Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yBjH0WucgoFmAWqbjS5xN-3EKSY.roa
File: yBjH0WucgoFmAWqbjS5xN-3EKSY.roa (raw, json)
Hash identifier: rkxyp0gDrCy9G2lkg5trnXctgyXuFiLXls3mcS7PkRo=
Subject key identifier: C8:18:C7:D1:6B:9C:82:81:66:01:6A:9B:8D:2E:71:37:ED:C4:29:26
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A492EE442D6CEE07FF21963F02BF069FC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yBjH0WucgoFmAWqbjS5xN-3EKSY.roa
Signing time: Thu 31 Aug 2023 01:22:04 +0000
ROA not before: Thu 31 Aug 2023 01:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:2e:e4:42:d6:ce:e0:7f:f2:19:63:f0:2b:f0:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 01:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c818c7d16b9c828166016a9b8d2e7137edc42926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:8c:07:c0:3b:1e:75:aa:27:d8:d1:95:59:
2f:c7:83:c8:4f:02:49:a4:fa:f5:e9:06:c3:12:f6:
db:d8:52:33:dc:5e:6d:be:b6:71:3e:84:d6:58:2c:
b0:a2:b8:66:f1:e9:00:13:d1:6e:23:a7:af:a6:ee:
06:c1:f8:92:44:16:98:ca:22:2c:7d:f4:0f:84:47:
92:fc:1b:68:11:f9:c6:3b:53:11:70:e4:2c:67:7c:
42:bc:68:2d:bf:fd:27:4c:ea:44:2b:8b:f5:c4:20:
ab:b2:70:30:40:1f:7c:4f:86:2e:ec:37:49:1b:17:
29:e1:ae:7f:1d:b3:a1:aa:c0:74:4b:49:37:62:c6:
22:f8:59:9f:3b:e3:32:a9:f0:82:ab:68:64:2f:8e:
e5:86:68:37:71:c1:ac:44:52:2f:0f:84:15:ef:62:
e5:2e:09:d7:60:48:dd:31:50:c9:ed:e9:de:be:30:
0a:98:ab:96:64:64:b8:19:b9:c9:36:35:c7:0b:c9:
34:58:69:98:3e:06:8c:5c:c7:66:7d:cc:7a:eb:47:
e3:e6:dd:48:ef:ff:b6:c5:ab:99:66:c5:b1:40:5c:
55:44:35:86:63:ec:d0:cb:98:d2:d3:4b:9a:85:3b:
b7:af:16:bf:9e:b4:b0:17:b7:25:1a:e4:a3:cf:d1:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:18:C7:D1:6B:9C:82:81:66:01:6A:9B:8D:2E:71:37:ED:C4:29:26
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/yBjH0WucgoFmAWqbjS5xN-3EKSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:41:41:1a:c8:6f:68:99:c3:ef:2d:f1:eb:24:63:a5:f0:58:
53:52:48:8c:f0:67:e8:80:92:d0:34:4f:95:5c:9f:fc:e9:43:
16:7b:87:85:9d:58:7b:28:35:63:c8:e1:f6:dd:87:67:c9:66:
fb:8e:89:4d:68:09:dd:c8:09:4d:fe:bd:bd:07:25:52:aa:29:
7f:47:7e:a8:17:bf:b1:b0:3c:13:0e:5c:74:75:c0:20:6f:8e:
1e:3f:9e:26:dd:81:54:28:40:46:d7:1b:13:f3:cb:83:43:95:
6f:c8:9e:f9:0d:0d:c3:19:eb:59:5d:91:9d:1d:fc:d6:25:ae:
e5:69:ba:7b:b0:d1:71:ef:7f:18:26:84:c3:00:c6:09:fa:e5:
ec:ed:ef:f2:a3:49:74:06:c4:d0:a4:7d:3a:c4:77:3c:e0:88:
95:46:1e:a6:68:77:f6:67:bf:72:de:a5:15:41:a6:27:1b:0c:
07:8d:60:eb:55:1e:3d:42:92:85:1e:b9:5e:83:79:e5:fc:de:
8d:af:9d:a3:8a:24:06:af:c0:15:c4:ab:9d:40:f4:50:b7:dd:
4c:bd:03:a9:28:d0:d5:2d:45:ed:4e:9e:97:d1:77:45:02:45:
df:79:cb:57:f8:ad:8d:5f:c9:70:3d:72:6b:32:29:94:a1:9d:
c7:8a:c3:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpJLuRC1s7gf/IZY/Ar8Gn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwODMxMDEyMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODE4YzdkMTZiOWM4MjgxNjYwMTZhOWI4ZDJlNzEzN2VkYzQyOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArauMB8A7HnWqJ9jRlVkvx4PITwJJ
pPr16QbDEvbb2FIz3F5tvrZxPoTWWCyworhm8ekAE9FuI6evpu4GwfiSRBaYyiIs
ffQPhEeS/BtoEfnGO1MRcOQsZ3xCvGgtv/0nTOpEK4v1xCCrsnAwQB98T4Yu7DdJ
Gxcp4a5/HbOhqsB0S0k3YsYi+FmfO+MyqfCCq2hkL47lhmg3ccGsRFIvD4QV72Ll
LgnXYEjdMVDJ7enevjAKmKuWZGS4GbnJNjXHC8k0WGmYPgaMXMdmfcx660fj5t1I
7/+2xauZZsWxQFxVRDWGY+zQy5jS00uahTu3rxa/nrSwF7clGuSjz9FVRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMgYx9FrnIKBZgFqm40ucTftxCkmMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEveUJqSDBXdWNnb0ZtQVdxYmpTNXhOLTNFS1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAARBQRrIb2iZw+8t8esk
Y6XwWFNSSIzwZ+iAktA0T5Vcn/zpQxZ7h4WdWHsoNWPI4fbdh2fJZvuOiU1oCd3I
CU3+vb0HJVKqKX9HfqgXv7GwPBMOXHR1wCBvjh4/nibdgVQoQEbXGxPzy4NDlW/I
nvkNDcMZ61ldkZ0d/NYlruVpunuw0XHvfxgmhMMAxgn65ezt7/KjSXQGxNCkfTrE
dzzgiJVGHqZod/Znv3LepRVBpicbDAeNYOtVHj1CkoUeuV6DeeX83o2vnaOKJAav
wBXEq51A9FC33Uy9A6ko0NUtRe1OnpfRd0UCRd95y1f4rY1fyXA9cmsyKZShnceK
w9Q=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:15 2025 by rpki-client