Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pdeVQEEY0dESrz1E7E22TS_l528.roa
File: pdeVQEEY0dESrz1E7E22TS_l528.roa (raw, json)
Hash identifier: LdwuQoeVn2uDBgIm6E9kWQNLxboe8qu8jE21jyURW6U=
Subject key identifier: A5:D7:95:40:41:18:D1:D1:12:AF:3D:44:EC:4D:B6:4D:2F:E5:E7:6F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA97FA7FAC90CF949BC3DBBCC12113F21
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pdeVQEEY0dESrz1E7E22TS_l528.roa
Signing time: Mon 18 Sep 2023 18:13:50 +0000
ROA not before: Mon 18 Sep 2023 18:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:7f:a7:fa:c9:0c:f9:49:bc:3d:bb:cc:12:11:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 18:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5d795404118d1d112af3d44ec4db64d2fe5e76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:ac:96:5e:f5:9f:47:69:f9:bb:ed:52:e2:
97:b9:0f:88:00:3b:fb:cc:3f:95:6b:26:0a:2a:bf:
0a:f8:a6:6d:fe:fe:bc:32:24:20:81:21:f2:7d:f2:
be:3c:46:40:1b:5a:54:88:e0:56:2c:81:93:5b:35:
b5:eb:8a:6f:39:1c:27:90:f5:36:40:42:e2:a3:19:
a2:60:33:53:69:62:2e:c4:5d:e0:87:51:be:73:7a:
dd:7b:84:2c:f4:13:c5:34:53:5a:1f:a0:c8:8e:7a:
d3:95:b4:f2:e4:0c:d8:85:3b:e4:61:c6:37:3a:40:
88:b2:a4:d7:85:1d:d0:de:ce:25:41:63:19:84:96:
64:c6:be:30:8d:ee:b6:47:21:d6:70:fb:13:c1:33:
dd:14:a0:79:da:74:ba:5d:d7:e2:81:7d:73:a5:b5:
2f:81:d2:88:9d:e3:73:4c:09:09:65:d8:61:9e:16:
79:af:bd:6d:24:b5:72:c8:64:07:96:23:0a:8b:b3:
75:c8:78:20:72:ac:f1:f2:93:d1:9a:32:a8:f7:62:
c3:f0:39:3b:b7:21:d0:c3:df:00:e1:86:f3:da:c1:
f9:f2:cd:8f:68:0a:8e:f6:c5:e9:72:cd:2d:95:ee:
9a:91:60:51:ce:52:9c:93:a7:17:ef:df:da:ef:80:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:95:40:41:18:D1:D1:12:AF:3D:44:EC:4D:B6:4D:2F:E5:E7:6F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pdeVQEEY0dESrz1E7E22TS_l528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:97:ef:68:e8:f6:2c:db:57:fc:c7:27:4c:2e:61:85:34:25:
f7:f8:6f:9b:a8:39:57:a1:5d:f4:91:94:07:a7:e6:a3:33:68:
f0:e5:ea:b1:29:a4:01:be:f2:dd:65:5b:93:94:01:84:d0:9a:
54:e4:64:5a:10:6c:ab:32:5e:6a:c3:ab:95:4b:cc:26:69:e5:
c1:0c:5a:fb:80:68:97:c1:59:70:b1:67:65:35:01:d7:3e:cc:
b0:b6:d5:2f:6d:13:77:65:7a:64:dd:91:ac:07:ba:1f:12:11:
a3:6e:d2:df:01:f1:e9:67:0f:f4:36:ef:92:c5:ec:20:4b:7c:
92:a3:2a:52:a3:01:b6:fb:ec:87:85:4e:51:0c:7b:f0:c3:46:
54:3d:69:0c:f1:ee:ff:0c:c6:d2:f5:9f:67:d2:ee:ef:cf:80:
71:f2:e1:7e:64:96:65:13:ab:f1:d1:5b:70:76:c4:c7:83:5c:
d2:e4:ac:bf:49:74:01:c1:13:d5:62:ce:51:a2:49:8c:96:6e:
74:fd:6f:6a:cc:44:62:42:bf:28:6a:a5:22:f7:5f:2c:e2:8b:
5e:b3:bb:db:ea:38:c7:ca:ad:a5:0c:2f:08:90:4d:3f:1f:01:
b5:59:84:d4:83:b6:ad:6f:14:6d:c5:9c:5c:9f:87:8e:a8:67:
81:23:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:31 2025 by rpki-client