Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pY-PqYqrmN1716CdIb8c7QCscno.roa
File: pY-PqYqrmN1716CdIb8c7QCscno.roa (raw, json)
Hash identifier: wb8Ql3YwW0lHRKIab9+TH9GV1HAepmt51YsUvweAacU=
Subject key identifier: A5:8F:8F:A9:8A:AB:98:DD:7B:D7:A0:9D:21:BF:1C:ED:00:AC:72:7A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6AA1A9AB3CE764EE55B3BFB4A7CE2747
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pY-PqYqrmN1716CdIb8c7QCscno.roa
Signing time: Wed 06 Sep 2023 13:14:54 +0000
ROA not before: Wed 06 Sep 2023 13:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:a1:a9:ab:3c:e7:64:ee:55:b3:bf:b4:a7:ce:27:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 13:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a58f8fa98aab98dd7bd7a09d21bf1ced00ac727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:01:03:67:60:55:44:34:83:9c:30:01:a1:
88:ff:f2:0e:41:92:c6:c9:09:a0:00:cd:24:b9:6a:
b7:e0:25:8c:6e:13:2f:e5:d8:7a:2b:c7:18:a4:58:
83:47:5d:58:01:6c:1d:7b:4e:94:e0:c3:d8:39:0d:
4f:0f:39:52:a1:cd:a9:49:c8:9d:40:35:c3:71:92:
37:05:1f:e1:ee:24:1d:68:f3:a0:69:93:15:45:ff:
c1:2d:bc:b1:2c:6b:ba:b7:f9:7d:c8:5a:90:fd:fe:
d4:6f:07:64:08:44:06:9a:08:ee:af:18:01:7b:96:
a9:50:99:3d:01:8c:1b:89:39:6a:90:19:ee:d3:87:
03:b7:02:36:4f:c2:7c:29:f9:c8:df:56:33:40:80:
a6:f0:62:33:9f:b2:d5:6d:9e:44:0d:16:22:7c:58:
33:8c:c3:d4:a6:1c:f9:b2:c1:4b:0b:cf:6d:68:79:
fe:35:80:a9:08:9f:69:6a:40:fb:c4:3f:97:d7:76:
45:60:fc:01:c1:aa:f2:92:24:79:88:ce:b1:85:28:
25:09:cd:6d:5e:a2:55:43:c8:48:91:01:d6:7a:33:
cc:72:9b:4f:d8:e9:e8:8f:4f:1b:0e:4f:b8:53:8f:
ef:5e:1a:72:58:e5:8c:41:e5:c9:cd:d7:3c:c5:e9:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:8F:A9:8A:AB:98:DD:7B:D7:A0:9D:21:BF:1C:ED:00:AC:72:7A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pY-PqYqrmN1716CdIb8c7QCscno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:57:e7:e5:1a:cf:7a:e8:88:6c:a3:de:06:06:98:e4:6c:7f:
90:03:0f:5d:ca:33:cc:d6:f6:9c:14:0e:68:6e:d0:a2:14:24:
69:10:bc:cb:8d:71:01:55:7f:cd:6d:00:6d:8f:5a:56:ca:91:
02:27:e8:67:6b:27:50:0a:ee:4e:ad:25:74:1a:7b:ed:16:4f:
50:31:d1:c1:17:ba:b3:73:da:e5:5a:57:92:bf:ef:35:b1:61:
6d:f7:65:3f:7c:3d:26:69:9f:7d:18:67:98:bb:1e:f2:94:37:
40:62:0e:5d:9d:bb:ee:67:c8:0d:e8:e7:43:5d:12:e2:c2:1c:
7c:0e:03:d2:10:64:5a:ce:ca:d3:d1:d3:bd:02:60:24:0c:5a:
44:d1:3c:c1:6e:76:4e:b7:c8:01:cb:f6:ff:22:bb:23:27:d5:
7a:bb:8c:b1:a4:59:db:34:68:d0:92:7a:de:f4:49:bb:9e:d0:
26:99:cd:b0:6e:75:0b:92:b5:20:2b:0b:7d:c1:81:69:ae:9a:
ff:89:98:d8:35:fe:ba:61:6b:c5:79:b9:87:0a:bd:7e:f9:b3:
79:12:d8:d2:30:c6:5b:9c:55:57:76:12:e2:5e:5b:8f:c4:0e:
94:e7:09:e0:f1:8c:4e:69:20:8c:0e:bf:fd:6c:10:e5:1d:54:
97:5e:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:22 2025 by rpki-client