Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zTFjpmaGx8WNlpihQKqYt_gon1w.roa
File: zTFjpmaGx8WNlpihQKqYt_gon1w.roa (raw, json)
Hash identifier: m1ga4EArcorvCb5SKTqN1kwmz/+JFcOEuZ1fJe7ePQo=
Subject key identifier: CD:31:63:A6:66:86:C7:C5:8D:96:98:A1:40:AA:98:B7:F8:28:9F:5C
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A687D2A34050C488D37409A59900A82AA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zTFjpmaGx8WNlpihQKqYt_gon1w.roa
Signing time: Wed 06 Sep 2023 03:15:47 +0000
ROA not before: Wed 06 Sep 2023 03:15:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:68:7d:2a:34:05:0c:48:8d:37:40:9a:59:90:0a:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 03:15:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd3163a66686c7c58d9698a140aa98b7f8289f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:88:11:24:2b:46:9f:32:33:98:fd:a7:05:
a4:d6:68:1e:99:79:42:07:f5:70:f6:a4:96:7e:81:
67:2c:83:d6:f5:7c:a1:fb:ba:b0:a0:0e:0c:42:ac:
0f:b1:cd:af:3a:59:47:4d:f1:ac:65:ff:09:61:ac:
09:1c:2b:91:1e:a1:ed:d0:d4:a0:a6:2d:b1:c9:e4:
51:dd:1c:29:09:19:ac:1c:15:fc:b5:08:c8:3f:61:
68:8c:5b:d4:00:13:c9:d4:b6:17:3b:67:da:08:a9:
cd:6f:6c:ba:61:98:9d:d6:53:c7:6d:f8:2f:39:f1:
11:2b:33:47:1f:c2:ee:2e:57:a2:05:c7:b7:c6:d9:
0b:f6:3d:cb:dc:ca:ba:fb:5d:59:74:c2:93:43:49:
34:76:f7:1b:0f:58:7c:2b:4a:9a:72:99:84:d7:fa:
c9:cf:6b:47:b8:5c:56:c1:3c:0d:14:64:27:7b:ae:
53:a5:27:03:31:a0:e4:90:33:8e:89:ea:da:37:ac:
a7:15:44:47:a8:21:87:17:34:b9:6e:7d:8b:3f:93:
d0:bf:bc:35:7e:6e:28:bf:a1:dc:64:d9:77:96:50:
dc:33:5a:85:0c:c2:ed:90:8b:67:7d:46:95:d2:15:
34:19:be:55:18:41:12:73:af:99:13:1c:09:77:38:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:63:A6:66:86:C7:C5:8D:96:98:A1:40:AA:98:B7:F8:28:9F:5C
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zTFjpmaGx8WNlpihQKqYt_gon1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:1f:9e:38:90:7c:f5:9f:ed:26:46:16:3e:19:18:14:3f:47:
79:40:99:c5:bb:5a:c3:49:bd:1a:58:a0:0b:f3:c9:0d:77:d1:
0b:26:da:48:cc:44:02:80:77:bc:68:29:29:f2:8b:04:ae:b1:
9c:11:e4:e3:4e:69:7f:fd:04:2f:90:ae:d6:90:09:32:57:25:
08:10:a7:ed:87:b1:1d:57:e4:96:09:38:8c:60:d9:46:78:2c:
3d:e8:b0:48:c9:34:20:c9:d2:6e:57:21:91:e0:fd:b0:93:08:
3b:d4:79:89:a3:48:d6:49:13:62:38:94:4c:5a:f7:b5:35:5b:
d0:23:a9:20:c0:df:eb:1e:5b:54:c5:bc:0e:d2:b3:0c:b2:44:
53:bb:40:e0:b6:0f:e4:c7:21:1a:83:6c:2c:eb:7d:5e:ff:62:
ce:60:fb:a0:89:4e:3b:79:2e:20:01:49:bb:6c:35:6d:e5:01:
c9:75:80:50:d9:cc:f4:b6:1c:a5:04:00:06:1f:24:35:eb:68:
45:4b:21:64:c5:d5:6b:da:66:98:7a:43:c9:c1:bc:a1:06:10:
89:7b:a7:c2:53:3e:4d:b6:0a:e1:f3:78:29:41:d5:45:7c:a8:
53:a4:10:c9:23:f4:a1:1f:97:ac:e8:c8:48:35:a5:df:df:84:
49:a2:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:54 2025 by rpki-client