Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zIaKA8KNmQQewkeIiJeuXNi5e0w.roa
File: zIaKA8KNmQQewkeIiJeuXNi5e0w.roa (raw, json)
Hash identifier: gr/Tk8OMIvXy9L05jJDHHWjn9ex3kD9oMyD2qG3ik24=
Subject key identifier: CC:86:8A:03:C2:8D:99:04:1E:C2:47:88:88:97:AE:5C:D8:B9:7B:4C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAC79605EE8628283B806E472BC28245C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zIaKA8KNmQQewkeIiJeuXNi5e0w.roa
Signing time: Tue 19 Sep 2023 08:05:50 +0000
ROA not before: Tue 19 Sep 2023 08:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ac78:75ef/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:79:60:5e:e8:62:82:83:b8:06:e4:72:bc:28:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 08:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc868a03c28d99041ec247888897ae5cd8b97b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:09:ca:86:2a:a5:26:0c:e7:dc:d8:40:83:
3e:55:b4:9e:96:ce:65:27:8a:96:de:9d:62:d6:00:
cb:b4:cb:d9:b3:ca:54:f1:70:ce:95:0a:db:dc:51:
97:06:06:b3:7a:09:35:63:11:04:4e:c1:9b:3d:5f:
54:38:57:f7:e7:97:8a:11:52:c6:af:0e:46:ed:21:
be:a1:97:37:96:83:59:ee:72:ba:70:a1:9b:7b:40:
3b:ca:55:4a:47:44:81:85:9c:3d:65:c8:63:19:8d:
bb:a8:58:04:bf:35:ca:03:c2:a8:d2:46:e0:1a:6e:
25:ee:87:88:73:3c:4c:a3:26:d2:c2:1c:67:42:2a:
86:ae:c1:00:1f:9f:f9:22:57:74:3b:56:36:e2:83:
94:01:d1:53:4e:8f:71:82:68:6c:97:b3:75:71:ab:
d4:68:ab:73:3f:89:a6:f8:db:a4:ae:71:d7:da:8c:
b7:8f:9b:e6:08:3e:39:af:a6:c4:2b:d2:17:a2:2c:
c5:28:ef:d1:9f:e4:b0:c3:f1:43:c4:ed:a6:56:f3:
d1:18:93:55:80:7d:3f:94:2b:85:7f:54:6d:12:f9:
56:34:f3:0c:9d:3f:3a:69:26:cd:54:6a:20:ef:79:
3f:59:8c:fa:90:44:9f:b7:1a:fd:fe:3f:f7:b3:e6:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:8A:03:C2:8D:99:04:1E:C2:47:88:88:97:AE:5C:D8:B9:7B:4C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zIaKA8KNmQQewkeIiJeuXNi5e0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:ca:71:1b:95:f9:1b:60:43:62:fd:cf:cb:a1:e3:27:fd:52:
89:ab:29:0e:60:45:dc:6e:df:17:74:df:68:a8:ed:b5:11:91:
01:b5:28:46:92:89:17:a6:d8:e6:d5:73:0b:0f:70:20:92:3f:
ae:f1:7c:aa:db:a4:41:48:5c:82:f6:36:be:d4:20:f5:04:ec:
95:fe:f8:ef:b8:ed:03:b3:66:f1:99:aa:cc:94:0d:7d:98:85:
d5:6c:aa:09:1f:b2:dd:6f:3e:8d:35:87:df:6b:5b:5f:63:7c:
65:fc:a6:95:e8:33:28:b8:4c:1d:d4:46:3c:f3:46:55:1c:a6:
56:8b:fd:09:97:93:d2:3b:8e:50:cf:16:cf:1c:c0:68:27:38:
b0:fd:89:0f:b9:db:9a:e6:8e:ea:28:49:0a:73:11:5e:3a:3e:
08:12:38:e7:34:39:a4:4c:6a:d5:9b:a9:ac:57:78:ce:03:52:
09:5d:dc:3c:b5:96:8e:f3:f1:76:18:89:48:e4:ab:8b:d2:79:
29:19:6c:df:51:0f:9c:b6:e0:d5:35:4e:bb:25:56:65:f1:c0:
e2:18:66:14:63:6d:87:9a:10:76:74:d6:a0:cb:c3:1d:aa:7f:
8f:35:af:c8:0a:01:a9:96:35:bb:2a:2d:c1:0f:40:8c:37:28:
93:73:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:59 2025 by rpki-client