Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n5gcFz4ZEYh328780i8zVdyr6Rk.roa
File: n5gcFz4ZEYh328780i8zVdyr6Rk.roa (raw, json)
Hash identifier: mCfmiScKu2uw9tlHdtAhZnK4sqAiYy7QKlp0z3KpsOQ=
Subject key identifier: 9F:98:1C:17:3E:19:11:88:77:DB:CE:FC:D2:2F:33:55:DC:AB:E9:19
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9CD6B0023935CE6FB614F780446A45D5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n5gcFz4ZEYh328780i8zVdyr6Rk.roa
Signing time: Sat 16 Sep 2023 07:13:50 +0000
ROA not before: Sat 16 Sep 2023 07:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:d6:b0:02:39:35:ce:6f:b6:14:f7:80:44:6a:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 07:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f981c173e19118877dbcefcd22f3355dcabe919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:99:dd:f5:46:40:7c:3a:08:75:3b:ea:c4:
a1:02:84:d7:90:0b:d5:7a:c6:16:44:65:01:9f:4a:
3d:e0:e1:0b:bf:6d:94:1c:f3:7c:0e:ad:3b:7a:6d:
59:e0:ac:4e:92:2a:44:9e:68:65:0d:11:ce:c2:a0:
05:fa:66:d7:bb:21:51:98:dc:d9:01:6a:db:0f:bb:
2a:27:5b:10:35:f3:24:18:53:f6:5d:4e:97:cf:19:
54:1d:18:57:2c:1f:b6:cf:d7:84:48:b1:e5:4b:d2:
e5:b2:ef:93:51:d6:65:43:b4:ef:c0:2c:de:e3:7c:
c2:a9:8f:e6:63:4f:9d:23:da:53:93:d9:d8:b4:2d:
7e:c3:a9:51:d8:dc:3b:42:66:3b:aa:b3:77:5f:e1:
40:bb:b1:22:26:5f:64:90:6d:c6:64:d3:98:23:15:
59:63:1f:cd:0b:58:4c:67:64:8d:1e:05:fd:bb:6b:
8a:ac:48:13:c0:78:b0:f9:40:db:ff:ad:12:81:24:
93:0b:e7:68:76:74:1e:d8:ef:7c:cb:ed:b6:4f:33:
d1:f4:e4:dc:e7:0f:f7:3c:c2:d0:07:a4:38:80:e4:
e8:c4:9c:ad:22:d9:9c:74:d8:c5:fc:12:1f:71:42:
f8:27:88:85:76:18:79:c0:a0:3c:9d:6e:2c:65:0e:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:1C:17:3E:19:11:88:77:DB:CE:FC:D2:2F:33:55:DC:AB:E9:19
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/n5gcFz4ZEYh328780i8zVdyr6Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:61:af:f2:f6:7b:95:cd:21:6d:85:e9:4d:da:ee:59:3d:18:
b2:52:4e:9a:34:23:a7:bc:e3:18:c9:05:48:fa:83:31:ef:1c:
df:48:02:f7:b6:f0:a1:5d:20:77:93:04:51:17:5f:7c:bb:41:
07:e2:5c:fe:64:35:90:cf:7e:04:e9:77:7b:a3:10:c7:4e:39:
72:3e:43:d2:5f:94:b9:0c:89:73:a0:85:52:63:6b:88:42:82:
25:be:6f:9f:e8:0c:d9:aa:a0:a3:7b:2b:2f:da:6e:0a:79:3b:
6a:3c:87:4e:c1:4d:56:cc:b0:95:a5:18:8e:fd:6c:b6:b6:4f:
38:8c:d5:c5:87:df:3f:d9:db:8d:2c:4d:93:1c:0f:c6:69:78:
6d:b2:19:b5:e4:08:e3:8e:b3:e4:a2:06:94:a8:99:38:5e:5e:
cc:1a:86:aa:5d:6b:c0:f4:d3:d7:26:9b:37:7b:65:a1:8d:9b:
f7:b3:f4:c5:a0:27:ec:cf:a5:c7:d7:3a:9b:42:5b:14:ab:37:
1c:51:52:75:af:b1:56:01:51:49:c0:69:63:58:64:d0:16:b1:
5c:eb:68:b2:b4:3b:20:0f:a1:b8:d5:bb:2b:4f:09:f6:3e:aa:
8b:bc:c5:fe:c0:2a:91:5f:d2:0a:2d:d3:14:27:ed:56:27:69:
fd:31:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:11 2025 by rpki-client