Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa
File: y13MZ6uHU_YF_J2ugklGFZ095XA.roa (raw, json)
Hash identifier: fl2QIcAgoTTkULnkO5MDqdDg8Qc+CWF0lbiRD51qD8k=
Subject key identifier: CB:5D:CC:67:AB:87:53:F6:05:FC:9D:AE:82:49:46:15:9D:3D:E5:70
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A77ED902754F7DBEE67A96CE78E25813F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa
Signing time: Sat 09 Sep 2023 03:12:52 +0000
ROA not before: Sat 09 Sep 2023 03:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:77:ed:90:27:54:f7:db:ee:67:a9:6c:e7:8e:25:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 9 03:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb5dcc67ab8753f605fc9dae824946159d3de570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:c2:1e:d3:f2:6d:9b:29:40:dc:f1:b2:74:
64:03:db:52:40:2b:6f:0e:24:b8:55:73:81:f1:c9:
51:f3:54:90:bf:89:82:16:f0:26:0b:b1:a1:37:9b:
00:19:17:55:6f:1d:8d:d5:25:96:5f:f0:67:dd:3c:
0f:93:04:79:d1:28:64:8e:23:7c:e4:67:c9:43:49:
57:e7:85:ca:69:c7:59:c2:a1:38:ac:c7:15:80:70:
fe:2f:a5:ed:71:40:ea:20:a3:af:b6:5d:a1:30:7a:
ae:17:66:cb:54:2d:bf:84:61:02:e1:55:36:b8:c9:
3e:d9:2e:df:3c:b7:64:c8:d9:b4:d6:25:07:fb:8e:
67:cb:29:e6:79:10:d2:77:f0:c4:93:2c:7a:46:b9:
20:29:90:f5:6d:ca:f3:1f:f2:d0:b0:49:17:f0:48:
25:96:e2:a3:4b:9c:1a:22:cf:15:0c:4c:2d:f1:d3:
52:31:bb:3a:d7:f7:23:b7:21:52:a4:22:32:50:28:
e8:b0:ec:76:5e:9f:40:59:2d:8e:97:2f:18:29:7a:
6c:53:d9:45:e6:c8:89:28:fe:3b:d3:50:d4:33:e9:
81:19:ad:28:10:6a:cc:7f:0f:8c:54:95:e0:2e:9b:
66:a7:cb:e7:76:52:24:40:a7:03:b9:56:1c:da:80:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:CC:67:AB:87:53:F6:05:FC:9D:AE:82:49:46:15:9D:3D:E5:70
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:89:ed:8e:2b:4c:94:76:64:5d:7c:b4:69:24:3f:7a:64:2f:
d4:f6:5d:42:65:eb:d9:70:8b:85:0e:9b:34:91:79:5b:b7:5a:
c6:0f:28:b4:09:31:c5:d1:1f:f2:87:3a:b7:76:a2:ca:1a:b4:
85:74:57:8a:c2:46:5d:e5:d7:25:02:bc:e8:d7:9c:4f:8c:0e:
31:a2:4a:6e:90:35:39:84:76:bf:d8:29:13:1b:44:90:7c:08:
40:97:68:42:e9:5c:7e:2b:50:5e:23:de:af:13:6b:b9:4a:7e:
50:fb:dd:11:fd:0a:1b:72:b5:de:b7:29:78:45:4e:46:12:c1:
3f:8d:cb:ea:bf:4c:bf:55:0f:3b:68:aa:c9:67:07:c6:24:13:
61:f1:53:fd:c4:b2:8c:56:08:29:0a:18:3b:e9:61:9b:c6:de:
12:89:2f:d9:16:e6:e5:6f:8e:d2:be:2c:8f:ea:e2:a7:6b:32:
b8:c2:7b:31:0d:33:fd:52:aa:81:a1:5c:f1:4c:7c:bd:28:3e:
6a:67:82:1e:86:4b:0f:87:6a:d5:cb:8e:77:bb:36:16:bb:9e:
11:61:5c:5d:e2:29:80:fc:2c:27:ec:50:1f:05:3e:46:41:89:
b1:f8:59:e7:4b:b6:7b:f0:54:43:69:88:65:48:80:1c:eb:92:
75:c0:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:43 2025 by rpki-client