Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nLW3y89EhtniHR6pZ3kLUVnX0C4.roa
File: nLW3y89EhtniHR6pZ3kLUVnX0C4.roa (raw, json)
Hash identifier: XEamG51xDpwcA1D8yFgL0IosNnYiVoLT5H4yP/H8IVk=
Subject key identifier: 9C:B5:B7:CB:CF:44:86:D9:E2:1D:1E:A9:67:79:0B:51:59:D7:D0:2E
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A69F39DE4CD2F01A80252CE54DCB5C24E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nLW3y89EhtniHR6pZ3kLUVnX0C4.roa
Signing time: Wed 06 Sep 2023 10:04:47 +0000
ROA not before: Wed 06 Sep 2023 10:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:69f3:86b8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:f3:9d:e4:cd:2f:01:a8:02:52:ce:54:dc:b5:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 10:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cb5b7cbcf4486d9e21d1ea967790b5159d7d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:91:ac:4e:eb:c8:b9:57:7c:b7:1c:2c:8d:
d8:dc:57:5a:e2:89:1e:9d:4b:06:84:1a:af:d2:cf:
90:cc:3d:f1:c3:67:b2:74:e4:12:2e:38:a6:3d:91:
55:fb:1b:67:03:b3:e1:73:fd:32:7e:f4:ba:6c:f7:
8e:42:d9:35:57:3e:36:17:46:90:6c:72:f9:94:0d:
0d:db:f3:02:a6:01:af:55:77:40:7a:ff:83:ec:96:
c2:ab:71:a7:34:54:31:1a:77:4b:39:12:89:37:ae:
39:18:ac:a5:cf:16:0f:0a:63:cf:06:67:58:6b:07:
80:13:97:c1:d0:13:5b:4a:d7:d1:f4:4f:d3:88:54:
e5:86:64:f4:3f:cd:fe:0a:9b:42:a6:99:17:20:3e:
6e:49:b2:b0:c6:43:38:18:3e:9f:76:b9:06:6f:54:
51:3c:f0:bb:01:5e:0f:46:e8:24:7e:84:64:91:01:
25:0e:03:a4:cf:ca:58:1c:7d:31:8d:c8:8d:1c:d7:
f6:33:9e:21:b8:43:7d:e2:85:54:60:23:1c:a7:0c:
b3:6e:96:b6:7d:01:e2:2c:60:06:15:94:fd:e9:38:
a2:12:13:05:92:f0:c7:bb:cb:32:db:05:bc:37:1d:
fc:29:ce:c9:84:af:b9:73:89:23:d2:14:a8:db:e0:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B5:B7:CB:CF:44:86:D9:E2:1D:1E:A9:67:79:0B:51:59:D7:D0:2E
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nLW3y89EhtniHR6pZ3kLUVnX0C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:36:e3:db:ca:cb:2c:8a:0f:20:87:6b:5d:8a:eb:af:be:c1:
a1:f9:ef:4c:da:e0:6e:ac:14:f8:77:3a:c1:1f:d4:c2:c4:06:
18:1a:9b:c1:04:2f:dd:4d:93:84:24:b4:98:ad:68:6f:92:ed:
aa:64:da:6e:8a:ea:05:9b:1e:38:6b:cd:bc:bb:1b:4e:38:ad:
88:41:99:b5:b7:f8:30:b5:01:fa:7f:35:e4:65:a0:af:d0:9b:
43:fa:c1:93:76:b9:46:33:35:af:e5:da:ec:95:0b:21:28:30:
e0:6e:c2:fd:ca:c8:59:e0:c2:c4:08:d1:b8:d3:59:ae:9f:cc:
a7:70:61:45:07:40:16:83:3c:4f:37:34:9d:5d:4a:7d:5a:0e:
27:b4:75:92:58:45:c1:05:e9:86:68:55:4e:4e:d9:00:d8:ba:
1e:e0:f0:d7:4c:b1:a4:b1:54:c9:24:52:be:81:cf:23:84:fd:
5d:e8:d8:8d:70:93:22:07:0f:b5:e8:f0:cc:bd:2f:c6:61:b3:
dc:16:e7:0b:92:04:be:4f:bf:68:5f:f1:9f:78:84:f6:ed:88:
6a:31:f5:71:7e:d5:06:57:72:ab:18:b8:ba:0c:e8:30:41:e6:
a4:ca:a1:64:e7:bf:86:b1:e4:11:91:fe:47:2c:af:01:1a:f8:
b9:61:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:20:23 2025 by rpki-client