Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1eUzKllhM0Sa1BlTZaTs2jOq1H0.roa
File: 1eUzKllhM0Sa1BlTZaTs2jOq1H0.roa (raw, json)
Hash identifier: LCkLgKxliah/E0VA7oqsliKkUXc8Dvpbb5huOg1eemY=
Subject key identifier: D5:E5:33:2A:59:61:33:44:9A:D4:19:53:65:A4:EC:DA:33:AA:D4:7D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9281BADC583C23C5FF0809E640530384
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1eUzKllhM0Sa1BlTZaTs2jOq1H0.roa
Signing time: Thu 14 Sep 2023 07:04:50 +0000
ROA not before: Thu 14 Sep 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9281:4865/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:81:ba:dc:58:3c:23:c5:ff:08:09:e6:40:53:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e5332a596133449ad4195365a4ecda33aad47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:31:2f:0f:58:0f:cc:8d:97:df:55:a0:1a:
65:cc:d9:12:6e:df:47:b5:0e:7a:21:f8:30:53:37:
5c:45:54:22:06:bc:93:f2:c4:b1:38:68:21:55:07:
0c:05:99:e1:83:1a:60:94:b0:60:5f:b9:4d:66:8c:
ff:6f:2f:9b:3d:31:63:cf:97:fc:be:6b:66:d6:37:
a9:39:e1:cb:db:bd:bd:74:f4:1c:0b:a5:11:35:ea:
06:de:9a:59:cd:a5:3a:c6:9a:97:b8:02:3d:5d:44:
b6:92:9e:9a:43:98:c2:af:13:60:39:75:cf:e9:ce:
5e:c1:5a:0d:6e:72:0b:32:71:39:9a:a0:7d:68:bd:
19:53:71:fe:32:16:1e:0e:13:d5:26:a5:ea:fb:f9:
3d:8f:f4:df:dd:9c:9f:45:d7:3a:ff:37:d8:be:33:
81:94:9c:e6:89:de:b3:bd:4a:f3:7a:a1:3a:47:96:
84:4b:e9:54:cf:4f:76:e1:49:ab:01:87:4c:ab:db:
9e:bf:c2:4f:57:d6:60:1d:84:b5:ca:17:64:ca:2e:
12:2a:8e:ee:a0:da:65:aa:33:ef:d7:00:56:da:bf:
2b:bf:2e:51:bb:32:9e:90:d6:bd:c6:b6:2f:69:0f:
1b:da:39:23:0e:a4:41:6f:21:d9:d2:f2:e0:ed:ae:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:33:2A:59:61:33:44:9A:D4:19:53:65:A4:EC:DA:33:AA:D4:7D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1eUzKllhM0Sa1BlTZaTs2jOq1H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:1a:d6:a5:76:ce:83:b4:63:ba:f0:37:74:97:f4:c1:3e:b4:
f6:8e:22:e6:81:84:37:00:db:b4:58:4b:3e:4b:12:bc:ef:61:
2f:a5:44:5a:e3:da:63:5a:59:83:bb:fb:6a:c9:8d:20:18:4e:
52:45:c6:68:90:e1:30:d8:67:4f:44:25:16:00:b3:76:3c:d8:
21:2a:43:59:57:2a:71:f4:02:64:42:e7:a8:72:f6:23:4c:38:
12:aa:da:89:ba:96:3e:64:e0:5b:d4:37:77:e2:56:f2:5f:ca:
3b:a1:c0:fa:67:58:70:8a:eb:5c:ea:6a:4d:01:91:b4:91:16:
6d:ef:ca:16:03:75:8a:89:24:46:40:62:f4:0c:ac:7c:14:41:
29:02:0f:57:3d:3d:57:7a:9f:e9:1f:b2:e0:ca:07:a2:5f:f6:
f0:f3:4f:db:12:b2:7b:9c:a8:b2:6e:34:b6:fb:c7:ec:01:6e:
0f:84:e3:18:2f:71:45:ea:94:40:bb:53:0b:f5:95:ba:b8:3c:
cd:47:f1:07:7e:b4:a2:d9:3f:a0:79:57:4a:4b:24:5a:cf:f5:
bb:f5:b9:24:6c:6f:06:24:7c:9d:75:3e:19:02:f1:39:c3:b5:
42:df:32:43:8a:f9:54:9b:18:a8:37:e5:2b:53:1c:78:dd:ac:
38:00:83:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqSgbrcWDwjxf8ICeZAUwOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWU1MzMyYTU5NjEzMzQ0OWFkNDE5NTM2NWE0ZWNkYTMzYWFkNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaMxLw9YD8yNl99VoBplzNkSbt9H
tQ56IfgwUzdcRVQiBryT8sSxOGghVQcMBZnhgxpglLBgX7lNZoz/by+bPTFjz5f8
vmtm1jepOeHL2729dPQcC6URNeoG3ppZzaU6xpqXuAI9XUS2kp6aQ5jCrxNgOXXP
6c5ewVoNbnILMnE5mqB9aL0ZU3H+MhYeDhPVJqXq+/k9j/Tf3ZyfRdc6/zfYvjOB
lJzmid6zvUrzeqE6R5aES+lUz0924UmrAYdMq9uev8JPV9ZgHYS1yhdkyi4SKo7u
oNplqjPv1wBW2r8rvy5RuzKekNa9xrYvaQ8b2jkjDqRBbyHZ0vLg7a74XwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNXlMypZYTNEmtQZU2Wk7NozqtR9MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMWVVektsbGhNMFNhMUJsVFphVHMyak9xMUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKMa1qV2zoO0Y7rwN3SX
9ME+tPaOIuaBhDcA27RYSz5LErzvYS+lRFrj2mNaWYO7+2rJjSAYTlJFxmiQ4TDY
Z09EJRYAs3Y82CEqQ1lXKnH0AmRC56hy9iNMOBKq2om6lj5k4FvUN3fiVvJfyjuh
wPpnWHCK61zqak0BkbSRFm3vyhYDdYqJJEZAYvQMrHwUQSkCD1c9PVd6n+kfsuDK
B6Jf9vDzT9sSsnucqLJuNLb7x+wBbg+E4xgvcUXqlEC7Uwv1lbq4PM1H8Qd+tKLZ
P6B5V0pLJFrP9bv1uSRsbwYkfJ11PhkC8TnDtULfMkOK+VSbGKg35StTHHjdrDgA
g+s=
-----END CERTIFICATE-----
Generated at Sun May 11 23:28:31 2025 by rpki-client