roa
File: n4-hXn_AjMpIdFi-pwjvn0xi30o.roa (raw, json)
Hash identifier: ZAhroWFh26XDWagR0W4BFpK7itlnth6lUzwvAtj9f9E=
Subject key identifier: 9F:8F:A1:5E:7F:C0:8C:CA:48:74:58:BE:A7:08:EF:9F:4C:62:DF:4A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8805672BFAA19DFE35E14BB16C97DA14
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n4-hXn_AjMpIdFi-pwjvn0xi30o.roa
Signing time: Tue 12 Sep 2023 06:12:50 +0000
ROA not before: Tue 12 Sep 2023 06:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:05:67:2b:fa:a1:9d:fe:35:e1:4b:b1:6c:97:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 06:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f8fa15e7fc08cca487458bea708ef9f4c62df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:29:e1:0d:81:36:9d:18:ff:b0:9a:01:6f:
6a:46:5b:d0:2f:07:74:8a:84:4d:a1:86:5f:e5:ee:
8c:63:89:e3:5a:b6:8e:40:4e:19:db:4b:25:8b:57:
83:35:04:42:30:af:6a:fd:56:64:c0:ce:95:a6:b8:
f8:2e:e8:e1:b6:9c:b3:09:b6:a9:11:60:12:54:1e:
81:9f:b7:6f:ff:d8:35:d1:ff:a0:c4:c6:3f:10:00:
05:8f:a7:11:53:b1:df:54:2b:8c:18:89:ce:fc:ea:
64:06:8d:47:88:db:14:7d:50:88:a4:1d:c2:bc:ef:
0b:95:81:14:f5:fe:12:3e:8b:df:3d:be:ae:c3:8e:
55:06:9d:db:c1:07:07:a5:b6:7b:6f:a6:5d:7f:c4:
77:a5:34:1d:4c:50:8e:d2:10:ac:03:b7:5c:fb:91:
54:16:fc:a7:a7:34:a4:e3:20:a4:83:77:f5:b6:71:
60:6e:1d:7c:6b:3d:c1:3e:bf:5f:08:c1:5a:10:89:
e3:eb:de:8d:29:ca:9d:af:6f:9d:cd:a4:eb:bd:d5:
22:50:52:bb:cc:13:cd:a3:57:57:dc:eb:ea:28:64:
c5:84:f3:d7:e2:23:47:1e:ec:70:f0:69:45:99:b0:
8f:a0:8d:66:76:d3:e1:39:38:e7:34:6f:14:e4:07:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:A1:5E:7F:C0:8C:CA:48:74:58:BE:A7:08:EF:9F:4C:62:DF:4A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n4-hXn_AjMpIdFi-pwjvn0xi30o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:5c:c0:b5:c3:56:48:72:2b:60:90:b7:92:45:19:64:a7:cd:
d3:83:6f:69:5b:e8:51:11:21:0f:7a:0c:38:ad:4d:2c:50:03:
08:de:95:ef:ae:a1:05:78:4c:24:0b:e9:90:0f:f8:fe:28:d6:
35:10:f7:ea:72:a2:3f:60:28:19:28:d1:c3:84:b5:f6:30:5c:
33:62:5a:67:92:8e:c5:e8:41:5a:64:91:dc:d7:60:74:26:15:
80:67:f3:bb:3a:a0:ce:55:85:e8:f4:26:75:e6:16:37:df:c3:
50:88:6e:61:36:0d:dd:c4:93:75:5f:73:f4:6e:61:6a:67:58:
8a:f8:27:55:b6:b2:3c:e4:ee:65:7d:6b:48:5b:f0:af:4a:5f:
3c:d6:85:c4:00:8a:ad:da:85:ba:b5:c1:d6:18:e2:99:92:49:
b0:fa:22:6c:35:f6:f9:55:f3:02:af:e7:e8:40:db:c8:59:fa:
43:31:b6:97:98:dd:90:6d:45:50:bb:8f:78:ac:20:03:e6:79:
6f:bd:3c:b2:23:f5:4f:ec:8c:bd:e9:31:f8:aa:10:19:f8:db:
d4:21:dc:76:a9:0d:74:c6:41:43:51:24:07:df:ea:6a:c1:11:
40:00:16:95:24:9e:2d:53:8d:6d:a9:38:15:62:9c:fa:47:d1:
f9:6f:bb:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqIBWcr+qGd/jXhS7Fsl9oUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEyMDYxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjhmYTE1ZTdmYzA4Y2NhNDg3NDU4YmVhNzA4ZWY5ZjRjNjJkZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs04p4Q2BNp0Y/7CaAW9qRlvQLwd0
ioRNoYZf5e6MY4njWraOQE4Z20sli1eDNQRCMK9q/VZkwM6Vprj4LujhtpyzCbap
EWASVB6Bn7dv/9g10f+gxMY/EAAFj6cRU7HfVCuMGInO/OpkBo1HiNsUfVCIpB3C
vO8LlYEU9f4SPovfPb6uw45VBp3bwQcHpbZ7b6Zdf8R3pTQdTFCO0hCsA7dc+5FU
FvynpzSk4yCkg3f1tnFgbh18az3BPr9fCMFaEInj696NKcqdr2+dzaTrvdUiUFK7
zBPNo1dX3OvqKGTFhPPX4iNHHuxw8GlFmbCPoI1mdtPhOTjnNG8U5AdTPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ+PoV5/wIzKSHRYvqcI759MYt9KMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvbjQtaFhuX0FqTXBJZEZpLXB3anZuMHhpMzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKFcwLXDVkhyK2CQt5JF
GWSnzdODb2lb6FERIQ96DDitTSxQAwjele+uoQV4TCQL6ZAP+P4o1jUQ9+pyoj9g
KBko0cOEtfYwXDNiWmeSjsXoQVpkkdzXYHQmFYBn87s6oM5Vhej0JnXmFjffw1CI
bmE2Dd3Ek3Vfc/RuYWpnWIr4J1W2sjzk7mV9a0hb8K9KXzzWhcQAiq3ahbq1wdYY
4pmSSbD6Imw19vlV8wKv5+hA28hZ+kMxtpeY3ZBtRVC7j3isIAPmeW+9PLIj9U/s
jL3pMfiqEBn429Qh3HapDXTGQUNRJAff6mrBEUAAFpUkni1TjW2pOBVinPpH0flv
u54=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:20 2025 by rpki-client