Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rTn7yrxylKeoZGXpAVXBTtYaFYs.roa
File: rTn7yrxylKeoZGXpAVXBTtYaFYs.roa (raw, json)
Hash identifier: zVWzEp+PI4vDuQg6+RvhcDXBQZPcsdy1ilyKHMaLVjM=
Subject key identifier: AD:39:FB:CA:BC:72:94:A7:A8:64:65:E9:01:55:C1:4E:D6:1A:15:8B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A752374469C506944063528D0A36886F6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rTn7yrxylKeoZGXpAVXBTtYaFYs.roa
Signing time: Fri 08 Sep 2023 14:12:52 +0000
ROA not before: Fri 08 Sep 2023 14:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:23:74:46:9c:50:69:44:06:35:28:d0:a3:68:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 14:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad39fbcabc7294a7a86465e90155c14ed61a158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:6e:ff:27:ba:a7:27:29:d6:12:14:6d:43:
24:d6:69:64:e0:0e:a2:e3:4c:40:f1:ea:63:d7:8b:
69:79:34:5f:40:b9:e6:a4:8c:97:e1:04:0c:9c:24:
10:46:a7:e0:ad:47:c6:a4:04:0f:a2:63:13:ce:86:
bd:77:58:82:fb:13:bc:f3:53:ad:12:73:5f:e8:81:
0e:59:d6:7f:69:e4:80:dd:8a:c0:6c:86:37:29:88:
fb:91:9a:5e:e8:46:d9:68:fe:ac:db:96:75:7b:8e:
56:67:01:31:52:5e:db:be:b4:6d:99:d5:3c:02:9c:
77:a7:7e:1f:29:38:ce:48:39:90:5c:77:71:69:b3:
8e:75:5b:4f:32:65:48:c4:7d:d9:2a:3e:3f:3d:e0:
d7:65:f8:c7:74:62:36:c6:8a:8a:a8:6a:02:7a:55:
4d:3d:c6:02:cc:03:c6:b8:df:eb:0f:11:27:ea:2b:
12:a0:84:95:e1:54:e4:42:e9:87:68:ac:e7:e6:0d:
93:32:5d:01:ed:97:c1:48:20:a8:9a:dd:da:ed:d4:
84:81:6b:26:62:8f:de:ae:ac:cc:be:60:bd:95:36:
7d:fd:b4:c1:81:a6:2c:e8:ab:6e:68:ea:c1:f5:dd:
bf:3f:1d:6c:b1:2f:c0:8e:67:37:e1:6e:a2:73:26:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:39:FB:CA:BC:72:94:A7:A8:64:65:E9:01:55:C1:4E:D6:1A:15:8B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rTn7yrxylKeoZGXpAVXBTtYaFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:ce:d4:b9:71:30:fe:0d:9c:67:df:c4:49:b2:14:fd:97:c8:
72:5a:02:8c:5c:65:4c:4b:64:32:0e:40:fa:af:69:85:36:38:
80:ec:fc:d1:cc:1c:18:da:22:17:f7:f5:3d:96:a3:ea:89:64:
95:2f:8c:65:cb:db:86:f5:db:ab:79:f2:f4:1f:4d:f1:ee:84:
da:be:dd:28:7e:a3:cc:ea:59:43:2d:9e:89:23:1c:30:b0:78:
b6:fb:f0:ab:5e:ba:ed:07:7c:7c:16:b5:c4:c1:77:ad:cb:22:
81:3a:1d:1f:af:83:96:99:36:d1:51:f6:14:4c:00:cf:f9:77:
7d:7f:48:66:7d:aa:30:6b:a2:cb:7c:c3:d7:86:5f:92:6c:a4:
60:46:be:65:bc:03:0c:74:7b:5e:9e:33:7d:9a:81:b2:0a:30:
12:cc:69:d1:be:12:31:55:71:e5:28:23:13:d0:39:e0:f8:75:
8b:9f:17:65:ac:a9:21:aa:c4:cf:cf:44:e6:89:67:b1:42:8c:
a6:ae:07:68:88:1e:ba:6f:57:ab:4f:9f:4b:7e:83:70:eb:f9:
d3:76:26:a5:50:18:b9:a3:3d:e7:00:8e:b5:ed:29:ce:f9:4e:
af:6b:dc:9b:f8:55:a9:e0:e8:ca:2e:e4:f6:93:45:ba:cb:cf:
c8:7a:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:27 2025 by rpki-client