Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/oPwGEeEsk7X8Gr0824ANo5JGXg8.roa
File: oPwGEeEsk7X8Gr0824ANo5JGXg8.roa (raw, json)
Hash identifier: jZxzIeFv/8RNHhE08i69gozUp2SHesXzTl5DK7trkqU=
Subject key identifier: A0:FC:06:11:E1:2C:93:B5:FC:1A:BD:3C:DB:80:0D:A3:92:46:5E:0F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAC418748AF082C68CDC7B36CA88DAB31
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/oPwGEeEsk7X8Gr0824ANo5JGXg8.roa
Signing time: Tue 19 Sep 2023 07:04:50 +0000
ROA not before: Tue 19 Sep 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:ac41:da9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:41:87:48:af:08:2c:68:cd:c7:b3:6c:a8:8d:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0fc0611e12c93b5fc1abd3cdb800da392465e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:ae:48:ef:8d:11:90:a8:29:db:36:ab:cd:
20:77:69:d0:72:46:a4:ea:04:ee:02:58:91:f5:fb:
3c:e5:31:6e:93:6f:7f:9f:d2:0f:07:95:90:5a:43:
f2:db:53:ec:14:a1:ba:53:cb:62:6e:85:29:76:f0:
b4:f9:07:63:c5:80:10:9b:24:db:e7:b3:bf:7d:99:
ff:eb:61:8d:96:eb:b0:41:bc:ee:e3:55:02:a3:dd:
5f:aa:0c:00:2a:5e:4d:a1:a5:80:f3:5f:72:b5:4b:
30:39:c1:63:de:e0:f3:79:d4:33:14:b3:a0:0f:34:
52:2f:32:12:8a:63:75:fa:48:2e:dc:94:ba:61:ae:
a5:00:b7:c5:21:29:d1:8e:b1:12:50:f4:78:af:dd:
48:89:7b:47:b2:43:fb:3e:92:40:0c:ae:66:ec:ee:
2c:d1:fb:cd:eb:9b:0b:04:97:5e:a4:59:35:f5:e1:
63:17:18:3e:df:6d:cd:1b:15:30:6f:f8:a3:c9:80:
c2:16:69:18:3d:9d:57:e0:cf:b6:2c:76:63:a1:50:
df:f3:68:62:65:d8:20:c7:af:d7:a4:82:e5:04:ad:
b8:06:4e:5c:49:87:44:a2:a6:74:3c:6f:ff:e6:97:
f4:ad:1b:13:03:49:19:5f:89:1c:49:c2:e4:a2:52:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:06:11:E1:2C:93:B5:FC:1A:BD:3C:DB:80:0D:A3:92:46:5E:0F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/oPwGEeEsk7X8Gr0824ANo5JGXg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:3d:19:2c:ae:81:16:65:d6:cb:07:07:6b:8d:44:d9:8a:1e:
7e:2b:4f:d0:1d:0e:3f:22:1b:d7:08:a3:76:ec:f8:60:db:c7:
ca:b7:44:c8:5c:1c:30:57:b7:1a:5f:7e:1f:f0:f7:cd:4f:e6:
9a:6e:29:f8:e3:3b:0c:0f:b4:3b:58:fd:c0:a1:c1:3b:f5:56:
6e:9e:b6:48:f8:8c:11:62:8e:c1:be:17:80:71:7e:72:f7:72:
db:20:b5:4f:ee:d0:e6:98:d8:ef:3c:27:0f:a1:f4:f5:94:2b:
72:19:21:57:57:11:8c:a1:2c:e9:1f:e4:9e:fb:9b:fe:38:84:
7d:ee:fe:34:2a:aa:b7:a2:e5:2c:cb:b6:59:3a:a9:6e:1e:29:
21:16:06:6a:43:da:42:a2:3f:d6:83:31:ec:9f:12:a6:b6:a4:
52:17:71:c9:61:73:23:e9:e1:d0:bd:e0:77:fb:f2:4c:18:4f:
c5:22:d2:ed:e8:48:fc:be:84:5c:78:95:89:6a:4b:0a:ca:63:
3e:0d:b8:9b:da:d7:7b:06:ac:42:9b:e5:30:85:bd:cc:01:a1:
71:3a:d3:63:af:40:c1:87:83:3b:a8:bf:8a:a5:8c:26:a1:61:
73:59:95:ef:03:f5:79:5a:64:a3:10:ca:b3:d6:68:2b:0a:60:
5b:d5:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:37 2025 by rpki-client