Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGc3Oppjib7dygMIGFrF2jXh2Xs.roa
File: vGc3Oppjib7dygMIGFrF2jXh2Xs.roa (raw, json)
Hash identifier: w52Vgy+VsxLzAod2KzpcnPQ5cKL6Q4+n1hlmX4Dgr3Y=
Subject key identifier: BC:67:37:3A:9A:63:89:BE:DD:CA:03:08:18:5A:C5:DA:35:E1:D9:7B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8E7644EDDFAEE9C7997E53DED28AA8BA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGc3Oppjib7dygMIGFrF2jXh2Xs.roa
Signing time: Wed 13 Sep 2023 12:13:50 +0000
ROA not before: Wed 13 Sep 2023 12:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:76:44:ed:df:ae:e9:c7:99:7e:53:de:d2:8a:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 12:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc67373a9a6389beddca0308185ac5da35e1d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:a9:66:4b:b8:33:43:de:f6:88:20:d2:56:
5c:e2:4d:a6:05:b7:ce:47:14:a7:24:04:3d:8e:70:
92:e2:3e:1b:f7:fe:2b:79:19:26:ad:3d:2c:68:8a:
53:4a:c2:ff:43:5b:f1:5d:3d:a5:f5:3c:bf:e8:25:
2d:4c:03:2d:ea:95:ff:96:5b:a1:dc:33:70:c8:15:
2a:76:c9:c9:38:13:96:ef:2e:bf:49:15:0b:ef:c0:
74:a0:34:c4:f1:de:1a:a2:be:05:6c:bc:c5:f5:b7:
3d:2a:2e:7c:db:33:94:4a:ae:be:fb:a0:91:4b:36:
9d:fc:13:b7:8f:bf:59:68:44:05:40:30:68:3f:01:
9e:e2:33:b5:a8:df:6f:07:1e:93:66:4c:6c:35:7c:
d2:df:b1:e6:06:e3:a0:c2:55:6b:70:60:c8:83:02:
99:2e:86:e9:9d:47:2b:09:c1:21:cc:e3:3e:1a:48:
41:3a:f7:cf:0f:1c:2b:89:fa:39:b8:b0:68:87:de:
27:1c:0a:82:18:b0:f4:c6:31:df:6e:1c:1a:d0:c3:
4a:55:7c:5c:cd:15:b2:04:c8:24:28:71:6c:8d:f6:
16:51:cc:f8:6e:dc:c1:d5:69:6a:d8:e6:1f:0c:1d:
e8:c7:0c:c5:e7:43:f7:c6:25:18:9b:8e:8b:4c:12:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:37:3A:9A:63:89:BE:DD:CA:03:08:18:5A:C5:DA:35:E1:D9:7B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGc3Oppjib7dygMIGFrF2jXh2Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:d4:79:66:59:0f:c7:48:7b:bc:1c:3c:27:e7:d5:d4:f9:49:
97:3d:a4:dc:5d:02:b8:86:1e:ff:59:49:40:1d:76:49:ed:76:
7e:79:7c:64:e8:97:b7:b9:d6:23:cf:e5:b9:a7:85:3e:20:e3:
ec:7e:26:e5:03:36:de:74:83:f5:fa:a8:7b:15:52:b4:23:1d:
7c:d4:fb:14:f1:dd:8f:bf:72:c8:51:1c:b7:88:cf:f5:34:50:
09:be:94:d8:41:4d:b0:35:2e:71:a5:03:67:96:bc:3f:95:3c:
3b:05:e6:99:b4:8f:a1:c7:2a:19:8b:60:f6:1b:74:24:5a:59:
88:a7:c8:e0:05:94:33:ff:c1:26:8c:c1:37:71:5c:5a:78:2a:
9e:6e:1e:f2:3d:c4:09:ab:90:b3:b8:4f:ef:d7:a2:f4:94:9b:
5d:cc:b2:9a:52:64:0f:32:2f:29:97:fa:9e:4f:a4:6b:f3:7a:
1b:73:df:ba:4b:4e:4c:c9:36:2a:da:f1:d9:78:ee:55:47:ac:
59:61:88:5b:74:03:4c:9c:1d:b3:cc:f7:ce:a0:bc:06:63:0d:
bb:7b:e8:c8:82:0b:fc:a7:83:f7:e2:91:a9:90:1d:de:dd:9c:
b5:a8:32:27:7c:b0:2d:ee:56:96:7a:f1:fa:35:5b:2f:e3:0c:
5c:ec:ca:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqOdkTt367px5l+U97Siqi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEzMTIxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzY3MzczYTlhNjM4OWJlZGRjYTAzMDgxODVhYzVkYTM1ZTFkOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBKpZku4M0Pe9ogg0lZc4k2mBbfO
RxSnJAQ9jnCS4j4b9/4reRkmrT0saIpTSsL/Q1vxXT2l9Ty/6CUtTAMt6pX/lluh
3DNwyBUqdsnJOBOW7y6/SRUL78B0oDTE8d4aor4FbLzF9bc9Ki582zOUSq6++6CR
Szad/BO3j79ZaEQFQDBoPwGe4jO1qN9vBx6TZkxsNXzS37HmBuOgwlVrcGDIgwKZ
LobpnUcrCcEhzOM+GkhBOvfPDxwrifo5uLBoh94nHAqCGLD0xjHfbhwa0MNKVXxc
zRWyBMgkKHFsjfYWUcz4btzB1Wlq2OYfDB3oxwzF50P3xiUYm46LTBKNrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLxnNzqaY4m+3coDCBhaxdo14dl7MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvdkdjM09wcGppYjdkeWdNSUdGckYyalhoMlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACHUeWZZD8dIe7wcPCfn
1dT5SZc9pNxdAriGHv9ZSUAddkntdn55fGTol7e51iPP5bmnhT4g4+x+JuUDNt50
g/X6qHsVUrQjHXzU+xTx3Y+/cshRHLeIz/U0UAm+lNhBTbA1LnGlA2eWvD+VPDsF
5pm0j6HHKhmLYPYbdCRaWYinyOAFlDP/wSaMwTdxXFp4Kp5uHvI9xAmrkLO4T+/X
ovSUm13MsppSZA8yLymX+p5PpGvzehtz37pLTkzJNira8dl47lVHrFlhiFt0A0yc
HbPM986gvAZjDbt76MiCC/yng/fikamQHd7dnLWoMid8sC3uVpZ68fo1Wy/jDFzs
yuA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:17 2025 by rpki-client