Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qYrVniMqXvovMNciRxK5bGoxGmU.roa
File: qYrVniMqXvovMNciRxK5bGoxGmU.roa (raw, json)
Hash identifier: rGqQQ7Rf4VRJUCrsQbRdXeMfQjLww1IT+xEbFSedats=
Subject key identifier: A9:8A:D5:9E:23:2A:5E:FA:2F:30:D7:22:47:12:B9:6C:6A:31:1A:65
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A977129324D8A4578792B4724FA390602
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qYrVniMqXvovMNciRxK5bGoxGmU.roa
Signing time: Fri 15 Sep 2023 06:04:50 +0000
ROA not before: Fri 15 Sep 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:9770:dfbb/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:71:29:32:4d:8a:45:78:79:2b:47:24:fa:39:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a98ad59e232a5efa2f30d7224712b96c6a311a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:f3:bd:78:e3:70:0b:ec:a8:fd:4f:d0:86:
7d:48:05:9b:36:70:05:34:f6:87:22:00:42:98:f8:
59:71:2c:d7:96:0a:fa:e2:73:cc:22:c1:2f:ac:7a:
82:ec:c8:e8:e5:fe:1f:de:1c:06:d7:54:7c:40:2c:
5c:ae:a4:af:1a:3a:c1:af:8f:ac:94:13:8c:bb:91:
15:1a:18:9b:a6:84:44:3d:39:b8:02:ec:01:25:47:
67:93:4e:21:50:e9:76:fb:b8:d9:da:b5:01:73:a0:
5e:57:1a:59:d2:28:3b:e3:e4:c7:93:75:ff:6a:60:
4d:4f:13:c7:45:72:12:72:42:0c:e6:b4:07:7a:68:
3b:c0:6c:b8:96:9c:a9:c4:97:1c:23:22:e2:a6:2b:
c6:c4:1c:d9:4a:9d:f4:27:49:21:4f:27:68:2c:a2:
2c:40:7b:32:13:49:67:4a:e0:b3:23:38:07:21:73:
ea:23:af:47:b4:3d:ca:c4:f3:0e:63:82:66:9e:d1:
51:22:af:2e:30:2c:15:d0:08:0f:57:9e:06:a5:f6:
a5:d1:b7:22:44:6d:70:b2:ea:a6:59:87:bd:89:c9:
78:fe:a6:93:db:75:42:1a:18:2b:22:70:39:41:5d:
3a:bc:dd:8d:81:63:dc:f8:1a:11:20:3d:b2:da:8e:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:D5:9E:23:2A:5E:FA:2F:30:D7:22:47:12:B9:6C:6A:31:1A:65
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qYrVniMqXvovMNciRxK5bGoxGmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:09:67:d9:e4:86:3a:3b:5d:41:30:c9:c0:8e:8f:65:77:b4:
53:3d:9f:d5:cc:7a:c6:56:6b:bb:8a:8b:59:9a:ed:b6:f2:a2:
13:55:f5:21:18:04:fd:1d:d9:38:0b:1f:fd:ac:47:11:d5:7a:
7c:04:b5:63:b8:46:55:79:0f:a3:14:78:42:99:0e:b8:9c:a4:
4c:8b:6f:b8:41:2d:96:a7:60:bc:50:7b:6f:9b:73:5b:71:b2:
42:dd:2e:23:d2:22:d0:3d:85:7b:78:7c:36:85:58:50:9c:d2:
c1:57:a5:5f:df:91:d5:3c:91:f6:b4:b2:d4:9c:d5:4e:4d:6c:
ae:29:ac:61:86:60:80:b4:a8:99:de:7f:a0:cd:7c:59:e1:b7:
02:13:86:a4:2a:a7:59:06:73:61:67:d5:25:d4:97:77:33:82:
96:8d:79:0b:f8:ed:f3:9f:b2:46:59:ed:52:e7:27:77:36:be:
b4:9e:59:ea:fd:f2:0c:fe:69:7a:cc:2e:ff:67:52:d1:69:d0:
85:66:10:48:4b:d7:0a:37:5d:22:fd:02:e9:9c:11:e8:f9:a7:
88:fb:1e:5c:c0:05:99:a4:73:5d:fd:6c:e6:57:b4:3c:4b:3d:
7c:ac:c0:20:fc:ff:60:cc:c1:6a:60:ed:41:a8:90:59:d8:75:
f6:f5:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:52 2025 by rpki-client