Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slapYERFDeufEbF4OzdIOop-b6o.roa
File: slapYERFDeufEbF4OzdIOop-b6o.roa (raw, json)
Hash identifier: dLUJQX2vc63WoapdEdmrwMz1vfD8HdlRWainnMkn3Vk=
Subject key identifier: B2:56:A9:60:44:45:0D:EB:9F:11:B1:78:3B:37:48:3A:8A:7E:6F:AA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A92F9A9F2F2618C3DF2DD06414DC37CA1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slapYERFDeufEbF4OzdIOop-b6o.roa
Signing time: Thu 14 Sep 2023 09:15:50 +0000
ROA not before: Thu 14 Sep 2023 09:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:f9:a9:f2:f2:61:8c:3d:f2:dd:06:41:4d:c3:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 09:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b256a96044450deb9f11b1783b37483a8a7e6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:a1:13:d4:2f:8d:af:a3:e9:1d:6f:85:68:
2a:56:33:64:3f:d7:e8:02:1f:79:31:3f:60:88:a8:
3c:2e:42:41:fa:0f:2e:2f:ad:27:a1:9a:82:fd:aa:
75:2f:4f:50:db:81:1a:e8:03:5d:24:6b:f2:50:a3:
d7:c7:31:e4:4f:57:91:c4:b2:f7:d0:66:25:d7:30:
62:e9:40:14:28:98:92:ee:75:ef:6c:43:ed:03:88:
3d:4d:b7:9e:4d:61:a5:c7:e9:4b:22:f5:ae:fa:e6:
d5:cf:92:26:33:97:ab:14:62:af:aa:27:55:b0:e1:
ff:ed:0d:5f:c8:15:55:f3:0c:f4:0e:50:d8:05:fd:
0c:ce:b0:96:fc:2e:6a:35:ca:ff:f2:07:ff:88:78:
a1:cd:bf:3c:35:60:6b:a8:c4:fc:cb:82:d6:54:b7:
5a:66:86:14:5b:11:f9:e8:0b:8a:b6:b7:e9:df:3c:
17:f5:c6:7c:30:b9:cd:cd:c4:bb:d4:0d:8b:87:a6:
7c:b2:45:d6:f5:d6:d2:4d:32:ae:be:3c:d7:e3:9f:
84:09:ed:37:d1:b0:aa:17:55:af:c2:db:b7:c5:13:
0d:e3:a5:7f:df:ab:61:ea:57:e6:7e:28:48:5c:c1:
3c:6a:75:6b:4b:49:36:49:47:7b:b6:e1:2d:0d:b8:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:A9:60:44:45:0D:EB:9F:11:B1:78:3B:37:48:3A:8A:7E:6F:AA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slapYERFDeufEbF4OzdIOop-b6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:2d:3a:d6:0f:84:65:b0:bf:92:bf:b2:38:78:97:30:be:a7:
ee:c1:b6:62:73:27:48:45:96:93:bb:17:e6:d6:a4:6b:fa:16:
65:7f:e7:36:30:9a:f0:a4:b3:fa:5b:26:55:fe:f5:25:8b:cf:
29:09:d3:54:bd:eb:55:73:dc:ff:3c:b0:0b:88:37:15:db:bd:
84:21:7d:96:8b:0a:4b:35:e1:23:30:97:f3:54:15:44:16:d9:
00:3c:d0:ba:11:0a:3c:65:cd:be:30:6d:1b:0d:79:e5:ad:cd:
2f:da:65:7b:f9:e2:22:de:62:4a:b6:e8:40:8a:d4:1e:c5:8f:
77:b9:73:68:e1:1a:c5:7c:d7:e1:e8:60:9c:85:30:e8:49:5c:
93:25:47:27:c3:3a:4c:01:a2:ae:ea:4a:3b:32:da:67:9b:59:
25:16:43:20:5f:86:57:ac:f4:de:4a:69:05:5c:09:45:3e:fe:
c2:77:17:0c:47:6a:80:d4:b2:27:44:a6:d3:67:f4:c5:da:e6:
6c:50:ea:03:42:42:f7:32:99:ad:05:25:b5:c9:56:ca:26:32:
eb:e3:9d:02:7b:c1:e7:3d:17:0e:e6:e7:25:62:bc:48:63:2e:
c7:87:43:bb:70:6c:d4:89:7c:b1:0f:3c:3d:cf:81:4b:99:b4:
3b:bd:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:07 2025 by rpki-client