Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tqMLrwKBhUVBRB6HKSE_h9vBSDs.roa
File: tqMLrwKBhUVBRB6HKSE_h9vBSDs.roa (raw, json)
Hash identifier: fkHoXVJ7vLorHmqkTKw42o6TgDQJ71vqQGTvI98gyoU=
Subject key identifier: B6:A3:0B:AF:02:81:85:45:41:44:1E:87:29:21:3F:87:DB:C1:48:3B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7C6E36B035ACD649FB2E1B539D08D381
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tqMLrwKBhUVBRB6HKSE_h9vBSDs.roa
Signing time: Sun 10 Sep 2023 00:11:52 +0000
ROA not before: Sun 10 Sep 2023 00:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7c:6e:36:b0:35:ac:d6:49:fb:2e:1b:53:9d:08:d3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 00:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a30baf0281854541441e8729213f87dbc1483b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:a6:06:ff:26:6f:4e:fa:44:59:7b:42:f8:
48:86:51:15:8b:43:8f:e6:7a:dd:90:40:75:08:ff:
b1:c1:73:ec:50:38:ce:f4:ee:53:36:04:26:b3:26:
13:3e:3b:5d:a9:d7:e3:26:0c:73:35:93:ad:f8:60:
44:3f:da:cd:18:c5:57:4f:4d:82:f4:56:ac:84:e9:
06:d7:87:ca:3a:f3:3a:d0:6e:39:63:19:57:a7:9d:
8f:5b:64:d0:bb:9f:ce:9a:10:d0:1f:89:ea:46:ca:
f7:5a:23:93:a7:79:d5:04:38:d7:0d:33:76:bb:22:
7e:d4:51:86:a5:9c:ad:61:3a:6d:fc:05:37:c5:16:
8d:ba:8d:27:8b:12:36:42:a6:e2:e8:06:cc:b7:4f:
47:54:d5:a4:ed:8b:38:a8:18:b0:04:9f:4e:16:76:
00:6c:f7:b7:60:4e:e8:4a:bd:16:ce:bb:5e:b8:db:
4e:91:17:25:f1:64:36:96:e0:e2:c7:00:b7:22:a0:
de:52:07:4d:48:9e:b6:ef:03:25:f8:60:6e:b6:00:
88:2a:03:b5:17:fe:e5:6b:57:64:0d:05:c4:74:c3:
41:0f:81:f7:79:63:e8:51:cd:66:6a:0e:f1:39:b1:
fb:5b:07:20:8d:8f:7d:bb:48:68:04:cf:1f:f2:a1:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:0B:AF:02:81:85:45:41:44:1E:87:29:21:3F:87:DB:C1:48:3B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tqMLrwKBhUVBRB6HKSE_h9vBSDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a7:cb:62:15:38:ad:3c:10:86:95:29:f4:4d:3a:c9:eb:35:
b7:f9:98:d9:08:8b:02:be:20:55:d4:ea:f0:61:e3:e9:c7:b9:
ed:8b:99:9c:17:6c:e1:7c:b0:21:40:d2:46:8a:dc:93:2d:c7:
af:12:d8:63:ce:9b:63:6e:5c:fd:5d:0e:43:04:a8:f1:09:ec:
63:0a:fb:91:b9:e4:8f:18:f0:94:5b:f3:a5:19:b3:7a:cc:a0:
dd:e1:63:c7:bb:46:03:2c:9f:d8:75:cb:d6:19:af:31:fb:e1:
ca:0e:d9:1d:7a:1f:29:3b:0a:a9:65:62:37:2a:5a:0f:b9:9a:
51:14:5f:61:b6:23:06:b7:06:0a:ed:51:68:45:00:2a:49:22:
9c:4f:dd:91:ea:42:42:bd:20:8a:d7:00:96:ab:80:de:e5:93:
41:e5:93:68:7d:24:a1:92:1e:63:49:19:9f:38:7a:42:53:08:
30:de:21:c5:de:cb:31:81:63:51:a1:71:cc:da:96:8d:6d:83:
ba:18:8b:64:2b:bd:c6:fd:f6:9c:16:ef:ed:6f:59:98:d7:c1:
fe:d2:72:d7:96:ec:6a:e7:9b:73:97:a1:de:dc:57:3e:39:02:
40:f7:b0:d1:cb:21:3a:83:af:06:79:31:d8:9e:22:26:a2:99:
0d:19:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:00 2025 by rpki-client