Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sOTi33xRKFPBdJgCmJJj_RXX5Ls.roa
File: sOTi33xRKFPBdJgCmJJj_RXX5Ls.roa (raw, json)
Hash identifier: Wl8ZH4d8cgaFoUZZtSbtzAmMCDY+JywAJnKXQID2Hcg=
Subject key identifier: B0:E4:E2:DF:7C:51:28:53:C1:74:98:02:98:92:63:FD:15:D7:E4:BB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A91E357B5C7D20AB2F56063A17D29CE82
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sOTi33xRKFPBdJgCmJJj_RXX5Ls.roa
Signing time: Thu 14 Sep 2023 04:11:50 +0000
ROA not before: Thu 14 Sep 2023 04:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:e3:57:b5:c7:d2:0a:b2:f5:60:63:a1:7d:29:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 04:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e4e2df7c512853c1749802989263fd15d7e4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:38:e9:ea:a2:49:22:0f:4f:e3:ee:76:87:
58:80:1a:a0:38:28:5d:3f:ec:2c:a0:f0:b8:34:33:
78:df:ef:c6:91:c9:d5:9e:bb:7d:c0:ed:bc:45:50:
a1:8a:7e:54:60:f4:73:ab:12:1d:36:65:ba:77:22:
e7:42:4a:18:b9:55:9a:eb:db:87:49:35:1f:3a:07:
f4:69:fe:89:a2:d3:1a:a8:04:2f:b6:13:9a:46:72:
e9:89:b7:a1:0d:97:94:4a:d9:5e:23:ad:62:56:da:
2a:72:c4:56:a7:7d:bd:3f:d9:71:f2:4e:e9:bf:69:
01:06:16:33:53:9f:fb:ee:31:1a:6a:fe:ed:de:fc:
34:45:74:f7:cb:48:50:14:a6:11:7c:1b:0b:a0:61:
17:7f:65:94:9f:e0:19:0c:81:9e:12:f9:85:9c:8a:
1c:29:cb:dc:89:37:33:b9:d9:43:7e:80:20:89:2c:
71:79:3b:29:58:11:6d:c2:c9:c5:ad:2b:15:0e:32:
bd:0c:7c:fc:02:d8:64:21:36:aa:01:75:1e:c6:4e:
4d:f9:3e:20:cd:31:45:f5:0b:84:b1:8b:98:49:3a:
30:65:3d:0f:23:fb:92:9c:23:16:aa:13:46:d5:a5:
8c:12:ff:cb:bd:49:6b:de:80:14:ba:25:02:9d:53:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:E2:DF:7C:51:28:53:C1:74:98:02:98:92:63:FD:15:D7:E4:BB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sOTi33xRKFPBdJgCmJJj_RXX5Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:02:bd:19:14:f0:20:63:8c:d2:9f:19:96:86:c2:8a:c3:ae:
8f:ff:8e:bc:b7:71:a5:69:32:9c:85:4b:d5:f5:83:cf:c0:52:
b5:1f:58:d4:79:4d:ca:d6:36:be:4b:17:8f:88:51:b2:b5:56:
f7:a1:e7:c5:9a:e6:20:f4:1e:eb:c4:f6:f8:e6:d0:ee:16:aa:
95:9b:45:3e:d5:07:be:a6:b9:cb:f3:29:a9:38:81:b2:2d:d3:
7b:62:08:d7:79:17:01:cd:ff:71:06:a1:e1:17:cf:e6:b0:4d:
4e:85:da:23:6e:2b:fc:9c:ca:93:9b:f7:6f:02:51:65:9d:bc:
b7:c0:01:d3:a2:56:ab:27:86:9f:a4:4b:73:ca:dd:ac:64:5c:
d3:b8:c2:59:81:52:79:0f:5e:f7:29:1b:75:57:e8:b6:01:f2:
94:e6:00:2a:d2:57:08:ad:b4:5e:c3:cb:59:1a:68:bb:01:3f:
f0:0d:b5:b1:88:7b:c9:ce:23:72:55:64:ae:f6:30:5b:bf:6d:
41:eb:46:cb:87:7c:17:0a:4d:9d:2d:4c:b9:35:0d:3b:5b:2e:
0a:33:38:b7:39:08:0d:61:a6:94:07:40:87:da:b5:63:a1:72:
38:4e:b2:5c:0b:77:f2:5f:df:b9:01:06:34:3c:30:bd:3e:ed:
3f:41:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:46 2025 by rpki-client