Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xiGVC69_6sfreH53JTt2rHyXNYU.roa
File: xiGVC69_6sfreH53JTt2rHyXNYU.roa (raw, json)
Hash identifier: MYahcB7wB1rrwtBaxEgDE65CayjwxuWP6FLQsinYyUc=
Subject key identifier: C6:21:95:0B:AF:7F:EA:C7:EB:78:7E:77:25:3B:76:AC:7C:97:35:85
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9327711056F354715482E68C19FD3D02
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xiGVC69_6sfreH53JTt2rHyXNYU.roa
Signing time: Thu 14 Sep 2023 10:05:50 +0000
ROA not before: Thu 14 Sep 2023 10:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64:ffff:0:18a:9326:96af/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:27:71:10:56:f3:54:71:54:82:e6:8c:19:fd:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 10:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c621950baf7feac7eb787e77253b76ac7c973585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:03:3f:0e:0f:a8:27:cc:f3:28:38:d7:43:
4f:e9:e2:ae:8b:2f:3c:ca:d0:61:9a:fc:c1:a5:63:
f9:57:c0:d2:be:f7:70:71:b4:82:ae:f7:23:a1:d4:
e8:2d:ac:30:12:69:07:46:36:10:dd:b6:d9:4c:58:
bf:f5:73:4f:ae:db:fa:7a:c0:20:1e:1f:95:6a:13:
96:c3:83:f4:3d:0f:61:9f:31:47:a7:43:2d:e8:b0:
df:76:85:59:43:b0:93:d7:d0:89:18:3d:3c:3e:11:
42:46:57:15:f5:b9:9a:c7:9a:c0:a5:14:e4:27:5a:
9c:9e:a0:a7:09:78:48:c9:7e:16:49:ce:4b:e9:34:
f6:d9:1b:b3:59:c3:57:7f:11:80:a0:82:2f:1b:58:
be:8d:56:87:2c:37:8a:a0:af:77:91:13:66:52:c8:
44:7d:4a:c0:dd:1b:b6:ae:bd:60:c1:1f:3c:a7:a7:
3e:8c:51:d0:6a:4a:b8:ad:1c:8a:ad:e9:57:3c:2d:
f1:4f:41:1a:e0:5a:1a:3a:c5:e9:89:4f:18:c4:59:
25:ec:b5:51:1b:33:b9:08:be:fc:e1:8a:2c:50:bc:
98:2e:95:ee:64:66:1d:a4:e8:db:73:20:0b:85:f1:
6f:e7:94:9a:e2:e7:e9:e0:89:37:4c:79:7c:1f:e4:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:21:95:0B:AF:7F:EA:C7:EB:78:7E:77:25:3B:76:AC:7C:97:35:85
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xiGVC69_6sfreH53JTt2rHyXNYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:14:2c:2e:4b:e3:b5:86:0b:ea:08:99:71:9f:b8:9d:8d:28:
d0:a5:94:a8:09:e7:12:a8:b3:85:a0:b0:26:4c:60:4f:09:62:
de:b6:5a:a7:32:08:73:65:4b:29:2c:17:e0:19:61:a3:61:0e:
7a:cf:66:ab:64:61:43:aa:b3:00:43:7b:e0:26:0b:26:e3:fe:
00:6b:d7:12:79:fb:f8:fb:42:a4:2d:f2:a6:e3:b5:fa:47:cb:
39:ad:a0:7b:4a:c4:b4:40:7e:22:48:ac:4e:a3:19:02:1e:5b:
6c:ba:71:32:bb:63:73:a7:aa:ea:93:cf:e3:48:b1:a9:67:cd:
b4:06:ba:1f:fd:ed:4c:b8:21:69:bc:10:94:ef:88:69:7c:70:
b0:c6:d2:1b:13:49:55:fb:6f:ab:a1:da:06:ee:5b:a8:71:4f:
5c:a0:9d:63:2d:7c:c8:5f:c4:f1:c3:b8:3c:35:ee:a5:76:3b:
4c:54:be:c8:6e:6e:35:78:ae:ca:be:1f:ee:b2:6a:1c:94:72:
aa:14:79:ba:27:bc:9b:52:61:c2:65:47:0c:a0:d4:11:1f:84:
34:5d:57:a2:75:fd:1d:be:7f:17:f0:f7:ee:3e:80:b9:03:78:
45:2d:e8:50:51:52:13:10:f7:bf:41:3d:64:d0:a1:d3:cc:4b:
c3:1b:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:37 2025 by rpki-client