Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/puFAdjlPeWCumshDIJHA3FeJJhk.roa
File: puFAdjlPeWCumshDIJHA3FeJJhk.roa (raw, json)
Hash identifier: aLszrsYt9Q0ilrswMvbcqEIZ5NovR4SPWitD3GR/XTc=
Subject key identifier: A6:E1:40:76:39:4F:79:60:AE:9A:C8:43:20:91:C0:DC:57:89:26:19
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA9EE6F3E821C54EEF482412593A3B30B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/puFAdjlPeWCumshDIJHA3FeJJhk.roa
Signing time: Mon 18 Sep 2023 20:14:50 +0000
ROA not before: Mon 18 Sep 2023 20:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:ee:6f:3e:82:1c:54:ee:f4:82:41:25:93:a3:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 20:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e14076394f7960ae9ac8432091c0dc57892619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:90:d3:a4:82:05:f5:1a:e4:20:80:34:83:
cb:0d:98:47:35:13:dd:78:16:87:5c:9b:e3:fc:5e:
51:18:8e:79:c2:3a:02:59:70:0e:fd:68:0a:c9:95:
4f:5e:24:2d:13:86:07:b3:71:eb:8f:ee:ab:e3:23:
fb:85:ee:0a:11:16:b7:51:14:04:f2:e7:4c:12:b7:
12:31:e5:b2:56:a9:32:8f:e1:9c:0c:dd:c3:82:95:
79:13:ff:f1:75:9c:ef:1b:f8:65:57:c0:52:e4:12:
87:01:d6:7a:35:10:7a:e7:95:68:8b:08:f5:0c:b7:
13:06:18:7a:5e:50:99:67:d1:b1:13:cf:d5:df:d4:
99:71:5b:a4:c5:f9:be:b6:c5:63:a7:29:0f:96:7c:
b1:20:ea:63:7d:e2:1e:48:a1:64:f1:a5:aa:6b:8e:
e7:e5:47:fe:84:56:b3:4c:a0:81:15:67:d5:b0:f5:
f3:68:00:81:cf:da:d5:35:27:b5:84:83:4f:66:06:
be:9f:a3:10:f8:34:2f:63:7a:a0:9d:fe:d7:e1:8a:
50:a5:92:54:5a:b0:8d:5b:68:49:a9:7d:db:ab:2b:
f5:cf:48:06:b9:70:30:e7:9c:d0:d0:f2:1e:07:6f:
68:d1:2f:f1:86:f6:15:9d:3e:66:63:aa:ef:5b:d6:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:40:76:39:4F:79:60:AE:9A:C8:43:20:91:C0:DC:57:89:26:19
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/puFAdjlPeWCumshDIJHA3FeJJhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:4b:fb:53:77:bb:aa:ef:57:0f:0e:00:5e:7b:8a:37:5d:37:
12:8c:b3:ff:21:7e:84:de:28:06:31:4a:6a:70:a4:2f:7c:e4:
b6:89:6b:e2:de:2d:88:33:24:52:d2:af:aa:72:7a:79:99:b1:
df:14:77:92:ab:c9:5f:c7:52:4b:55:93:dc:27:a6:ea:a0:59:
c7:ab:e7:f5:b6:99:aa:f6:fd:c4:ab:de:b4:cc:f7:c2:98:77:
5e:41:ad:5a:7e:be:b9:06:87:8a:38:c6:27:52:cb:42:65:01:
2e:ba:bd:99:38:85:ed:2b:44:eb:dc:cd:56:5b:6e:ba:ca:6a:
ae:18:30:90:fc:92:86:78:a9:1e:8f:80:4b:9f:ed:74:7a:a6:
53:82:27:1f:9b:45:c8:f2:75:74:bd:e3:f1:42:ec:88:72:32:
53:e5:02:d1:64:4e:9d:3a:8a:29:a3:f3:a2:71:1b:66:4a:fc:
17:eb:02:2c:41:d4:05:70:15:3c:ae:9e:dd:80:63:58:50:53:
f5:78:9a:6f:6b:cc:0d:81:c9:22:db:56:02:7a:d4:a5:05:ba:
e1:a0:14:43:45:05:38:45:98:ba:ac:29:c0:1d:cf:57:6a:5e:
ff:f2:2f:d3:89:92:7b:93:6c:a9:60:9e:34:c8:e3:a3:8b:b8:
2a:04:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:32 2025 by rpki-client