Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xgjHWzfjq6v1iZ5CxMhLdF_lWrw.roa
File: xgjHWzfjq6v1iZ5CxMhLdF_lWrw.roa (raw, json)
Hash identifier: MrmIeTwTE6B1c9Q4qoJBzxdkpZJ4+z+hGGdpxbdmXfc=
Subject key identifier: C6:08:C7:5B:37:E3:AB:AB:F5:89:9E:42:C4:C8:4B:74:5F:E5:5A:BC
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9815F41DBB0321011E724D69D74EC19F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xgjHWzfjq6v1iZ5CxMhLdF_lWrw.roa
Signing time: Fri 15 Sep 2023 09:04:50 +0000
ROA not before: Fri 15 Sep 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:9815:8a7f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:15:f4:1d:bb:03:21:01:1e:72:4d:69:d7:4e:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c608c75b37e3ababf5899e42c4c84b745fe55abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:4f:6b:49:ab:95:e8:5d:46:f5:9e:99:ef:
c0:e0:e1:5a:9f:e7:4c:5f:08:0c:ab:83:85:59:10:
07:76:8f:52:97:d3:73:87:6c:ed:9d:9d:97:a0:77:
b2:87:38:60:b3:85:5a:31:4a:47:ac:f2:cf:a5:a3:
c3:47:62:b4:10:f1:35:8f:fa:f0:76:89:0b:82:fb:
9c:1b:88:f5:e6:c7:a6:44:66:24:c2:91:5e:12:57:
1d:eb:9f:f2:11:2e:fd:39:09:e9:c2:ee:d9:a6:a3:
ad:ec:71:24:40:8d:ba:ec:f3:58:48:02:6b:37:48:
c8:9c:d4:a9:ba:cb:fe:36:47:45:0b:af:c9:0a:3c:
01:c1:e3:f5:17:e7:c3:9d:01:4e:4d:f9:63:71:b3:
ed:6e:8b:46:ba:a1:34:2c:e6:53:b7:ff:e4:d0:1c:
c4:ce:b5:f5:d4:d6:fa:3a:e3:17:5d:ee:28:b2:83:
a2:b0:58:84:db:6d:7a:2d:d8:70:81:49:2e:ae:20:
09:b0:ee:37:41:83:83:78:b4:3e:40:94:a6:e9:d5:
db:ea:55:93:3c:68:ca:07:d0:ee:58:73:61:2f:f4:
f1:0e:84:bd:ee:07:e3:0f:80:b3:f0:a2:8e:e9:74:
05:8d:be:2a:b8:b8:8b:62:19:c5:43:ee:0a:f3:c1:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:C7:5B:37:E3:AB:AB:F5:89:9E:42:C4:C8:4B:74:5F:E5:5A:BC
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xgjHWzfjq6v1iZ5CxMhLdF_lWrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:9c:f8:e9:d4:be:43:5b:02:6d:de:93:b0:1d:43:4f:ac:d4:
b7:b8:27:61:3d:ff:dc:12:87:5f:6b:33:74:77:db:46:be:11:
48:8b:e1:04:14:98:aa:d8:1c:ce:bd:0e:eb:36:80:6d:cb:5c:
84:fa:39:81:15:bc:7e:37:83:6f:97:f6:88:ef:bb:16:b3:35:
56:65:f3:bd:44:35:84:de:95:61:e2:e4:ee:2e:08:f7:8b:c0:
da:89:1c:22:d2:b0:da:f1:f7:ff:40:c9:64:a1:3c:6e:06:d4:
41:e6:1f:fa:78:64:c7:1a:3b:5a:a9:c1:0a:34:4a:a6:06:a8:
8e:24:ba:11:1a:20:ec:34:c4:e9:71:b7:c3:b3:27:57:fc:32:
69:e6:0c:05:69:73:67:0a:2c:ee:90:40:03:95:9c:52:b4:fd:
17:92:88:1c:08:fd:13:20:18:e4:b8:54:80:07:a5:de:80:14:
17:bb:61:fd:fb:3c:59:1a:18:de:e9:4c:f6:6a:93:cb:c9:f6:
90:41:3c:58:51:62:16:1b:81:98:df:9f:50:d9:24:68:65:3b:
4a:9b:fd:27:df:e5:b7:ca:94:e0:18:17:dc:df:19:ac:be:e7:
4a:db:85:c9:be:b2:86:c2:4d:9b:58:32:d3:e4:80:27:e9:af:
87:92:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:08 2025 by rpki-client