Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wKwUh9L_vd0oc8E9R9x8obPP1DI.roa
File: wKwUh9L_vd0oc8E9R9x8obPP1DI.roa (raw, json)
Hash identifier: XzmH6UVPay4DIlKjRse0q3ZpTKWmhETsa3Y3JmQTyPc=
Subject key identifier: C0:AC:14:87:D2:FF:BD:DD:28:73:C1:3D:47:DC:7C:A1:B3:CF:D4:32
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A7E5D83D4224ACF5A87ED44206FB50887
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wKwUh9L_vd0oc8E9R9x8obPP1DI.roa
Signing time: Sun 10 Sep 2023 09:12:52 +0000
ROA not before: Sun 10 Sep 2023 09:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:5d:83:d4:22:4a:cf:5a:87:ed:44:20:6f:b5:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 09:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ac1487d2ffbddd2873c13d47dc7ca1b3cfd432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:24:0d:6a:81:aa:e3:55:e0:57:d2:41:a3:
5e:6a:f3:a7:04:8f:ea:3c:63:32:49:fb:8d:0c:31:
98:37:1a:b5:e9:0c:8b:b6:53:75:a2:c7:74:ef:b0:
fb:b0:c3:81:1a:b3:02:98:ab:e6:a4:0d:5a:b7:42:
6e:b0:10:d1:f0:f1:c5:3c:4f:7b:5b:1a:41:b6:33:
b4:e1:bc:5f:24:4d:b6:cf:80:5a:0b:f8:7d:30:cb:
4c:c5:21:ab:03:e1:48:11:66:ba:0f:64:c6:dc:a5:
f6:45:7f:85:53:36:b3:fe:e4:99:e9:46:1c:b8:5f:
d4:42:46:3d:1f:02:9e:72:08:b2:26:e1:f3:b7:40:
da:2a:f0:ab:31:78:c1:51:e8:2d:57:a8:71:df:1b:
f4:ed:93:f5:a5:26:d6:cb:1a:3b:92:4d:03:2c:74:
59:8b:65:d2:83:21:0c:d1:6f:80:37:7e:72:40:eb:
e4:db:87:58:5a:b9:98:f9:a4:c9:5d:ab:ad:18:2c:
96:5b:64:70:5e:08:42:d7:b1:07:0e:3c:0a:8a:28:
05:1e:1b:47:1f:19:c3:cb:b0:0f:15:92:4d:e1:4e:
7d:2a:be:9f:be:e3:12:a4:26:43:fe:ba:55:99:74:
ba:f3:8a:2e:d5:46:de:a0:ec:3b:87:1e:09:3d:56:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:14:87:D2:FF:BD:DD:28:73:C1:3D:47:DC:7C:A1:B3:CF:D4:32
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wKwUh9L_vd0oc8E9R9x8obPP1DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:03:a7:5f:5b:7b:c6:5f:db:35:cb:c8:6a:e2:a8:be:df:60:
25:34:9c:6d:29:0d:25:cf:21:d9:c3:03:0b:ab:b2:e3:42:96:
f2:a4:45:0b:d2:58:df:b2:f4:a3:52:f2:e5:99:42:35:2c:c8:
f9:6d:23:1c:b9:7f:bf:8a:7c:71:b3:e3:0a:13:02:5d:d3:35:
8f:0b:91:7a:88:f4:48:a5:0e:42:ce:a6:d7:a1:5d:da:1a:7e:
12:b8:a0:47:a8:52:b1:94:7e:a0:19:9e:ea:ed:e6:7f:8d:dd:
1a:08:dd:57:97:21:e4:76:67:0d:94:cd:cc:55:d1:84:08:c9:
ff:8c:76:fa:77:0d:ae:9a:c1:dc:e2:4b:78:62:21:9b:3f:4a:
f9:63:9f:75:94:8a:76:8e:9c:8e:e6:dc:32:04:73:c5:1c:65:
d8:bf:4d:13:20:91:9d:85:20:3d:19:f4:13:b3:46:92:a5:79:
a0:32:72:21:a2:d7:b9:77:df:76:bb:9b:6a:7b:2c:b7:26:9c:
d4:d0:e7:95:b7:b7:dc:80:d0:2a:a8:e7:67:1b:80:28:99:ed:
ec:a7:a1:c5:13:d9:52:db:b3:11:b2:09:35:ff:f3:94:30:88:
24:7b:62:b3:52:c7:37:38:fe:d6:26:8e:b2:00:15:51:65:93:
ae:0e:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:27 2025 by rpki-client