Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vFRBkG9-cZsGjTRdB30qfNehFqc.roa
File: vFRBkG9-cZsGjTRdB30qfNehFqc.roa (raw, json)
Hash identifier: dQVWc+OM5qtIMGvjrd4xvpWFX1IQHB1KAo06ruFjoSU=
Subject key identifier: BC:54:41:90:6F:7E:71:9B:06:8D:34:5D:07:7D:2A:7C:D7:A1:16:A7
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA67DB2BDA38D66D9FECDDAA83C1DDCB1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vFRBkG9-cZsGjTRdB30qfNehFqc.roa
Signing time: Mon 18 Sep 2023 04:12:50 +0000
ROA not before: Mon 18 Sep 2023 04:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:7d:b2:bd:a3:8d:66:d9:fe:cd:da:a8:3c:1d:dc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 04:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc5441906f7e719b068d345d077d2a7cd7a116a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:d1:23:79:60:0f:80:b3:77:76:99:06:df:
3b:7a:93:be:e2:88:a7:6d:39:2d:58:7f:3e:4d:23:
5f:13:28:70:a0:ed:a1:33:77:6a:00:54:c4:5b:f8:
ce:0c:ab:17:75:6f:ff:67:9c:62:a1:0c:8a:53:50:
04:7d:c0:a6:f8:2a:06:fb:0a:95:5a:0a:70:1f:5d:
e8:41:8f:5e:73:01:36:a0:4c:33:3c:62:ea:7e:61:
4a:2b:0c:bd:42:00:82:b8:2a:21:02:23:6a:05:0f:
5c:80:cb:d8:d5:86:57:34:43:b2:84:e6:0f:7c:e5:
8f:ed:88:3c:1c:6c:e7:96:b0:bb:95:f1:cc:e1:8f:
2c:96:78:08:da:de:82:14:25:28:62:2d:ec:3d:02:
c2:15:ba:b9:93:1e:d8:72:ab:3f:aa:ae:a9:ad:f1:
5a:f1:86:21:c4:13:ea:1d:44:23:0d:61:c0:ff:cb:
32:93:08:26:96:89:b6:69:6f:97:91:06:32:0b:66:
30:d3:a0:1b:93:f3:a1:c8:3d:32:0e:3e:e6:de:1b:
41:7d:6a:f2:19:85:75:b0:cf:ce:12:f8:be:c7:73:
29:a4:ac:b2:11:70:f5:ab:05:8e:67:61:65:09:ff:
da:28:b6:92:ee:e6:4c:6e:77:eb:d2:28:35:87:9f:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:41:90:6F:7E:71:9B:06:8D:34:5D:07:7D:2A:7C:D7:A1:16:A7
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vFRBkG9-cZsGjTRdB30qfNehFqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:0f:8d:48:51:c9:0c:72:04:8a:e4:d9:10:70:a8:24:f7:cd:
1a:d8:23:f2:34:54:45:85:d5:bf:5f:84:f7:44:47:09:63:aa:
67:b8:03:0a:86:10:9b:dd:fd:7a:30:b9:29:64:39:3e:e0:2b:
15:24:29:0b:97:df:3e:c5:4e:30:9f:18:a4:7e:b2:58:23:a8:
31:61:5e:9f:02:a6:68:54:63:4b:bb:48:1e:23:94:00:b4:4e:
0c:f2:07:5b:0d:cc:99:f4:b7:dc:1e:4f:8e:66:88:ba:af:75:
41:c4:7d:17:e9:3d:f4:15:7a:b7:fc:d2:88:fd:51:55:2b:d1:
00:a2:cf:8d:06:94:f0:db:0a:66:91:f1:08:54:c8:60:76:af:
12:0a:d1:a0:89:a5:68:74:3c:50:4e:0e:13:37:4c:e6:23:1c:
28:bf:df:68:a1:3d:f9:67:26:85:70:b6:8a:63:5a:85:02:1d:
42:52:b4:5f:da:a5:b5:ed:f4:5e:0e:82:22:45:a5:72:09:ec:
bb:fa:69:61:9d:35:49:ae:e1:3a:a1:14:2c:cd:e2:dd:71:ac:
e2:72:d6:5f:77:74:00:f4:59:17:77:df:75:81:92:8b:4a:0d:
c4:e9:c1:7e:89:25:ec:41:ad:33:85:ce:c6:5b:8c:41:28:4f:
f1:0d:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:47 2025 by rpki-client