Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uJ6n4WQhg46CJc0WdVR891H7Q3I.roa
File: uJ6n4WQhg46CJc0WdVR891H7Q3I.roa (raw, json)
Hash identifier: 8PAUroe2YSKkznw9qMa797ZoeXh3u/SCYgCTXE5kQsU=
Subject key identifier: B8:9E:A7:E1:64:21:83:8E:82:25:CD:16:75:54:7C:F7:51:FB:43:72
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9EFB1723CA8017DD2A5BB09F36368A40
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uJ6n4WQhg46CJc0WdVR891H7Q3I.roa
Signing time: Sat 16 Sep 2023 17:12:50 +0000
ROA not before: Sat 16 Sep 2023 17:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:fb:17:23:ca:80:17:dd:2a:5b:b0:9f:36:36:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 17:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89ea7e16421838e8225cd1675547cf751fb4372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:0f:de:f1:d6:b7:85:7c:d8:59:46:22:49:
7f:b4:42:7c:75:d0:6a:83:44:6f:38:93:6e:cc:6e:
f1:be:c7:e0:51:ce:5a:0c:90:13:b8:6b:af:7f:03:
65:d4:07:fc:a2:c3:10:5b:25:78:c0:69:e3:c4:33:
57:d2:f9:67:d1:ad:a0:b9:7a:06:6f:89:d2:c9:d3:
86:44:90:c1:e2:5a:7e:34:65:2e:f7:c6:dd:96:5f:
97:e8:1c:1e:79:e6:5f:6a:14:94:cb:82:30:7f:93:
7d:93:81:c7:a1:5e:78:22:e5:ca:d8:ea:cc:c9:e7:
3f:03:b8:12:7a:06:c5:42:cb:39:96:b3:40:3d:ee:
aa:94:e3:7a:ab:85:af:2a:cf:fa:89:f9:77:db:a9:
3a:99:13:6d:33:f2:63:f1:b5:40:51:86:f0:8f:96:
9d:3a:0c:45:a2:e8:c8:ae:b7:d2:17:a7:73:1c:ea:
db:70:e4:fe:6c:fd:fb:22:23:47:ea:f7:99:53:a4:
0f:b3:f1:06:c0:83:d1:e5:8b:c8:ab:94:0e:3a:47:
9a:19:33:16:15:17:f5:ac:8d:c1:d1:55:08:09:7b:
00:94:8d:b4:bb:ee:10:3c:2e:fc:d7:56:cb:b2:cf:
6f:98:3a:7c:55:c4:34:79:4f:d3:3f:14:17:7e:98:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:A7:E1:64:21:83:8E:82:25:CD:16:75:54:7C:F7:51:FB:43:72
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uJ6n4WQhg46CJc0WdVR891H7Q3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:27:fa:2d:47:8d:ea:f9:b0:6e:aa:d0:79:30:f6:e3:c6:03:
71:93:84:60:a4:89:67:f9:2e:6f:ab:e2:d9:8d:b5:f7:0c:df:
a9:97:90:5a:ae:9f:08:17:bd:3b:ad:26:26:5d:e9:6e:19:c1:
11:ec:28:99:16:aa:5c:7e:0d:cc:2b:29:23:29:54:a1:7e:69:
ff:52:0a:5a:d1:01:26:ee:33:4d:92:25:a6:50:5b:29:eb:82:
dc:fd:27:db:15:84:a0:8f:ac:2d:5d:d4:e7:af:6a:9f:39:88:
41:f9:93:3a:a1:09:88:aa:13:b2:2a:44:e6:c6:b5:19:26:27:
99:a4:58:5e:c9:cf:98:85:80:63:bc:70:4c:65:59:f4:82:e3:
11:4f:ff:4f:ca:b9:dc:17:02:ad:10:95:06:cf:85:df:61:53:
13:9b:48:0e:14:a8:02:54:4a:23:40:65:bb:13:73:18:58:ed:
cd:08:2c:33:00:99:54:41:70:ae:8c:3d:1e:d0:66:36:1b:58:
ea:02:63:c3:29:d5:7e:47:dd:1c:e0:0b:9e:06:ae:58:cb:1f:
05:52:15:79:d8:01:45:c4:7f:b7:73:f5:2f:18:23:e4:a1:3a:
91:68:4c:ff:b3:8c:49:6a:09:46:c3:ab:4c:9b:21:25:0b:d1:
26:7e:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:04 2025 by rpki-client