Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v-9DIgfZTPzfxCz2EZYlUKYChwA.roa
File: v-9DIgfZTPzfxCz2EZYlUKYChwA.roa (raw, json)
Hash identifier: xmr44KT6+s1n7RocdZ3YTojfFfGIeEtB5FjSh3fseio=
Subject key identifier: BF:EF:43:22:07:D9:4C:FC:DF:C4:2C:F6:11:96:25:50:A6:02:87:00
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4F9DED3ED2E118800AF8E057724255B8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v-9DIgfZTPzfxCz2EZYlUKYChwA.roa
Signing time: Fri 01 Sep 2023 07:21:04 +0000
ROA not before: Fri 01 Sep 2023 07:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:9d:ed:3e:d2:e1:18:80:0a:f8:e0:57:72:42:55:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 07:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfef432207d94cfcdfc42cf611962550a6028700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:8c:56:7f:7e:cd:75:a2:94:90:4e:1c:90:
a2:e9:68:70:78:a3:c0:af:5c:0f:f9:d9:c3:20:76:
bf:84:13:e5:c8:0e:7e:06:f7:c7:77:61:f1:29:75:
29:c3:1d:41:4c:2c:24:d4:c3:de:70:ec:58:3b:2d:
38:84:95:c8:ba:eb:b2:7b:e0:a9:b5:ed:31:9d:cc:
a4:b5:f2:2e:97:14:8d:42:40:00:cd:5c:f1:62:dc:
7b:9e:a4:cd:b6:a0:84:09:36:10:28:7f:af:f3:3a:
da:d7:72:8c:c0:38:4a:e5:94:2b:75:31:97:a6:d2:
fe:cd:5a:ee:cc:5e:24:e4:8a:bc:05:71:5a:7d:6d:
4c:bd:ef:a1:54:e9:d3:ce:30:e7:e0:48:cb:69:ed:
ce:5d:ad:72:b4:78:60:8a:e9:b5:9f:08:07:fb:15:
2e:88:9b:9a:bd:47:7a:ab:e9:4a:a4:8e:9e:ab:fe:
f5:f8:42:eb:18:a6:fc:09:24:91:9b:7c:83:16:0e:
a0:1d:bc:6c:97:98:e0:93:c7:28:07:1f:a6:f6:79:
1b:4b:8d:8f:d0:18:96:ec:da:f3:0e:da:46:0c:2a:
a0:02:8f:9f:2a:75:8a:48:97:b4:b0:a7:4e:1f:bd:
e2:ce:00:93:c9:8c:d3:00:97:bc:eb:c8:4f:7d:2c:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:43:22:07:D9:4C:FC:DF:C4:2C:F6:11:96:25:50:A6:02:87:00
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v-9DIgfZTPzfxCz2EZYlUKYChwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ca:f3:f6:92:95:e0:5b:5b:3b:01:dd:15:5b:ff:70:84:ba:
99:68:5a:4b:a7:97:f9:ab:e3:5d:e8:59:0a:2c:43:43:df:92:
7a:39:96:5d:e8:dc:46:c0:bf:96:69:03:54:d2:dd:d9:ac:60:
51:c7:8c:e8:3d:17:b5:a0:52:ed:bb:b7:69:43:5b:98:b0:7a:
b7:48:6a:4f:cf:f8:6a:88:08:3c:a2:67:74:73:93:af:f0:cd:
12:90:90:d1:13:27:d1:7e:b1:a9:fd:f7:bf:ee:7a:6e:46:67:
03:f6:aa:d3:f7:b2:dd:66:d4:42:d6:42:52:02:08:23:81:19:
31:9e:88:7b:98:39:4d:8c:b3:57:59:dc:3e:15:34:4c:c8:c2:
da:84:bc:66:e6:52:c8:ed:18:13:67:25:2c:e0:92:5a:44:52:
c3:48:9f:6e:24:74:ca:f0:43:e4:cd:23:a4:84:0b:32:b4:1b:
e5:a2:8b:de:43:ae:dd:68:73:f2:f1:c0:96:b6:8e:6c:37:5b:
c3:e4:cc:d7:a9:53:d9:27:38:39:0f:c9:bd:8d:96:77:2c:74:
15:e5:d4:75:94:95:9d:f8:79:68:5e:ac:6c:be:80:c4:96:84:
90:ee:2f:70:19:df:e2:cc:5e:e8:26:02:13:59:98:20:eb:75:
b1:3b:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:19 2025 by rpki-client