Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zVgRVmu9zavIzXA0JID12MtJneM.roa
File: zVgRVmu9zavIzXA0JID12MtJneM.roa (raw, json)
Hash identifier: sPWfkd0IpP6WvBg65Tq2oJtuZvsbacu5naQQeRta+I8=
Subject key identifier: CD:58:11:56:6B:BD:CD:AB:C8:CD:70:34:24:80:F5:D8:CB:49:9D:E3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6C57496B17FD400CCFAD1A777702BC07
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zVgRVmu9zavIzXA0JID12MtJneM.roa
Signing time: Wed 06 Sep 2023 21:12:54 +0000
ROA not before: Wed 06 Sep 2023 21:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:57:49:6b:17:fd:40:0c:cf:ad:1a:77:77:02:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 21:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5811566bbdcdabc8cd70342480f5d8cb499de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:77:1d:67:74:21:04:35:80:6a:1b:f3:5c:
94:6f:e3:0d:b1:9a:94:d1:7d:8e:13:a1:e9:8d:75:
ba:9b:11:61:a3:c6:08:aa:96:2b:0a:a8:9b:18:d7:
f0:07:bb:43:a7:34:40:47:70:44:33:37:58:b7:0e:
59:11:96:17:5a:89:31:71:b2:35:75:2b:a2:0d:70:
a9:f3:7d:7c:3e:e5:e4:47:a7:03:e1:87:ca:bf:b2:
a2:63:a4:b8:83:fc:3b:51:39:e3:fa:a1:ab:07:58:
aa:70:a0:f3:41:e8:ff:05:c8:e4:d8:0e:1c:2c:1f:
bb:38:de:fe:a8:ad:9f:54:36:26:94:21:d7:4c:1a:
1b:bf:17:bc:f9:e3:81:68:13:d5:e7:44:72:97:ec:
4d:25:28:11:b6:89:26:57:24:a5:7a:c3:7c:3e:aa:
e1:5e:b9:5b:dc:c8:52:42:5f:bf:b2:26:f7:ca:04:
73:9f:b0:7c:82:ac:8d:e7:c6:24:de:21:78:1c:aa:
e1:8f:6a:1e:77:c3:c5:53:2e:00:d8:8f:b0:a3:7c:
dc:bf:a7:4e:b7:60:65:aa:eb:22:b8:0e:c5:4e:59:
08:d9:bf:83:75:23:23:99:7c:54:6a:e2:4e:2e:d7:
5b:9d:2b:c0:13:34:e7:6f:35:1b:9a:84:00:a8:f9:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:11:56:6B:BD:CD:AB:C8:CD:70:34:24:80:F5:D8:CB:49:9D:E3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zVgRVmu9zavIzXA0JID12MtJneM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:13:d9:f9:ae:cb:ea:19:b2:ae:73:2f:ce:18:8c:65:12:5b:
38:ed:cf:be:6d:0f:97:10:11:5a:58:ab:49:35:b8:ed:62:ad:
2c:bd:58:2c:09:38:5a:7b:de:64:ca:c6:bb:41:4d:c0:4a:9d:
7c:b7:b1:3d:5e:37:bc:c0:e5:c4:89:7b:0c:bb:f2:cb:f0:0b:
51:fe:5a:80:23:22:f6:8c:c3:64:f9:2f:40:cf:12:44:ca:7d:
9e:d9:0e:12:91:d6:bf:2e:f3:f4:f9:ff:c7:37:92:a0:e9:4e:
27:f3:10:df:4c:ba:a8:39:58:89:43:de:04:4b:d0:e6:0a:11:
79:8d:e1:c6:a3:a9:47:41:dd:46:5c:af:3b:89:71:23:14:91:
c6:f1:58:e0:6b:3a:b9:72:67:7f:8d:1e:e8:1e:05:85:cd:36:
06:de:59:22:a9:6a:3f:b8:ae:34:72:44:03:4b:a5:5f:f0:2c:
8c:83:e4:64:e7:67:e2:02:6b:e6:b2:90:9a:25:bc:b9:49:06:
9e:36:dc:21:6b:6d:b9:dd:0f:65:29:ec:f5:b6:89:24:16:a7:
c3:df:b0:59:71:81:d5:f3:af:f0:e4:c9:c0:82:ab:9b:88:39:
3d:32:eb:99:53:ac:7d:50:b4:5b:e0:62:31:13:67:c7:0d:ef:
0e:64:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:37 2025 by rpki-client