Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/r975aU5US3qzs0w-JZ7k9Wr-dus.roa
File: r975aU5US3qzs0w-JZ7k9Wr-dus.roa (raw, json)
Hash identifier: tJxi1Uo3OatcUgAGXlzO9/qksPsnCYvvEwWFqcUqqO0=
Subject key identifier: AF:DE:F9:69:4E:54:4B:7A:B3:B3:4C:3E:25:9E:E4:F5:6A:FE:76:EB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A883502FDD644B18003E9EA53F8388B3E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/r975aU5US3qzs0w-JZ7k9Wr-dus.roa
Signing time: Tue 12 Sep 2023 07:04:50 +0000
ROA not before: Tue 12 Sep 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:8834:6f89/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:35:02:fd:d6:44:b1:80:03:e9:ea:53:f8:38:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afdef9694e544b7ab3b34c3e259ee4f56afe76eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:f2:86:73:aa:6e:b9:0c:ec:e2:3b:a9:b0:
ae:6b:29:05:e0:94:9a:61:00:e5:bb:d2:5e:15:ac:
97:d6:48:7a:4b:17:d4:78:78:96:a7:5f:26:b8:e2:
f4:74:fa:ba:8f:2a:64:c5:33:b2:fe:2d:20:7a:9f:
ad:a6:6a:f8:2b:df:ad:7b:40:93:4b:df:0b:96:f1:
e0:b9:78:88:ab:35:b0:44:84:7d:8c:9c:91:2c:ed:
fc:a5:90:65:55:67:9f:f1:42:8b:fd:a9:ec:df:ef:
4c:5c:f6:66:b5:98:f2:16:a8:97:c8:ad:b1:b7:bc:
eb:b0:3f:92:b3:e2:25:29:21:cb:6d:30:7d:18:ac:
57:46:c7:98:d1:de:fe:04:eb:c4:53:3e:af:4c:79:
76:d3:5b:ed:e1:98:39:56:0c:53:49:5a:64:ce:da:
da:fd:2c:70:7b:07:3c:0c:3e:49:fd:6e:7b:e7:0d:
20:f6:fe:af:67:53:3e:c6:8d:39:bb:5c:72:c3:95:
70:08:7a:3c:53:47:9c:ac:8f:b1:84:88:46:a6:2b:
a8:cc:87:5e:ae:72:1b:99:73:8e:59:2b:e5:25:3d:
17:49:f6:49:64:a2:dd:c8:57:8d:b3:5d:dc:59:1e:
e4:99:31:2e:94:86:d0:fb:70:4a:30:49:8c:3e:f6:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:F9:69:4E:54:4B:7A:B3:B3:4C:3E:25:9E:E4:F5:6A:FE:76:EB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/r975aU5US3qzs0w-JZ7k9Wr-dus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:3a:09:e6:4b:d9:3b:37:91:0f:ea:cf:5b:b5:b5:e9:47:17:
c4:0a:61:e7:66:80:61:ea:ca:c5:70:ba:66:8d:47:c7:e5:cb:
ab:31:86:0c:72:cf:f6:3c:61:51:c1:9c:02:a2:a7:ac:cd:7a:
e2:11:00:85:91:53:82:1e:be:f5:51:21:aa:d6:e6:a3:b5:84:
5f:c0:40:f0:6b:08:66:d2:c9:54:97:e7:04:26:d6:e4:5f:13:
2c:ca:26:7a:e1:7c:73:77:a4:95:23:d7:57:8a:b9:30:1c:d7:
38:29:82:67:9e:01:98:43:c5:a4:32:1a:f7:6c:09:19:87:12:
c9:4a:f1:0b:c3:ad:c2:07:f5:42:2c:31:d9:68:8a:a6:2c:13:
0b:91:ff:ef:25:d7:c9:9f:3b:99:50:d0:2a:8d:64:b8:cc:8f:
c1:51:f7:ee:91:bd:da:43:b5:62:d6:94:04:bb:32:7e:94:74:
d7:2b:e9:8f:ff:f9:3b:78:4c:51:3c:6e:bd:4c:b1:55:1c:27:
85:06:4d:ae:cd:b1:ac:16:7e:b9:07:76:2a:57:8e:6c:94:d9:
32:7d:3d:2a:fc:62:a8:43:b1:89:90:3b:b1:63:b1:14:24:a3:
0a:72:32:db:81:06:3f:c4:ef:a5:a9:22:08:14:a4:68:0d:3f:
45:bd:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:35:48 2025 by rpki-client